Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/EEMFTvlrN07wvKNuNLCLD2MHLrY.roa
File: EEMFTvlrN07wvKNuNLCLD2MHLrY.roa (raw, json)
Hash identifier: dhxAWdKgbkSPHF1Jcc15m1VWyoVYzFhfM6bx8pX+HCI=
Subject key identifier: 10:43:05:4E:F9:6B:37:4E:F0:BC:A3:6E:34:B0:8B:0F:63:07:2E:B6
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019FF165D8070A1023A29275CA831CD96207
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/EEMFTvlrN07wvKNuNLCLD2MHLrY.roa
Signing time: Tue 11 Aug 2026 15:16:51 +0000
ROA not before: Tue 11 Aug 2026 15:16:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209133
IP address blocks: 187.13.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:65:d8:07:0a:10:23:a2:92:75:ca:83:1c:d9:62:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Aug 11 15:16:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1043054ef96b374ef0bca36e34b08b0f63072eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:b4:41:f5:29:a4:03:70:b2:c4:e1:22:47:
09:b1:ad:96:77:ff:20:24:d7:a1:9b:62:15:e1:e2:
30:1c:35:b8:60:b5:c0:de:b0:e9:03:a6:3b:32:19:
86:80:ad:e4:df:68:70:fd:86:78:c5:ea:83:fd:6c:
01:cd:c2:68:70:82:9a:41:cf:fa:28:7d:db:19:40:
10:24:99:c3:41:ca:5b:44:eb:75:45:db:da:e0:c7:
69:7a:27:e2:20:3e:89:56:25:ad:4b:8e:d3:69:af:
90:ea:a3:40:6e:d1:65:38:c4:a7:4e:0b:16:fe:5d:
82:62:4f:68:39:db:98:7b:d5:a0:37:56:61:66:09:
67:44:23:25:8c:38:02:8f:4f:a6:aa:ee:a6:98:4b:
8b:08:fc:03:b9:84:42:e8:15:9c:9f:de:ab:10:45:
9c:2a:27:63:96:4e:81:8d:b6:34:e6:1b:f4:e9:a8:
87:b6:56:d1:35:ad:b9:9e:f5:b3:fd:01:8e:4c:1f:
ec:45:7f:f5:c5:ba:43:64:6e:05:51:64:7b:54:6a:
a5:86:87:9b:42:d6:22:7b:66:d4:23:d4:de:3f:c7:
2c:14:99:ba:f1:d0:0f:7a:3f:b6:57:11:b8:18:84:
6d:cb:38:fc:88:08:dc:d0:77:10:e9:96:36:36:48:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:43:05:4E:F9:6B:37:4E:F0:BC:A3:6E:34:B0:8B:0F:63:07:2E:B6
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/EEMFTvlrN07wvKNuNLCLD2MHLrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.13.69.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:0a:61:82:5a:f0:a2:5c:9e:e8:95:91:b1:0e:f6:63:5e:2c:
eb:7a:72:27:c2:1e:be:4e:ae:ff:2d:db:b0:70:47:99:56:85:
4a:c5:c3:df:51:a6:ec:5a:75:ec:21:ae:e9:e2:ae:f5:c2:c7:
48:08:b8:da:32:ba:58:5a:48:c2:4b:2c:66:6b:57:ea:dd:59:
0d:33:a6:e6:9f:be:9d:98:81:a0:42:23:ed:e7:d9:dc:77:a4:
8c:54:fa:31:5f:e6:0a:45:28:f5:31:21:97:7a:cc:e0:30:ce:
86:07:c6:44:92:d8:53:c0:5c:a7:4e:b1:d5:94:c5:f1:a7:f8:
41:b8:18:c1:23:e9:f6:bc:bc:8e:d4:d1:7f:93:9b:25:f7:34:
1a:d9:c4:62:b3:04:58:62:ec:89:c7:b3:78:bb:d2:02:7c:53:
a2:fe:3e:97:c2:0d:a9:bf:3b:5e:d4:ac:ff:d5:8f:8a:fb:97:
da:90:86:83:31:f2:98:a9:92:85:45:89:cd:75:46:bf:12:11:
bf:6e:84:5c:cc:21:83:24:72:c4:d9:84:e4:7b:cc:54:d1:0a:
c3:3b:84:fd:22:f3:7f:0b:e6:a0:1b:57:a2:65:b6:4d:a8:ce:
7c:17:c8:17:d6:27:8b:fb:2d:ab:57:48:b6:8a:ce:e0:f6:7e:
79:e7:9c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:23 2026 by rpki-client