Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/EwsR7ogZ2YLZZ8aegj4DELyBhHo.roa
File: EwsR7ogZ2YLZZ8aegj4DELyBhHo.roa (raw, json)
Hash identifier: Y1tJ60G7x0ZKhUEEE5jcmruvEdQYLf/RNmOle950aNY=
Subject key identifier: 13:0B:11:EE:88:19:D9:82:D9:67:C6:9E:82:3E:03:10:BC:81:84:7A
Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial: 01A15E8D2209634B8B95D9E880CE8FD8F547
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/EwsR7ogZ2YLZZ8aegj4DELyBhHo.roa
Signing time: Wed 21 Oct 2026 13:01:09 +0000
ROA not before: Wed 21 Oct 2026 13:01:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50012
IP address blocks: 185.157.121.0/24 maxlen: 24
193.104.85.0/24 maxlen: 24
2a11:aa00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:8d:22:09:63:4b:8b:95:d9:e8:80:ce:8f:d8:f5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Validity
Not Before: Oct 21 13:01:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=130b11ee8819d982d967c69e823e0310bc81847a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:fa:cd:81:a1:ce:4d:64:7d:31:91:d4:37:
36:12:04:b8:fb:d3:b0:d5:04:d8:21:ba:f7:da:5b:
d4:42:83:d2:1b:47:6d:95:33:c5:cc:52:c0:4a:e5:
bd:7e:10:fb:eb:b6:f7:c6:76:50:d1:dc:b9:a1:92:
eb:26:1d:6d:d3:9b:17:33:88:dd:91:7e:18:34:03:
4f:76:60:b5:e9:b8:90:f4:8a:66:91:92:6e:80:43:
a7:3e:18:22:06:22:28:c1:40:95:67:11:c9:4f:83:
98:2e:c6:57:be:d8:25:0b:9d:a5:c6:be:09:42:bf:
ac:7c:b5:e0:a9:13:79:f9:fe:51:e7:f1:98:45:13:
04:bf:2e:76:14:0f:7f:b4:00:ef:01:c7:05:d2:ba:
1c:e4:ad:c5:e2:d7:91:c8:d4:cc:60:7d:78:f1:ea:
45:3e:59:5a:c8:98:85:43:12:88:61:75:16:e1:e4:
85:ae:bd:40:e4:b1:11:34:f7:ca:53:29:af:38:7c:
65:83:dd:75:76:08:5d:fa:9a:b2:a5:68:df:29:c0:
91:6a:77:bb:de:c1:66:ac:a7:0b:e4:ac:b6:77:6f:
2e:c9:1c:29:ba:66:3c:af:e4:a3:1b:f7:52:8f:07:
ae:f4:43:27:30:cb:16:8c:55:5e:16:f7:6a:61:75:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0B:11:EE:88:19:D9:82:D9:67:C6:9E:82:3E:03:10:BC:81:84:7A
X509v3 Authority Key Identifier:
keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/EwsR7ogZ2YLZZ8aegj4DELyBhHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.121.0/24
193.104.85.0/24
IPv6:
2a11:aa00::/29
Signature Algorithm: sha256WithRSAEncryption
87:6f:17:ae:a2:1e:5f:eb:46:48:64:76:3d:5a:6b:ba:6e:bd:
0a:9d:b4:d0:b2:5d:a6:14:87:3c:ec:5b:4d:9c:95:18:a6:2b:
29:a2:1a:84:c2:ee:e5:3a:56:91:c4:4a:c1:cf:20:b7:a7:5c:
7a:fb:90:49:b3:55:c5:b3:94:ef:d9:a3:b2:ba:9a:16:dc:d8:
24:09:5b:ae:81:96:ff:e7:2f:b6:8f:e0:af:61:b3:a0:38:61:
a0:12:a5:ce:53:17:c6:8a:51:ba:b6:bf:89:8d:84:c4:21:00:
90:d0:4a:0e:cc:ca:bc:69:4b:b7:8c:30:d4:24:ee:3c:c3:a6:
65:22:2c:e1:3d:d8:20:d7:44:75:51:ca:f9:20:f6:be:84:56:
77:04:ec:4a:5d:e0:07:57:a7:e3:46:72:34:6b:3a:ea:b0:b9:
9e:37:ae:7e:85:9a:94:f8:16:9b:a9:ee:42:79:52:c3:93:ef:
b1:64:c9:84:18:32:69:9b:c6:ca:8e:36:59:54:54:62:6f:8a:
78:21:87:b9:5e:f0:1b:06:72:2c:56:f0:37:ff:25:0d:46:3e:
50:51:c5:35:ae:6d:42:86:4b:97:e2:90:cc:a6:9f:be:0c:a1:
45:e9:f8:18:32:25:e5:7e:6e:79:f4:6d:65:b0:58:15:40:86:
7e:b5:e0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:44:27 2026 by rpki-client