Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/EJPyee4QWkKrpHzgKl_UfRlSQ4k.roa
File: EJPyee4QWkKrpHzgKl_UfRlSQ4k.roa (raw, json)
Hash identifier: UftVkTCY6ZFe1hDTUIcqILq/ecU3GKzDfqSPxTid57Y=
Subject key identifier: 10:93:F2:79:EE:10:5A:42:AB:A4:7C:E0:2A:5F:D4:7D:19:52:43:89
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 019DF4F1A190FE2875BB49A78A57A56BE710
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/EJPyee4QWkKrpHzgKl_UfRlSQ4k.roa
Signing time: Mon 04 May 2026 21:42:49 +0000
ROA not before: Mon 04 May 2026 21:42:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210528
IP address blocks: 85.208.212.0/22 maxlen: 24
85.208.213.0/24 maxlen: 24
199.241.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f4:f1:a1:90:fe:28:75:bb:49:a7:8a:57:a5:6b:e7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: May 4 21:42:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1093f279ee105a42aba47ce02a5fd47d19524389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:e7:3b:37:ca:df:63:6c:18:32:7d:78:7b:
56:4a:66:6d:f2:41:f1:ac:c0:64:03:ea:fd:08:02:
4d:70:85:14:7a:9c:96:85:5e:4e:2f:00:df:23:0e:
ad:60:74:96:87:b8:3a:c1:fd:34:82:08:b9:61:fe:
ac:c6:80:77:ee:e3:c7:d1:e6:b6:ad:4b:b6:ca:65:
36:88:96:c5:d0:ad:94:4e:0a:99:e6:22:e3:eb:31:
41:90:c5:32:f8:23:c8:f5:cb:42:2c:a1:a2:e4:db:
d0:7e:9a:10:d6:1d:5f:22:84:32:45:f7:42:9d:08:
d7:e2:5d:6b:c9:6e:3a:ea:7e:91:fd:69:e0:fb:24:
fa:d8:cd:85:d3:ca:32:83:53:0b:e7:73:61:1c:e1:
48:e5:aa:fa:0e:91:80:08:72:44:e4:c5:0c:79:c2:
9c:5d:9b:77:46:58:f0:2e:4f:50:4b:9a:8d:b9:8c:
72:df:d1:0b:96:4c:79:12:a6:9f:7e:bb:32:f0:6c:
1d:89:ad:25:d8:93:e1:09:f3:59:5d:16:44:0c:3d:
a1:c6:88:64:24:32:f7:f6:3f:56:35:8b:2a:8b:36:
9d:83:e1:73:eb:a6:59:87:61:c9:d9:05:48:70:05:
e8:d5:1c:3c:ee:44:30:72:37:f7:d9:35:a9:41:ff:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:93:F2:79:EE:10:5A:42:AB:A4:7C:E0:2A:5F:D4:7D:19:52:43:89
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/EJPyee4QWkKrpHzgKl_UfRlSQ4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.212.0/22
199.241.120.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:a9:18:cc:30:aa:e1:41:1d:0b:14:44:f8:dd:15:3c:49:c2:
e1:5c:40:72:d4:4b:48:b5:dc:75:6c:96:78:0b:a6:45:9a:4f:
02:e5:ad:58:a6:4e:d2:9f:4a:44:ea:12:e5:f6:b3:1c:a6:f4:
e3:15:5a:c9:d2:fe:ca:8c:fb:9c:27:06:e3:f2:97:be:55:ee:
96:88:b4:cd:14:e8:41:6c:fb:8b:65:20:dc:e4:c8:88:c3:81:
ad:08:b9:b5:3f:43:97:3e:6a:0e:78:55:d2:cf:06:06:ae:5f:
d2:21:32:89:c7:0e:e4:ee:7c:2a:6b:27:bd:ee:51:ff:17:a4:
6e:aa:22:0a:33:10:e2:b0:c3:9f:cf:9c:2c:7a:1c:f0:8e:5b:
98:70:77:66:2d:c5:5d:90:c6:6b:29:58:9c:05:2d:6f:6e:9a:
f1:95:7e:9d:ea:b1:af:6a:96:cf:29:1d:d0:c5:74:99:e9:a6:
4b:9b:2b:f4:7b:ae:3a:df:4e:46:b8:0a:82:68:90:22:3e:86:
fd:df:ec:9c:ba:66:25:df:e9:5d:24:c9:7c:01:14:a5:d5:0f:
0d:e2:bd:95:fa:d4:bf:8f:bb:f6:8d:47:5d:45:2c:1a:9a:81:
39:cf:49:4f:75:dd:4e:b8:03:0d:2b:78:50:e6:9b:0e:53:78:
58:3f:51:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 04:03:35 2026 by rpki-client