Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EeyW6qmN5s1RgbJVjDqrjWL2mHk.roa
File: EeyW6qmN5s1RgbJVjDqrjWL2mHk.roa (raw, json)
Hash identifier: qsQIbWbZLvPM7X/WNwMT/TOVi2XWRF9ZO3bthhszf4U=
Subject key identifier: 11:EC:96:EA:A9:8D:E6:CD:51:81:B2:55:8C:3A:AB:8D:62:F6:98:79
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FB203671144520BA6F2E31FBB222FEDEE
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EeyW6qmN5s1RgbJVjDqrjWL2mHk.roa
Signing time: Thu 30 Jul 2026 07:53:15 +0000
ROA not before: Thu 30 Jul 2026 07:53:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 213.218.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:03:67:11:44:52:0b:a6:f2:e3:1f:bb:22:2f:ed:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 30 07:53:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11ec96eaa98de6cd5181b2558c3aab8d62f69879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ff:74:1e:d7:9d:9c:2b:5e:94:7c:70:13:da:
47:50:4e:08:e1:e3:a1:d7:e1:72:94:c3:13:63:07:
12:2c:b5:eb:32:6e:99:ea:e0:2e:c0:08:c7:be:f7:
d4:65:f2:70:74:76:48:91:25:39:94:ca:88:b2:d7:
a6:c2:0b:3d:4d:34:a9:22:72:8d:eb:6b:ef:aa:3f:
59:dc:aa:a7:d8:a7:c3:c6:a5:62:bb:82:a9:c5:99:
24:e1:2a:cf:92:0d:70:5c:b2:65:1d:a1:e0:03:0b:
d8:6c:2c:f3:23:4f:3e:00:17:61:05:20:d0:f3:a2:
02:18:86:dc:09:42:a9:8e:a6:78:33:2c:56:7f:61:
99:46:33:d9:55:93:67:1a:49:89:c7:6e:88:e5:05:
c8:05:02:18:11:84:42:4b:59:31:6b:42:f6:01:d6:
f3:38:2c:c0:63:d0:2d:81:61:6c:bc:1c:38:97:99:
c0:2e:e6:91:59:e6:bb:79:47:5d:59:1f:21:24:36:
d9:cb:9d:4a:74:75:d5:1a:d5:23:49:1b:fb:8d:f8:
93:56:f0:68:55:cb:44:c9:08:74:ab:67:cd:8c:36:
cc:aa:d9:d6:bd:63:a3:0d:e0:d1:c2:68:e0:83:33:
76:ff:87:58:a7:42:ba:a4:81:07:30:7d:18:1f:1f:
83:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EC:96:EA:A9:8D:E6:CD:51:81:B2:55:8C:3A:AB:8D:62:F6:98:79
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EeyW6qmN5s1RgbJVjDqrjWL2mHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.236.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d7:95:e7:68:bc:9a:0c:ac:3d:b2:7e:15:76:7f:ab:df:43:
40:15:f8:77:73:af:cc:2b:b6:f2:cc:c8:75:1a:d5:8e:58:a1:
90:4f:73:8d:bc:10:ad:e7:85:a8:44:fd:59:6f:97:32:a4:ab:
32:d8:a9:c8:85:68:fa:17:70:80:db:79:5b:44:51:58:9d:dd:
98:14:d5:31:4f:cb:e6:81:54:b4:8a:df:0c:eb:94:eb:2f:18:
75:6f:ee:34:81:fc:a9:89:af:60:1d:be:bc:4c:22:ca:a8:9e:
85:8c:b3:97:89:86:14:7b:7d:e7:80:27:28:7f:de:bf:65:14:
7c:20:7c:f0:44:29:46:11:29:d3:19:19:76:e9:da:f3:e8:dc:
46:59:ba:3a:56:b2:3d:9c:30:c1:18:c7:4e:05:ec:52:ef:40:
68:66:2a:fc:9e:f0:e9:d0:a6:bb:49:77:1e:5a:a5:fb:50:55:
6a:b3:21:3c:1a:a4:23:ac:21:eb:0b:14:f3:0f:e8:8d:47:de:
e7:a5:47:6c:03:55:2f:df:e6:ac:ab:8b:f3:6e:69:1b:ae:01:
7b:a8:93:57:53:6e:50:66:dc:41:8a:6d:2b:47:8c:b1:5f:4f:
84:86:f3:66:94:d5:d2:da:9d:f7:2a:d4:d9:ef:b0:ae:cb:38:
14:43:2d:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+yA2cRRFILpvLjH7siL+3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzMwMDc1MzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWVjOTZlYWE5OGRlNmNkNTE4MWIyNTU4YzNhYWI4ZDYyZjY5ODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/90HtednCtelHxwE9pHUE4I4eOh
1+FylMMTYwcSLLXrMm6Z6uAuwAjHvvfUZfJwdHZIkSU5lMqIstemwgs9TTSpInKN
62vvqj9Z3Kqn2KfDxqViu4KpxZkk4SrPkg1wXLJlHaHgAwvYbCzzI08+ABdhBSDQ
86ICGIbcCUKpjqZ4MyxWf2GZRjPZVZNnGkmJx26I5QXIBQIYEYRCS1kxa0L2Adbz
OCzAY9AtgWFsvBw4l5nALuaRWea7eUddWR8hJDbZy51KdHXVGtUjSRv7jfiTVvBo
VctEyQh0q2fNjDbMqtnWvWOjDeDRwmjggzN2/4dYp0K6pIEHMH0YHx+D5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBHsluqpjebNUYGyVYw6q41i9ph5MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRWV5VzZxbU41czFSZ2JKVmpEcXJqV0wybUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1drsMA0G
CSqGSIb3DQEBCwUAA4IBAQAY15XnaLyaDKw9sn4Vdn+r30NAFfh3c6/MK7byzMh1
GtWOWKGQT3ONvBCt54WoRP1Zb5cypKsy2KnIhWj6F3CA23lbRFFYnd2YFNUxT8vm
gVS0it8M65TrLxh1b+40gfypia9gHb68TCLKqJ6FjLOXiYYUe33ngCcof96/ZRR8
IHzwRClGESnTGRl26drz6NxGWbo6VrI9nDDBGMdOBexS70BoZir8nvDp0Ka7SXce
WqX7UFVqsyE8GqQjrCHrCxTzD+iNR97npUdsA1Uv3+asq4vzbmkbrgF7qJNXU25Q
ZtxBim0rR4yxX0+EhvNmlNXS2p33KtTZ77CuyzgUQy0t
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:29 2026 by rpki-client