Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/epSW8Zh20G3Tyl52-dTL3yz-KVs.roa
File: epSW8Zh20G3Tyl52-dTL3yz-KVs.roa (raw, json)
Hash identifier: q6R7O5ajy86FRw9ExVqpE0uX2CxkIe39LhaQU39GNTs=
Subject key identifier: 7A:94:96:F1:98:76:D0:6D:D3:CA:5E:76:F9:D4:CB:DF:2C:FE:29:5B
Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial: 019E3EDD6337C5AB8701977126232BEA0834
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/epSW8Zh20G3Tyl52-dTL3yz-KVs.roa
Signing time: Tue 19 May 2026 06:12:36 +0000
ROA not before: Tue 19 May 2026 06:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214437
IP address blocks: 69.19.142.0/23 maxlen: 23
85.155.64.0/24 maxlen: 24
85.155.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 13:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3e:dd:63:37:c5:ab:87:01:97:71:26:23:2b:ea:08:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Validity
Not Before: May 19 06:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a9496f19876d06dd3ca5e76f9d4cbdf2cfe295b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:2d:a2:c9:98:8c:6a:8b:51:7f:74:de:1a:
dc:2d:fa:89:f3:68:30:5c:8c:7e:de:6f:c5:57:ad:
34:74:8b:90:f9:0f:ca:84:b5:25:39:43:8c:4c:7e:
ab:94:6e:4b:fe:07:1d:a8:43:8d:8a:cc:07:50:0b:
2e:d0:69:26:24:5d:26:77:30:25:d5:d2:f4:6b:83:
be:02:82:c8:44:8d:84:a0:bf:3c:9c:18:5d:6d:6b:
b4:99:9e:6b:06:8b:8d:61:10:1f:16:d1:e5:65:e6:
76:73:8a:0e:47:4c:e5:90:41:9f:82:70:cf:21:11:
03:c2:d7:8b:10:bb:ec:4b:11:22:93:0a:89:33:1f:
13:f2:fc:08:0a:d9:a3:56:47:bf:a5:cb:67:f4:e9:
4c:89:95:bf:58:f3:08:80:51:39:1e:e9:11:e9:b7:
ed:a4:d2:d0:32:24:2d:44:6b:66:d1:28:37:b7:61:
7b:3a:f6:b4:00:74:79:2c:e8:32:ab:7f:b7:29:bd:
47:12:64:9a:5c:92:10:3a:bc:0a:59:f6:d6:d1:20:
2e:97:f3:7d:07:08:b2:5e:71:f5:29:55:c4:54:02:
fb:6e:dc:dc:69:ca:3a:fe:06:c4:cd:22:2d:3d:78:
a3:32:93:62:6c:cd:93:b8:19:c4:ac:19:c8:17:ae:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:94:96:F1:98:76:D0:6D:D3:CA:5E:76:F9:D4:CB:DF:2C:FE:29:5B
X509v3 Authority Key Identifier:
keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/epSW8Zh20G3Tyl52-dTL3yz-KVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.19.142.0/23
85.155.64.0/23
Signature Algorithm: sha256WithRSAEncryption
be:d0:d2:66:08:d4:47:c6:96:22:bf:46:c1:e3:db:a0:0d:59:
6a:5d:1c:eb:42:9d:11:83:51:7c:01:99:e3:f6:94:3f:7d:4f:
5a:9e:39:0d:23:9f:dd:40:90:94:ed:2c:b4:a1:07:cc:44:34:
be:ce:14:d8:bb:21:b0:06:39:a1:06:f0:cf:8a:09:e3:3d:13:
ec:8f:37:0c:b0:a0:69:9b:43:ae:4e:21:46:82:e0:b9:e5:12:
e7:8a:1f:d8:ca:9d:04:70:d5:9a:be:5e:77:ed:3f:ab:73:66:
3c:21:de:18:eb:5b:34:ad:2c:bc:5e:26:c1:a6:2e:8e:d6:b5:
11:6a:16:1f:50:de:9e:1f:b5:b4:2b:f2:4b:b5:99:3b:0a:b5:
ea:3d:12:2e:f3:40:23:f8:36:74:10:68:ed:cf:4f:ed:a2:8f:
26:64:27:1e:1d:e0:a4:cf:c7:ca:ab:58:f9:1e:c5:02:97:ac:
42:79:b8:f8:d9:75:1d:fe:7c:14:8f:7d:25:f4:3f:5f:38:74:
35:0f:a1:91:46:ea:72:7d:c9:c5:23:35:48:c3:fe:b3:c2:b1:
cb:5b:59:21:2c:d0:c1:a9:65:0f:a9:23:ad:fa:19:d1:51:a1:
86:62:89:92:90:10:23:13:cd:54:4c:5f:af:b9:61:43:32:65:
ea:3f:7c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:03:00 2026 by rpki-client