Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/eokEEq-S5CPQmd6YaFyH4Z24OwA.roa
File: eokEEq-S5CPQmd6YaFyH4Z24OwA.roa (raw, json)
Hash identifier: R8Qe8iCPUTrHbdOSjB/zrG33zAMeqDS1F76tnDg1l1c=
Subject key identifier: 7A:89:04:12:AF:92:E4:23:D0:99:DE:98:68:5C:87:E1:9D:B8:3B:00
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019FDAA7226C2D32473F0CCC2A3AC87CE0C5
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/eokEEq-S5CPQmd6YaFyH4Z24OwA.roa
Signing time: Fri 07 Aug 2026 05:16:54 +0000
ROA not before: Fri 07 Aug 2026 05:16:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54702
IP address blocks: 185.208.155.0/24 maxlen: 24
185.253.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:da:a7:22:6c:2d:32:47:3f:0c:cc:2a:3a:c8:7c:e0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Aug 7 05:16:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a890412af92e423d099de98685c87e19db83b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f4:27:f8:b2:db:b4:e5:b7:47:76:8f:7f:01:
66:dc:b7:ee:db:d0:e4:f6:f9:dd:58:cb:d1:80:b3:
dc:92:89:1e:02:49:92:69:29:37:a3:d1:68:f2:b9:
76:dd:08:0e:b0:4f:ca:a9:2f:25:b8:b1:e6:22:9c:
5e:9b:b2:03:9d:c1:75:ae:46:54:ff:79:49:a9:cb:
df:c0:18:ea:e1:38:45:b7:cf:d8:38:d5:31:0a:8d:
05:f6:e1:a3:77:0c:16:d9:dd:81:82:a3:f4:0a:17:
b2:08:b3:8a:b6:72:ba:d5:24:2e:a5:06:e0:df:98:
9f:95:68:4d:46:71:b5:1b:87:0b:54:05:71:63:d1:
77:90:0c:4e:36:5c:b4:71:5e:6c:69:16:96:d8:fb:
b0:3e:f5:58:e1:f8:c1:7d:f9:d1:e5:46:37:5f:0a:
28:36:b4:d3:44:7f:ed:18:0e:55:47:bf:68:52:31:
a4:6e:e1:ec:09:41:e5:08:da:71:78:6e:99:f8:94:
d7:60:f0:da:54:d0:b9:2f:49:bb:3c:8a:dd:a1:7c:
1a:6b:dc:d8:e5:9c:a0:39:ac:58:49:87:fb:60:bf:
90:84:4c:3a:60:a0:a5:8e:ca:5c:f0:45:72:c1:0d:
12:45:57:cd:ab:4b:c7:ce:50:7c:c8:4e:c9:3e:59:
d3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:89:04:12:AF:92:E4:23:D0:99:DE:98:68:5C:87:E1:9D:B8:3B:00
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/eokEEq-S5CPQmd6YaFyH4Z24OwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.155.0/24
185.253.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:72:cd:f7:75:8c:f2:76:eb:95:64:4f:f9:f3:28:ae:f4:af:
cc:0a:82:a0:d5:ce:90:85:1b:0d:2a:43:56:77:db:0b:3c:f7:
ee:e8:51:9a:99:e7:2b:24:67:3f:75:62:c8:77:4b:fc:4e:fc:
41:dc:e9:e0:e7:02:54:c1:4e:78:61:67:80:f8:3a:cf:af:cc:
38:92:2a:55:15:96:2a:c6:05:da:8d:9c:96:06:5d:fa:a9:35:
16:ee:f2:14:5c:db:77:07:0f:65:ec:24:ea:2d:c0:13:d2:c9:
08:70:0a:b0:b7:88:3c:e2:46:db:30:69:27:9c:49:15:08:eb:
39:a0:bc:f5:f0:f5:95:14:99:bc:7f:a1:60:58:80:5e:54:d6:
5a:84:3a:51:32:a5:22:d0:9a:43:75:d9:68:c4:6a:4a:85:39:
bd:d9:4e:fe:f8:f2:25:71:a4:3d:bc:a8:3e:d7:66:39:a3:3f:
4b:e6:30:15:81:8b:c4:80:f1:11:8a:7f:3a:0e:6a:5f:b4:1f:
6b:ed:e4:db:a6:35:e5:d8:c6:f7:d2:28:e8:d1:c5:2c:4a:78:
a3:8b:ad:8d:b4:8e:83:0a:23:48:5f:0c:e7:73:35:01:78:33:
94:f2:13:77:8c:4c:ef:e6:8f:70:9b:06:f2:e2:c7:38:eb:a6:
5c:fc:40:f8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/apyJsLTJHPwzMKjrIfODFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjYwODA3MDUxNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTg5MDQxMmFmOTJlNDIzZDA5OWRlOTg2ODVjODdlMTlkYjgzYjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PQn+LLbtOW3R3aPfwFm3Lfu29Dk
9vndWMvRgLPckokeAkmSaSk3o9Fo8rl23QgOsE/KqS8luLHmIpxem7IDncF1rkZU
/3lJqcvfwBjq4ThFt8/YONUxCo0F9uGjdwwW2d2BgqP0CheyCLOKtnK61SQupQbg
35iflWhNRnG1G4cLVAVxY9F3kAxONly0cV5saRaW2PuwPvVY4fjBffnR5UY3Xwoo
NrTTRH/tGA5VR79oUjGkbuHsCUHlCNpxeG6Z+JTXYPDaVNC5L0m7PIrdoXwaa9zY
5ZygOaxYSYf7YL+QhEw6YKCljspc8EVywQ0SRVfNq0vHzlB8yE7JPlnTdQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHqJBBKvkuQj0JnemGhch+GduDsAMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvZW9rRUVxLVM1Q1BRbWQ2WWFGeUg0WjI0T3dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudCbAwQA
uf17MA0GCSqGSIb3DQEBCwUAA4IBAQBvcs33dYzyduuVZE/58yiu9K/MCoKg1c6Q
hRsNKkNWd9sLPPfu6FGamecrJGc/dWLId0v8TvxB3Ong5wJUwU54YWeA+DrPr8w4
kipVFZYqxgXajZyWBl36qTUW7vIUXNt3Bw9l7CTqLcAT0skIcAqwt4g84kbbMGkn
nEkVCOs5oLz18PWVFJm8f6FgWIBeVNZahDpRMqUi0JpDddloxGpKhTm92U7++PIl
caQ9vKg+12Y5oz9L5jAVgYvEgPERin86DmpftB9r7eTbpjXl2Mb30ijo0cUsSnij
i62NtI6DCiNIXwznczUBeDOU8hN3jEzv5o9wmwby4sc466Zc/ED4
-----END CERTIFICATE-----
Generated at Fri Aug 21 07:29:52 2026 by rpki-client