Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/EOxVIj3Sie2IfQv4jfC_HIvgjWE.roa
File: EOxVIj3Sie2IfQv4jfC_HIvgjWE.roa (raw, json)
Hash identifier: 9rIdkhVHkM0HnpE09f6CQ4CMqC/86aAC/vOo+2W/3nA=
Subject key identifier: 10:EC:55:22:3D:D2:89:ED:88:7D:0B:F8:8D:F0:BF:1C:8B:E0:8D:61
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 01A0F6A0599BBAC495BF37BD61CF3A852133
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/EOxVIj3Sie2IfQv4jfC_HIvgjWE.roa
Signing time: Thu 01 Oct 2026 08:41:38 +0000
ROA not before: Thu 01 Oct 2026 08:41:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34941
IP address blocks: 85.118.200.0/21 maxlen: 21
85.118.206.0/24 maxlen: 24
185.112.136.0/23 maxlen: 23
185.112.138.0/24 maxlen: 24
185.112.139.0/24 maxlen: 24
2a06:6180::/29 maxlen: 29
2a06:6180::/40 maxlen: 40
2a06:6180:4000::/40 maxlen: 40
2a06:6180:8000::/40 maxlen: 40
2a06:6187::/35 maxlen: 35
2a06:6187:4000::/35 maxlen: 35
2a06:6187:8000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:a0:59:9b:ba:c4:95:bf:37:bd:61:cf:3a:85:21:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Oct 1 08:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10ec55223dd289ed887d0bf88df0bf1c8be08d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:06:29:2a:50:cb:9d:e3:e9:56:e7:33:1e:d3:
53:3c:ea:86:36:01:58:c2:b1:cc:2a:63:1d:c4:57:
10:00:32:a4:6c:07:7c:f6:4e:cb:83:52:88:4b:b2:
97:39:0e:77:6a:ef:87:51:7d:4f:78:6f:a0:05:77:
30:86:b2:5f:0f:c6:2b:5b:89:1d:79:87:19:da:ae:
87:3a:c4:52:d3:1a:e3:5a:c5:30:ee:d8:2e:46:0e:
4d:a8:12:c6:f4:ab:81:c5:cc:15:70:46:d3:6c:26:
52:04:fc:39:9b:9f:98:33:6b:00:eb:ba:52:bd:5e:
b0:53:f7:4d:39:dd:5e:ea:68:26:d7:d8:b1:30:b8:
9c:bd:77:48:9a:0e:fd:d4:55:20:25:0b:03:df:68:
01:19:c9:64:a3:25:e8:84:be:e4:bf:b1:30:ab:b1:
31:d8:dd:1b:e5:7c:36:46:33:7f:57:1a:14:d7:dd:
b8:63:b0:ae:85:a0:bd:78:65:ab:0b:f3:10:f5:49:
4d:48:ec:ef:df:3b:f6:c5:f2:dc:3f:c9:39:0e:83:
2c:89:6d:03:cb:fa:2b:dc:73:43:df:cf:a4:22:76:
61:5b:90:c8:47:2c:ce:c0:09:d6:c4:f7:e1:77:f7:
2c:26:f9:f7:43:36:38:08:9a:40:1b:e5:bc:02:ce:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EC:55:22:3D:D2:89:ED:88:7D:0B:F8:8D:F0:BF:1C:8B:E0:8D:61
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/EOxVIj3Sie2IfQv4jfC_HIvgjWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.200.0/21
185.112.136.0/22
IPv6:
2a06:6180::/29
Signature Algorithm: sha256WithRSAEncryption
63:4a:13:06:1e:b9:8e:ae:02:7a:a4:16:3e:da:6f:5a:08:1b:
f3:35:c1:bc:de:b5:9f:3d:0c:a5:27:e8:22:a3:71:27:a3:20:
72:01:61:9b:d0:67:46:70:02:30:52:82:ff:60:e6:21:25:b8:
42:b9:3c:47:e7:32:12:ab:9f:ae:e2:6a:c5:b9:07:0e:96:6e:
58:c4:85:e5:91:9f:a9:ec:44:d7:14:d3:a8:f4:50:8b:35:64:
79:f7:2a:9b:12:8e:47:a6:e0:ed:11:a0:6d:d7:b6:ad:a8:0f:
6d:cb:46:31:cb:1b:f7:6f:b5:c5:c8:95:ba:e6:c5:a1:a5:39:
d7:03:69:9f:73:af:9e:5e:92:b7:ae:1c:96:87:b5:6d:4a:9d:
90:d6:56:37:53:ad:f8:f1:41:ca:e1:8d:50:d1:e2:77:43:e1:
f3:4d:ef:9f:98:55:6a:70:5f:e2:87:e2:76:5b:6d:35:46:8f:
e7:6b:28:35:73:d3:d8:f2:2f:2c:13:07:92:f7:98:7d:48:88:
3f:9b:4e:4f:ed:6c:38:17:be:38:a7:dc:32:58:31:78:ee:0e:
c6:de:e6:1a:8d:8c:96:33:bb:e3:a0:29:7b:9f:47:aa:61:4c:
41:31:02:dc:51:b3:17:b0:d3:f8:44:ed:52:ec:11:3a:d6:4c:
49:48:1d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:59:21 2026 by rpki-client