Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/eIR10BXCLsp72l5ysNCP8bK50xU.roa
File: eIR10BXCLsp72l5ysNCP8bK50xU.roa (raw, json)
Hash identifier: 4qcDeEXmMpaq3EoAvCzphRrhBELGv9lJYT62WCxaGHk=
Subject key identifier: 78:84:75:D0:15:C2:2E:CA:7B:DA:5E:72:B0:D0:8F:F1:B2:B9:D3:15
Certificate issuer: /CN=160458d154916f29977f87ca6dca3309a44fcf39
Certificate serial: 01A13D76B93B7726627C248E3D6079380803
Authority key identifier: 16:04:58:D1:54:91:6F:29:97:7F:87:CA:6D:CA:33:09:A4:4F:CF:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgRY0VSRbymXf4fKbcozCaRPzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/eIR10BXCLsp72l5ysNCP8bK50xU.roa
Signing time: Thu 15 Oct 2026 02:49:13 +0000
ROA not before: Thu 15 Oct 2026 02:49:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218507
IP address blocks: 2001:678:137c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/FgRY0VSRbymXf4fKbcozCaRPzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/FgRY0VSRbymXf4fKbcozCaRPzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgRY0VSRbymXf4fKbcozCaRPzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:76:b9:3b:77:26:62:7c:24:8e:3d:60:79:38:08:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=160458d154916f29977f87ca6dca3309a44fcf39
Validity
Not Before: Oct 15 02:49:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=788475d015c22eca7bda5e72b0d08ff1b2b9d315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:64:d8:0e:db:dc:91:28:f2:3f:06:64:3c:
58:34:32:22:7b:f1:ba:7d:05:73:7a:35:90:a6:73:
0b:50:6d:0a:3b:ce:58:ed:ee:02:09:c1:85:39:84:
5c:ee:40:74:26:12:29:bc:34:81:81:54:00:f0:0a:
20:f5:98:c3:30:c3:d4:87:57:52:2e:30:cf:f4:e7:
a0:51:72:e2:28:df:fe:0f:2c:74:8e:89:46:65:ab:
ea:4e:0b:7d:5a:7d:89:84:0c:94:a0:d9:8c:f3:78:
27:2e:37:bc:a8:82:b0:b7:30:50:e1:2d:05:9c:7b:
d5:be:a7:4c:41:61:ea:b1:38:5a:7c:5a:af:e1:fb:
40:87:a8:30:95:56:6b:a5:a6:c9:5a:c7:98:5d:3e:
bd:f6:ce:f7:1f:96:9d:16:94:24:3a:34:6a:1b:9a:
42:51:53:36:29:9d:ab:da:7b:22:e0:d7:9a:95:3f:
c6:74:f7:03:af:3a:eb:75:3f:72:23:07:cd:a9:a9:
3e:e6:cb:25:7d:ae:a7:ca:15:e0:17:0e:92:25:ef:
26:f7:d0:8b:7f:c9:0a:89:64:d0:f4:d8:dc:57:1c:
24:8a:6b:58:f7:9d:e0:b3:d1:1a:d2:46:4a:51:5e:
a9:59:cd:69:08:6e:ec:5c:ea:0c:10:ee:c5:12:cc:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:84:75:D0:15:C2:2E:CA:7B:DA:5E:72:B0:D0:8F:F1:B2:B9:D3:15
X509v3 Authority Key Identifier:
keyid:16:04:58:D1:54:91:6F:29:97:7F:87:CA:6D:CA:33:09:A4:4F:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgRY0VSRbymXf4fKbcozCaRPzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/eIR10BXCLsp72l5ysNCP8bK50xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/FgRY0VSRbymXf4fKbcozCaRPzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:137c::/48
Signature Algorithm: sha256WithRSAEncryption
34:10:d8:d5:6c:71:45:a0:23:ec:d1:a3:0f:ef:6b:14:70:da:
dc:fa:ad:5b:02:80:5d:a2:d8:e7:d4:97:f1:a2:b0:4a:b3:72:
bb:55:23:95:82:69:74:ee:c3:79:47:39:4b:7d:3c:71:65:6b:
80:8f:54:a3:85:82:23:a4:ea:0f:c7:96:fc:60:15:a9:b5:68:
b2:c2:07:cc:c5:16:4e:52:fd:40:1a:f2:7d:ea:fd:79:7e:9c:
87:db:84:3b:24:f0:38:fa:8d:de:88:98:96:39:e8:9b:a5:a3:
17:6f:7e:88:1b:5c:7b:75:e3:92:f3:b4:ce:92:46:ac:b9:70:
f4:15:d6:12:2d:33:c4:ae:9d:70:92:f7:b4:2c:cc:5f:ea:b7:
6e:16:95:d0:ba:45:46:06:b8:05:b9:da:c4:2c:de:a2:d7:6b:
3c:b2:62:c6:90:72:8b:e0:39:ef:3d:78:19:fd:ca:60:17:2c:
19:b6:c8:21:fe:98:57:3b:2d:85:7c:7c:d0:53:89:09:7d:71:
c1:47:3c:69:01:1d:03:5a:e5:0d:b1:47:98:82:16:16:1f:5a:
49:b3:d3:1b:47:f1:74:a1:eb:fb:46:95:e4:0b:5b:09:33:74:
3b:2f:f2:f3:59:ba:cb:ae:db:37:5b:a4:35:c5:8b:ec:a4:0a:
9c:c1:b1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:52 2026 by rpki-client