Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/EpKlZvm1sQunk4TyUL8-X4yYT-s.roa
File: EpKlZvm1sQunk4TyUL8-X4yYT-s.roa (raw, json)
Hash identifier: tOu5I+gySB5LV5V4nchtnSTJlY0KTUc/ZBP+vEiIXg8=
Subject key identifier: 12:92:A5:66:F9:B5:B1:0B:A7:93:84:F2:50:BF:3E:5F:8C:98:4F:EB
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 019E919521350349325A1084A3DC3EE5D9D7
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/EpKlZvm1sQunk4TyUL8-X4yYT-s.roa
Signing time: Thu 04 Jun 2026 07:42:09 +0000
ROA not before: Thu 04 Jun 2026 07:42:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 46.227.72.0/21 maxlen: 21
78.40.40.0/21 maxlen: 21
81.21.208.0/20 maxlen: 20
81.27.0.0/20 maxlen: 20
82.145.128.0/19 maxlen: 19
82.214.0.0/18 maxlen: 18
93.94.168.0/21 maxlen: 21
185.53.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:95:21:35:03:49:32:5a:10:84:a3:dc:3e:e5:d9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jun 4 07:42:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1292a566f9b5b10ba79384f250bf3e5f8c984feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:4a:d7:29:28:65:d6:01:2f:2e:63:99:31:
9c:b5:72:1f:ed:57:73:81:8b:99:ac:bc:6f:6d:b4:
8c:0a:25:7c:59:7a:c0:62:62:2b:fb:eb:6d:aa:fa:
2a:79:52:03:ee:5f:4c:37:6d:32:0e:76:d0:7b:00:
19:d5:33:97:5b:02:d2:94:59:b4:fc:20:f4:cc:01:
b9:c9:e0:94:c2:ca:ae:95:ba:8b:6a:4c:0b:5f:aa:
a7:e9:d6:ea:53:d4:95:ee:c6:9b:02:d3:42:7e:50:
8f:bc:1f:3b:cf:91:58:3d:05:8a:d4:d8:99:95:b3:
a3:27:4e:46:6a:fe:7e:68:7f:bd:69:9a:f0:7e:c1:
de:6e:96:60:7d:e8:65:02:02:2e:9f:82:e6:96:f0:
5f:95:88:69:cd:58:26:13:9d:e7:5f:72:45:10:ed:
8f:f5:82:00:06:16:7c:54:cc:8a:e0:c4:6b:24:c1:
3b:e0:7e:f1:d2:1a:d5:52:41:83:df:89:19:ea:83:
08:4c:d4:28:15:53:29:71:76:23:e7:6a:41:56:79:
6d:32:16:6b:4a:a2:67:ca:0c:47:4b:4a:17:1d:8f:
95:1e:12:82:70:fd:27:81:55:bb:9b:6c:9e:39:63:
56:17:a9:b0:03:de:c3:46:9a:1b:49:b7:bf:e1:57:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:92:A5:66:F9:B5:B1:0B:A7:93:84:F2:50:BF:3E:5F:8C:98:4F:EB
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/EpKlZvm1sQunk4TyUL8-X4yYT-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.72.0/21
78.40.40.0/21
81.21.208.0/20
81.27.0.0/20
82.145.128.0/19
82.214.0.0/18
93.94.168.0/21
185.53.212.0/22
Signature Algorithm: sha256WithRSAEncryption
62:39:d1:f0:65:e1:87:5b:be:46:96:63:a0:50:6d:fd:48:bf:
bf:f0:ab:41:62:0a:c8:7f:b8:d1:ff:94:a3:06:c0:52:3a:4f:
f0:cc:79:38:04:36:a9:13:98:3c:c1:f6:53:ac:79:9a:3d:d4:
31:05:e8:d0:40:7f:3b:49:06:3e:23:3b:5d:e7:2b:03:7d:a5:
f5:41:1c:c1:2e:3b:04:08:90:03:e9:0d:84:03:45:44:5f:fc:
bc:13:a6:76:17:b4:69:11:89:e9:95:9e:60:92:f2:72:0c:42:
21:6c:ed:09:8d:71:d4:1d:5d:9e:9b:d9:d0:a0:69:1c:df:8d:
f7:6f:cd:aa:26:5c:6f:5d:15:41:28:ab:9c:b0:00:56:0c:f3:
86:92:84:91:80:dd:49:d6:53:92:c6:43:3a:08:51:57:1d:5c:
cd:d6:b5:4a:68:48:49:bb:fd:cb:b7:36:b4:4a:93:52:82:e5:
1e:5b:e2:af:dd:a5:83:5d:62:9c:27:a4:6f:85:21:92:55:ca:
34:29:85:68:2d:a8:06:ff:07:be:a3:cd:bf:ed:45:e9:91:0f:
dd:65:3f:25:c8:82:52:0f:8e:69:45:97:bf:47:9a:95:16:c3:
73:fd:48:50:69:63:c6:5e:59:28:9a:b1:6e:26:4a:ae:bb:54:
3e:7f:4a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:39:09 2026 by rpki-client