Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EBpR3i23vUkI49lNzqmTeKLSSBw.roa
File: EBpR3i23vUkI49lNzqmTeKLSSBw.roa (raw, json)
Hash identifier: XZfvnb/5MBlYoFOBhUzu8s1Mc/IWCCgUnnwIxTGM8dA=
Subject key identifier: 10:1A:51:DE:2D:B7:BD:49:08:E3:D9:4D:CE:A9:93:78:A2:D2:48:1C
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A07D30BA6C63D2C8EB045E9F218C2728AB
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EBpR3i23vUkI49lNzqmTeKLSSBw.roa
Signing time: Mon 07 Sep 2026 18:45:40 +0000
ROA not before: Mon 07 Sep 2026 18:45:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 193.37.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:30:ba:6c:63:d2:c8:eb:04:5e:9f:21:8c:27:28:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 7 18:45:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=101a51de2db7bd4908e3d94dcea99378a2d2481c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:74:dc:21:8a:a6:d9:c0:71:b7:e9:90:1f:
f8:f1:7b:c6:62:90:ec:46:fa:31:61:b2:14:1d:28:
05:61:90:ca:77:e2:e4:e5:3a:3b:07:e7:c5:4d:82:
7e:06:d2:a9:43:3c:05:0a:69:f0:b6:58:49:47:6b:
4f:55:b6:04:44:32:26:11:66:da:1b:be:3e:bb:64:
0c:50:8b:15:87:18:17:59:1d:44:0c:cb:37:bb:42:
3d:1b:1c:54:22:af:e1:23:d6:23:eb:aa:35:d7:7b:
3a:54:c3:42:f0:1f:29:ca:b8:3e:d3:88:c9:37:c6:
74:a9:f2:1d:07:39:20:46:8e:25:70:67:b0:79:3a:
94:b9:0e:05:68:63:be:a6:ff:2f:22:a4:43:11:a6:
14:a1:b0:f9:b4:cd:98:fb:48:c2:4e:8e:71:91:3c:
ea:9e:e3:81:4c:6b:d5:5b:0f:b3:39:f0:da:08:d0:
6a:48:fa:18:0c:92:55:d6:d2:0f:b2:4e:b0:c2:5d:
fd:dd:ba:86:af:ab:62:61:a8:b9:94:99:4b:fc:9f:
ac:02:86:da:79:8a:79:45:44:ee:68:72:a3:bd:a2:
c1:b1:dc:36:a7:38:21:47:06:8b:92:65:ac:6d:bb:
26:f7:d9:72:a6:d9:45:73:3e:92:a8:6e:3d:d7:0a:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1A:51:DE:2D:B7:BD:49:08:E3:D9:4D:CE:A9:93:78:A2:D2:48:1C
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EBpR3i23vUkI49lNzqmTeKLSSBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.197.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a3:4a:c2:7a:53:93:70:e7:32:9e:67:43:53:2a:0d:5f:7b:
96:0c:9f:fd:82:95:81:84:be:dd:ec:56:a6:79:68:4a:25:d2:
68:a6:88:5a:23:e0:85:5c:8c:d7:ec:e0:df:2b:73:04:cf:44:
50:c6:1e:78:72:6a:7c:e0:2e:b9:24:c1:f2:dd:21:57:3b:e6:
f3:6e:c3:34:1e:87:f7:7f:59:e2:74:94:ad:ac:d9:8d:96:2f:
9d:d7:04:df:4e:9b:2a:1d:da:2b:15:3a:c9:38:02:79:12:d4:
b2:8e:1a:df:b5:2c:5a:c7:de:c7:ba:ee:a2:06:c3:16:40:71:
bd:b1:fa:6a:e3:75:ee:aa:0b:16:51:1f:cf:12:b1:6f:40:4d:
c1:30:b4:bd:c2:39:17:c9:02:a1:f9:3c:5b:60:69:ba:6f:98:
59:d8:1c:c4:82:8e:e1:36:c2:71:19:80:34:7c:14:a0:2b:c8:
72:0e:12:d6:b1:e8:df:a5:38:6d:75:2a:1f:2e:ce:d4:4d:91:
04:46:2b:2d:cf:58:40:5a:71:07:14:a7:91:e2:3c:c5:ed:c7:
34:0e:e0:d2:8b:01:66:45:eb:37:41:9a:0a:bb:84:50:aa:de:
30:6b:41:70:03:54:e8:0e:65:66:f7:c4:e2:dd:54:cb:0a:78:
11:b9:c2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:43:01 2026 by rpki-client