Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/eqX4HCtONznBtdkM0Yv1tIipxwA.roa
File: eqX4HCtONznBtdkM0Yv1tIipxwA.roa (raw, json)
Hash identifier: MDuAY2fOHyll6nWj4kl7aul/nqNWMDpsUW4/eoDcPJk=
Subject key identifier: 7A:A5:F8:1C:2B:4E:37:39:C1:B5:D9:0C:D1:8B:F5:B4:88:A9:C7:00
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A0146C28FA3FC0FF856575C7B2186F3438
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/eqX4HCtONznBtdkM0Yv1tIipxwA.roa
Signing time: Tue 18 Aug 2026 10:30:27 +0000
ROA not before: Tue 18 Aug 2026 10:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 213.182.197.0/24 maxlen: 24
213.182.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:6c:28:fa:3f:c0:ff:85:65:75:c7:b2:18:6f:34:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 18 10:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7aa5f81c2b4e3739c1b5d90cd18bf5b488a9c700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:51:9c:0e:cc:bd:43:01:be:44:c5:e1:ab:
7b:87:2a:30:45:16:ce:9a:75:ec:ab:d4:8d:fa:7e:
5d:0a:be:fb:47:c1:70:7b:ba:35:31:e8:b6:6d:0f:
c6:dc:42:a3:95:99:08:2c:e3:d3:f7:11:d0:47:a3:
da:97:6a:67:e0:52:75:fa:77:0d:fc:7d:c1:df:40:
6a:f8:56:22:79:db:da:f2:e6:4a:3b:5a:0c:0f:44:
a9:13:bb:e7:2d:5f:94:90:dd:f3:3a:3f:da:f2:92:
39:72:67:68:3e:c7:49:eb:49:c4:80:ef:ee:e7:22:
4a:49:a1:4b:74:9a:58:8a:a4:8f:ec:63:53:b5:ac:
bb:21:12:40:d3:0b:01:85:f9:7c:a3:de:78:3f:6a:
48:16:7b:d4:49:6e:bb:85:a7:44:1e:8b:46:a7:e5:
78:58:02:bc:91:5b:d4:a9:f1:81:8f:21:b8:6b:94:
0f:fe:56:a9:12:79:76:c8:40:12:ed:aa:8f:ce:ee:
c6:bf:7b:dd:6d:f5:01:27:42:23:f3:bb:7f:8e:75:
ae:65:ee:b3:30:d0:5a:15:2f:1d:86:b7:2f:ce:cf:
62:f9:f5:5b:f2:1e:2d:63:e2:2c:35:4b:ec:0d:02:
dc:a0:84:4d:5b:3d:ec:81:e2:d8:14:f5:71:ad:8f:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A5:F8:1C:2B:4E:37:39:C1:B5:D9:0C:D1:8B:F5:B4:88:A9:C7:00
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/eqX4HCtONznBtdkM0Yv1tIipxwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.197.0/24
213.182.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f1:7a:72:c4:03:25:a6:f7:b9:2e:6f:bc:81:b8:e1:9a:9f:
26:09:fb:ac:3d:6c:b3:13:42:f8:d2:de:07:0c:dc:5c:58:ed:
b3:62:57:84:ed:b2:71:c4:1d:fd:71:43:9c:4a:64:94:80:23:
cb:99:4c:ac:86:d9:0a:55:84:62:96:3c:92:29:f9:26:ff:5f:
63:43:89:fb:a6:46:a8:50:e0:6e:30:7b:33:62:85:4b:57:d9:
87:4a:ce:14:35:2b:1b:14:a7:e9:e1:7f:b6:87:ed:28:d6:38:
63:9e:cb:18:0f:99:8f:92:c5:a8:52:5a:33:14:20:2c:cf:3f:
de:0a:f0:9b:8f:d5:68:98:04:c8:90:00:c7:87:e6:e2:94:ac:
9f:10:00:86:c9:18:33:25:84:b1:d7:4a:d5:e6:63:b2:82:f3:
a9:77:bd:00:3a:1f:02:3b:d5:6f:c7:61:c8:ef:7d:8b:50:b3:
15:34:4b:7b:d9:e2:3e:c2:b0:d5:8c:a4:5f:e9:4a:d4:e9:2e:
0c:44:1b:84:ce:45:33:57:28:25:7f:1c:fe:30:47:48:be:cf:
bd:57:d8:81:e4:43:9e:fd:d5:62:8d:93:f2:24:46:57:d2:c6:
e0:6a:5d:1f:ea:0a:b5:cb:b2:10:74:e2:55:79:1c:73:d7:70:
77:87:37:0e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAUbCj6P8D/hWV1x7IYbzQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjYwODE4MTAzMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWE1ZjgxYzJiNGUzNzM5YzFiNWQ5MGNkMThiZjViNDg4YTljNzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0StRnA7MvUMBvkTF4at7hyowRRbO
mnXsq9SN+n5dCr77R8Fwe7o1Mei2bQ/G3EKjlZkILOPT9xHQR6Pal2pn4FJ1+ncN
/H3B30Bq+FYiedva8uZKO1oMD0SpE7vnLV+UkN3zOj/a8pI5cmdoPsdJ60nEgO/u
5yJKSaFLdJpYiqSP7GNTtay7IRJA0wsBhfl8o954P2pIFnvUSW67hadEHotGp+V4
WAK8kVvUqfGBjyG4a5QP/lapEnl2yEAS7aqPzu7Gv3vdbfUBJ0Ij87t/jnWuZe6z
MNBaFS8dhrcvzs9i+fVb8h4tY+IsNUvsDQLcoIRNWz3sgeLYFPVxrY/k5wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHql+BwrTjc5wbXZDNGL9bSIqccAMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvZXFYNEhDdE9Oem5CdGRrTTBZdjF0SWlweHdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1bbFAwQA
1bbaMA0GCSqGSIb3DQEBCwUAA4IBAQAd8XpyxAMlpve5Lm+8gbjhmp8mCfusPWyz
E0L40t4HDNxcWO2zYleE7bJxxB39cUOcSmSUgCPLmUyshtkKVYRiljySKfkm/19j
Q4n7pkaoUOBuMHszYoVLV9mHSs4UNSsbFKfp4X+2h+0o1jhjnssYD5mPksWoUloz
FCAszz/eCvCbj9VomATIkADHh+bilKyfEACGyRgzJYSx10rV5mOygvOpd70AOh8C
O9Vvx2HI732LULMVNEt72eI+wrDVjKRf6UrU6S4MRBuEzkUzVyglfxz+MEdIvs+9
V9iB5EOe/dVijZPyJEZX0sbgal0f6gq1y7IQdOJVeRxz13B3hzcO
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:08:06 2026 by rpki-client