Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EmyxfJOjSddQW3OkqP4XfrBRPQM.roa
File: EmyxfJOjSddQW3OkqP4XfrBRPQM.roa (raw, json)
Hash identifier: JxQ23FeLisgq+Jy4auSyVnsI6/5sbTTYSlYx6aX4olA=
Subject key identifier: 12:6C:B1:7C:93:A3:49:D7:50:5B:73:A4:A8:FE:17:7E:B0:51:3D:03
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368F20F4EC0447AED403289F9090248
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EmyxfJOjSddQW3OkqP4XfrBRPQM.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211415
IP address blocks: 89.213.123.0/24 maxlen: 24
109.176.29.0/24 maxlen: 24
109.176.31.0/24 maxlen: 24
213.218.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f2:0f:4e:c0:44:7a:ed:40:32:89:f9:09:02:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=126cb17c93a349d7505b73a4a8fe177eb0513d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:2c:27:99:3e:c3:e7:86:4a:4c:f0:34:59:
f5:12:b0:d7:c4:1b:84:5b:87:9a:c6:fb:42:85:4e:
75:ce:7c:f3:1b:d4:1e:43:22:8f:50:b0:1a:13:01:
56:3f:68:fc:90:86:fa:0b:23:35:7d:41:e5:bb:df:
24:05:7a:bb:82:15:a6:2d:c6:26:d8:f0:69:33:b1:
b5:86:a0:45:18:4f:71:c5:71:89:09:c4:5b:7a:fd:
ef:2a:36:60:a3:0f:a3:7c:f8:85:2d:5e:80:d8:8c:
50:0e:b4:42:77:0a:e1:20:ca:81:41:2d:31:21:fc:
af:e2:bb:71:78:0d:30:d5:59:11:7e:b1:1c:7a:26:
39:b7:8f:36:18:63:1e:5d:34:ce:c6:88:73:1a:bb:
e0:97:51:61:3c:af:ad:8b:b5:67:ea:e2:68:7e:5f:
58:34:ce:fe:95:75:7a:13:b5:4b:e9:50:98:d8:23:
ea:d1:80:99:df:c9:2b:22:5f:47:0d:b5:3d:3b:5a:
a5:68:17:83:64:7b:e5:b5:1d:46:64:10:a3:fc:66:
10:ae:9e:4e:0b:ee:c4:72:9e:42:99:3a:62:3a:32:
66:a2:9a:12:15:d8:a5:3d:8a:89:0f:b8:26:4b:9c:
71:c1:28:19:56:46:a6:ce:04:b7:08:29:b0:ce:bc:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6C:B1:7C:93:A3:49:D7:50:5B:73:A4:A8:FE:17:7E:B0:51:3D:03
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EmyxfJOjSddQW3OkqP4XfrBRPQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.123.0/24
109.176.29.0/24
109.176.31.0/24
213.218.242.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d3:0d:ae:38:60:07:c7:e4:da:eb:bf:e3:9c:5b:73:9b:51:
22:4c:a2:2e:80:4e:51:24:8a:36:9b:c1:cc:71:00:21:37:79:
03:45:2f:e5:9e:31:e4:18:84:f9:77:a5:0d:2b:7b:3d:c9:3a:
ba:10:ac:8a:f3:6b:29:d5:ed:3a:76:d2:54:f4:4c:90:73:b4:
ae:88:4a:f9:cc:0a:ae:5a:17:84:f1:90:9d:cd:22:16:a6:c0:
3a:2b:8e:36:59:0b:39:e9:b0:dc:c3:b4:29:59:98:7a:1b:29:
26:30:65:bd:22:0b:6b:16:08:60:fb:e6:8f:21:c6:ec:2f:05:
66:df:23:68:68:e8:98:d9:4d:a5:7f:a3:d8:ad:9e:c4:e3:57:
53:8e:2c:f7:f4:c4:ae:6b:40:12:2e:c2:29:d1:4f:c7:a1:98:
59:5b:5f:eb:d7:9f:16:2b:7c:ac:50:86:ed:50:d7:12:46:2d:
78:b7:4d:6a:9e:a1:99:37:de:e2:eb:41:dc:d3:62:d1:80:98:
cd:c0:dc:47:21:d7:bf:21:ab:3e:50:c7:7e:15:2e:94:e5:64:
c0:1d:dd:1d:55:28:2d:0d:96:a3:38:89:60:e6:34:6b:ca:6b:
fb:db:eb:e3:56:53:bc:19:72:77:fb:6d:5e:60:1f:26:fa:b0:
1d:6d:e5:66
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ8jaPIPTsBEeu1AMon5CQJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjZjYjE3YzkzYTM0OWQ3NTA1YjczYTRhOGZlMTc3ZWIwNTEzZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7osJ5k+w+eGSkzwNFn1ErDXxBuE
W4eaxvtChU51znzzG9QeQyKPULAaEwFWP2j8kIb6CyM1fUHlu98kBXq7ghWmLcYm
2PBpM7G1hqBFGE9xxXGJCcRbev3vKjZgow+jfPiFLV6A2IxQDrRCdwrhIMqBQS0x
Ifyv4rtxeA0w1VkRfrEceiY5t482GGMeXTTOxohzGrvgl1FhPK+ti7Vn6uJofl9Y
NM7+lXV6E7VL6VCY2CPq0YCZ38krIl9HDbU9O1qlaBeDZHvltR1GZBCj/GYQrp5O
C+7Ecp5CmTpiOjJmopoSFdilPYqJD7gmS5xxwSgZVkamzgS3CCmwzrx3wQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBJssXyTo0nXUFtzpKj+F36wUT0DMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRW15eGZKT2pTZGRRVzNPa3FQNFhmckJSUFFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWdV7AwQA
bbAdAwQAbbAfAwQA1dryMA0GCSqGSIb3DQEBCwUAA4IBAQBF0w2uOGAHx+Ta67/j
nFtzm1EiTKIugE5RJIo2m8HMcQAhN3kDRS/lnjHkGIT5d6UNK3s9yTq6EKyK82sp
1e06dtJU9EyQc7SuiEr5zAquWheE8ZCdzSIWpsA6K442WQs56bDcw7QpWZh6Gykm
MGW9IgtrFghg++aPIcbsLwVm3yNoaOiY2U2lf6PYrZ7E41dTjiz39MSua0ASLsIp
0U/HoZhZW1/r158WK3ysUIbtUNcSRi14t01qnqGZN97i60Hc02LRgJjNwNxHIde/
Ias+UMd+FS6U5WTAHd0dVSgtDZajOIlg5jRrymv72+vjVlO8GXJ3+21eYB8m+rAd
beVm
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:31 2026 by rpki-client