Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EUp_KlANOs8pCulqXpJ5Bw6KYPY.roa
File: EUp_KlANOs8pCulqXpJ5Bw6KYPY.roa (raw, json)
Hash identifier: II34Qg2M9OI9tr45zW4/WQpbc2bbQpI5QzbSIQiySUw=
Subject key identifier: 11:4A:7F:2A:50:0D:3A:CF:29:0A:E9:6A:5E:92:79:07:0E:8A:60:F6
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A1A0794651D9F2C4D77C11FAC991DE8DAC
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EUp_KlANOs8pCulqXpJ5Bw6KYPY.roa
Signing time: Tue 03 Nov 2026 08:14:24 +0000
ROA not before: Tue 03 Nov 2026 08:14:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198383
IP address blocks: 109.176.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 08:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:79:46:51:d9:f2:c4:d7:7c:11:fa:c9:91:de:8d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Nov 3 08:14:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=114a7f2a500d3acf290ae96a5e9279070e8a60f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:aa:50:31:0f:a0:6b:58:21:68:da:fe:b8:ac:
f6:ad:a7:7a:e5:ff:81:55:2a:9d:69:bb:a7:43:8d:
13:8b:c3:45:33:60:9d:d5:8b:29:ca:c8:b5:c4:41:
15:30:d9:2e:39:d1:42:54:70:b0:25:59:2f:29:0d:
5f:85:0f:d3:8e:05:27:00:3d:f0:e5:2f:1c:ff:23:
ae:e8:4c:b4:f9:44:ae:e3:e5:75:45:fd:37:af:3f:
03:17:59:ec:3e:61:d3:7e:ef:73:84:da:a1:ab:92:
b6:50:f0:2c:3f:30:01:64:12:f1:cc:6a:f5:25:72:
a0:94:24:e2:e6:db:6c:89:3a:32:8e:f4:04:29:6a:
c1:d5:3e:00:d8:54:bf:58:ea:fd:be:63:11:ac:ca:
b2:0b:61:29:2a:cb:e0:b1:ad:d8:fb:17:8d:8e:d6:
cf:0b:ad:5e:96:19:dc:7f:ab:ce:5d:0a:42:92:f9:
bb:c5:f9:36:72:97:33:d6:5a:03:11:51:6f:ec:81:
e3:e7:fa:bb:9b:0f:fc:00:41:7f:9f:46:2a:7f:08:
96:64:b9:ee:30:82:72:64:da:22:17:e1:ba:c1:ee:
1b:85:da:12:d2:57:79:b0:10:9a:3d:f1:a4:82:1f:
8c:49:7e:b6:5e:23:e4:e1:c3:68:a7:cd:b4:fc:a1:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4A:7F:2A:50:0D:3A:CF:29:0A:E9:6A:5E:92:79:07:0E:8A:60:F6
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EUp_KlANOs8pCulqXpJ5Bw6KYPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.204.0/23
Signature Algorithm: sha256WithRSAEncryption
51:cb:f5:96:79:e6:db:00:d6:61:a5:9f:c0:3f:fb:fd:f9:c1:
d7:b9:3d:31:65:13:44:6d:02:0a:70:9f:f3:57:0e:41:61:e5:
7c:cf:20:46:b3:8a:cf:a5:29:7b:33:81:d8:fb:60:eb:5b:79:
59:1b:b2:63:96:d2:e2:a2:95:69:88:c4:41:b9:20:57:d5:11:
01:a4:1d:b4:4d:df:f3:c5:00:b8:9e:28:39:e2:48:c0:21:a2:
63:97:41:20:30:7f:39:99:df:e3:52:03:cc:9f:0c:ec:a9:54:
28:b9:94:53:89:f2:95:b4:95:1d:ce:d2:a0:8d:be:b3:44:a3:
67:27:9a:0e:8d:e8:bb:45:f9:76:88:52:a5:65:ce:78:3a:4f:
30:f9:b6:8d:52:63:00:9c:82:4b:a4:4c:5a:09:17:df:65:05:
5f:16:6c:e6:27:45:06:dd:26:28:a5:a2:5d:d7:d8:66:15:61:
5c:47:b4:71:a2:2c:c7:a9:18:e6:e4:4e:dc:de:30:f9:c3:d5:
4a:f8:70:da:91:72:51:4f:66:77:82:c8:f5:b7:29:7a:4f:d3:
63:6c:91:7b:76:c2:dd:0b:55:10:0a:ac:3b:45:04:a2:f9:15:
7d:72:38:3d:de:16:c0:a1:c5:74:61:ba:93:68:95:4a:66:46:
5b:fe:6c:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGgeUZR2fLE13wR+smR3o2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYxMTAzMDgxNDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTRhN2YyYTUwMGQzYWNmMjkwYWU5NmE1ZTkyNzkwNzBlOGE2MGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6pQMQ+ga1ghaNr+uKz2rad65f+B
VSqdabunQ40Ti8NFM2Cd1Yspysi1xEEVMNkuOdFCVHCwJVkvKQ1fhQ/TjgUnAD3w
5S8c/yOu6Ey0+USu4+V1Rf03rz8DF1nsPmHTfu9zhNqhq5K2UPAsPzABZBLxzGr1
JXKglCTi5ttsiToyjvQEKWrB1T4A2FS/WOr9vmMRrMqyC2EpKsvgsa3Y+xeNjtbP
C61elhncf6vOXQpCkvm7xfk2cpcz1loDEVFv7IHj5/q7mw/8AEF/n0YqfwiWZLnu
MIJyZNoiF+G6we4bhdoS0ld5sBCaPfGkgh+MSX62XiPk4cNop820/KFv0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBFKfypQDTrPKQrpal6SeQcOimD2MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRVVwX0tsQU5PczhwQ3VscVhwSjVCdzZLWVBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbbDMMA0G
CSqGSIb3DQEBCwUAA4IBAQBRy/WWeebbANZhpZ/AP/v9+cHXuT0xZRNEbQIKcJ/z
Vw5BYeV8zyBGs4rPpSl7M4HY+2DrW3lZG7JjltLiopVpiMRBuSBX1REBpB20Td/z
xQC4nig54kjAIaJjl0EgMH85md/jUgPMnwzsqVQouZRTifKVtJUdztKgjb6zRKNn
J5oOjei7Rfl2iFKlZc54Ok8w+baNUmMAnIJLpExaCRffZQVfFmzmJ0UG3SYopaJd
19hmFWFcR7RxoizHqRjm5E7c3jD5w9VK+HDakXJRT2Z3gsj1tyl6T9NjbJF7dsLd
C1UQCqw7RQSi+RV9cjg93hbAocV0YbqTaJVKZkZb/mxn
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:28:54 2026 by rpki-client