Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/eecvom8n4JLtgexNM8fcFH7TdJ4.roa
File: eecvom8n4JLtgexNM8fcFH7TdJ4.roa (raw, json)
Hash identifier: pycagWbNBnfHXrjwvzl2WdAFZyA61FbnnF3qHunocW4=
Subject key identifier: 79:E7:2F:A2:6F:27:E0:92:ED:81:EC:4D:33:C7:DC:14:7E:D3:74:9E
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 01A15EB10C0F10619DF83B0BCB1142CCC091
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/eecvom8n4JLtgexNM8fcFH7TdJ4.roa
Signing time: Wed 21 Oct 2026 13:40:23 +0000
ROA not before: Wed 21 Oct 2026 13:40:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15465
IP address blocks: 185.181.24.0/24 maxlen: 24
185.181.26.0/24 maxlen: 24
185.181.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:b1:0c:0f:10:61:9d:f8:3b:0b:cb:11:42:cc:c0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Oct 21 13:40:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79e72fa26f27e092ed81ec4d33c7dc147ed3749e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:27:05:ff:85:d1:69:3c:ee:67:77:c2:83:
5f:a8:8f:a9:2b:49:f7:3a:ff:83:ac:8c:51:12:36:
69:bf:2c:b3:9b:5d:60:ed:53:bd:22:ee:c7:53:0f:
24:3c:74:f4:42:8e:19:36:cd:25:bf:2c:56:c3:a1:
5b:a9:bd:e8:c3:50:28:53:11:28:5f:90:21:ff:0d:
dd:f4:6a:4d:46:9d:c9:fd:57:f8:58:29:4a:66:19:
55:12:ee:d9:af:0b:de:49:54:b5:d7:e9:e3:9b:44:
2f:00:f2:20:d1:45:91:94:7b:47:9f:58:d9:16:4e:
55:0f:25:ce:96:46:e5:3f:11:f5:08:75:9e:5c:6e:
0c:3c:e8:f2:45:b9:c7:b2:9c:a9:f0:9c:7f:5c:b2:
b5:70:02:88:1a:c7:7c:82:db:3e:f8:09:17:8e:47:
87:1f:7b:3c:d0:cd:d2:a7:42:7a:aa:b1:a0:d7:f8:
1a:ce:f0:0a:7e:e7:76:10:d8:af:e6:ad:bc:f9:31:
96:f3:39:74:3e:09:be:6f:9a:b6:a7:eb:b8:1e:fc:
78:48:fb:3c:bb:e3:41:a4:79:09:7b:1c:5c:63:ab:
b9:c0:ad:67:7c:76:d7:d5:04:60:85:76:7c:1f:9c:
89:35:ea:1e:2f:b8:25:82:15:04:19:a0:d5:96:4d:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E7:2F:A2:6F:27:E0:92:ED:81:EC:4D:33:C7:DC:14:7E:D3:74:9E
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/eecvom8n4JLtgexNM8fcFH7TdJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.24.0/24
185.181.26.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:89:cb:60:56:64:b5:38:3e:fa:db:3e:f5:98:2b:fe:49:60:
7b:03:ba:eb:d3:51:36:0c:49:81:a8:ab:2d:60:93:6c:fe:7a:
d2:53:1c:26:e8:61:2b:de:50:3f:b0:f5:5c:2e:33:bb:0f:be:
fd:99:c0:88:5e:e6:94:b2:bf:88:08:77:0f:10:b5:28:69:e8:
a7:1b:d2:c9:9b:57:60:b5:c0:c9:7d:b5:90:4e:65:ac:91:b2:
4b:73:69:4a:4a:68:4c:aa:0c:a0:2f:31:9e:96:9c:f5:75:8b:
20:ff:a7:a6:bc:fe:a3:ca:5b:db:f0:e7:24:3c:af:b1:e0:ee:
17:f0:6a:c4:a3:1c:a1:87:8e:c0:1a:62:b7:2b:bf:03:ff:73:
14:58:43:14:53:78:7f:51:dd:23:98:ab:f3:24:30:a1:9e:1d:
ea:f1:5e:19:db:c5:5c:39:0c:d6:10:f4:e1:98:fc:a8:87:90:
70:c8:19:18:a1:71:96:75:32:4b:4f:ea:5e:fe:e0:82:fe:ee:
e2:26:ed:2c:31:41:ef:f3:1e:f3:f1:df:01:4f:fb:97:f8:54:
f1:e7:58:b4:d9:38:b1:8e:07:ce:95:1b:3d:93:51:a8:ee:bf:
9c:98:b7:2f:4c:a6:15:39:5e:98:8b:f3:ab:8f:74:eb:c0:99:
da:c2:04:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:25:16 2026 by rpki-client