Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/EKcnv9qhpGpev1aB_jHa5xN8hHc.roa
File: EKcnv9qhpGpev1aB_jHa5xN8hHc.roa (raw, json)
Hash identifier: sjroQCUr/g3IudNQS95pBre/cykSNTHTnemPCd5TkYo=
Subject key identifier: 10:A7:27:BF:DA:A1:A4:6A:5E:BF:56:81:FE:31:DA:E7:13:7C:84:77
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A038CFA797B5559A02B11A7F1AD866E833
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/EKcnv9qhpGpev1aB_jHa5xN8hHc.roa
Signing time: Tue 25 Aug 2026 12:05:27 +0000
ROA not before: Tue 25 Aug 2026 12:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48347
IP address blocks: 195.60.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:cf:a7:97:b5:55:9a:02:b1:1a:7f:1a:d8:66:e8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 25 12:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10a727bfdaa1a46a5ebf5681fe31dae7137c8477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:e9:50:ad:fb:8e:17:af:01:9f:38:18:53:
a1:2f:7c:28:bf:25:18:0b:14:3c:ed:f1:da:ff:92:
f8:aa:f3:0f:2a:8b:88:54:a2:e3:80:8d:3d:47:f6:
26:3c:9f:d4:af:6d:80:ab:46:5c:87:22:a7:15:1b:
1a:06:28:67:cc:ca:ef:e2:d1:2a:03:2a:9e:34:70:
5b:9b:76:37:ba:83:47:3b:37:68:d6:7a:0e:14:38:
ed:3e:64:b2:61:46:1f:13:b0:9f:83:a0:6a:f4:a1:
85:8c:73:c1:21:2f:d8:77:2e:a9:4e:08:1f:ec:70:
97:91:7f:59:30:2f:ef:f7:9a:8d:79:18:1c:ef:49:
fc:a3:3a:82:5d:78:5a:24:eb:e3:0b:2a:34:49:8b:
e7:89:48:f9:26:9a:a4:db:d1:18:e4:7d:f0:ae:e5:
a9:0e:7c:03:0b:5a:ff:4e:e4:9a:42:92:8a:e6:aa:
6c:fe:a2:3f:87:f5:75:a6:9a:ba:a5:57:cb:2f:d5:
d6:48:7b:41:04:01:ca:95:a5:bf:69:d1:8f:4a:3c:
28:e1:eb:c9:ac:5f:56:27:9f:d5:26:01:bc:75:f7:
13:0b:6b:43:27:6f:62:d5:21:9d:72:ef:60:c2:c8:
68:de:3e:80:2b:ff:c6:c3:3e:0b:9c:56:68:49:d8:
ac:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A7:27:BF:DA:A1:A4:6A:5E:BF:56:81:FE:31:DA:E7:13:7C:84:77
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/EKcnv9qhpGpev1aB_jHa5xN8hHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.237.0/24
Signature Algorithm: sha256WithRSAEncryption
69:6b:a3:4c:6b:b0:11:35:46:f0:dd:b8:5d:a7:73:df:bb:94:
c4:ed:3a:06:f7:b7:20:a8:25:03:69:d4:73:b0:6d:3e:fd:d3:
ac:d9:be:69:e2:3a:14:ed:0b:ad:18:5b:9a:ff:1f:8f:75:30:
59:2b:85:55:5b:1d:70:f6:c2:14:5d:ab:5d:55:c0:30:e8:b0:
88:f6:3a:5c:6a:09:ab:d4:2c:c4:b3:20:96:c1:ff:9e:02:e5:
d4:da:be:18:2e:cb:2c:6f:72:01:21:5c:0f:9f:4c:7c:b7:ac:
37:e7:a3:10:18:63:b4:5d:18:84:3a:75:f4:f1:08:ec:2c:d7:
b9:f6:b8:c1:01:42:92:12:f7:6c:23:d4:69:0e:3f:f4:93:03:
58:0a:73:de:70:9a:be:49:e9:ee:72:a9:f4:a9:4b:88:4e:e2:
d7:ca:26:58:5e:d1:dd:5c:ee:85:62:ed:67:81:b4:91:6c:86:
ba:38:97:c5:a0:bb:ae:2d:c9:55:55:f2:85:44:4a:70:bf:cc:
e6:4a:d2:c3:b7:d7:97:51:ea:ad:bf:42:48:69:ee:ac:a5:c6:
83:5d:4a:04:21:4c:9b:c6:e5:f0:48:c0:d0:90:9a:04:9d:7c:
bd:84:31:59:75:b4:7d:00:46:26:d1:84:05:0e:5f:ef:f9:d4:
5e:6e:c9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:55 2026 by rpki-client