Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/eEYECPuTAMSxPzkjToe-AsGHG0o.roa
File: eEYECPuTAMSxPzkjToe-AsGHG0o.roa (raw, json)
Hash identifier: qvifZPjdOwY78+6g7aEHucIxOME1hkTUXil2N+iv3W0=
Subject key identifier: 78:46:04:08:FB:93:00:C4:B1:3F:39:23:4E:87:BE:02:C1:87:1B:4A
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01A00A11B52CD9179A19D3F687795D620325
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/eEYECPuTAMSxPzkjToe-AsGHG0o.roa
Signing time: Sun 16 Aug 2026 10:15:27 +0000
ROA not before: Sun 16 Aug 2026 10:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 92.61.103.0/24 maxlen: 24
194.152.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:11:b5:2c:d9:17:9a:19:d3:f6:87:79:5d:62:03:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Aug 16 10:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78460408fb9300c4b13f39234e87be02c1871b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:42:b9:08:9c:22:b7:0d:05:b0:27:3a:a1:
0e:9d:96:a7:d7:29:70:86:e1:99:39:09:72:c5:62:
99:79:8d:ec:90:ce:e0:c2:ff:ca:55:1c:8b:d5:49:
d4:eb:4e:8a:c5:f6:62:01:48:3b:4f:30:fb:50:dd:
c6:f3:59:b0:f3:4d:45:77:c1:e5:f5:c2:da:01:39:
bc:b6:ba:98:85:09:1d:b0:5a:02:59:09:bc:f3:12:
e4:f4:16:19:95:82:49:fa:1b:ef:b0:99:2e:8b:22:
8f:b5:03:09:fd:99:eb:21:0d:0e:de:b3:37:a0:22:
7e:8e:f0:65:41:7c:08:25:09:22:0d:2b:7d:c9:2f:
c2:65:3c:ac:bb:10:3c:3e:8f:ac:9f:30:0c:ed:db:
08:06:c9:b9:7f:ed:13:c6:9a:20:07:ec:4c:24:0d:
19:13:2e:78:2d:c7:14:38:d5:cb:2e:70:86:39:af:
fb:bb:59:87:55:0e:e8:4e:1c:de:91:ae:dd:dd:31:
77:1f:ff:91:e9:3a:06:e2:8b:cc:af:c9:2f:4d:25:
99:a4:08:16:40:3a:21:63:de:c1:38:37:35:8c:be:
a2:00:90:98:5f:09:46:37:76:de:00:31:6e:2f:9b:
1a:1e:8d:b2:bd:d9:31:89:bf:aa:09:7b:6b:f0:77:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:46:04:08:FB:93:00:C4:B1:3F:39:23:4E:87:BE:02:C1:87:1B:4A
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/eEYECPuTAMSxPzkjToe-AsGHG0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.103.0/24
194.152.136.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c4:b6:47:88:f2:33:f7:c1:04:5a:35:68:93:f4:10:01:01:
2f:2f:6e:42:8c:8e:0e:09:37:5d:0a:2a:68:2a:46:c3:60:8c:
16:af:32:20:73:dc:55:e2:1f:69:b5:c4:b1:e9:60:d5:4c:f6:
24:42:1b:69:e6:4e:cf:27:b0:a2:ad:60:69:68:f4:c0:0c:20:
86:24:36:a8:53:73:3c:55:60:1c:b6:59:9d:f5:75:3b:41:c5:
1b:98:26:18:f5:d2:d2:bd:50:a4:84:b9:32:fe:05:db:62:4e:
29:95:6e:67:f7:57:28:16:21:cb:0d:23:c0:0f:6e:ce:18:70:
29:4c:68:42:ff:31:f9:e3:0c:d4:46:32:85:0a:52:78:5f:78:
04:8d:fc:94:34:a8:d3:db:f7:8d:47:a6:e6:51:cf:05:23:ee:
9f:4f:b1:0b:73:34:7c:4b:71:73:c5:b9:d3:4c:19:8f:f2:40:
b6:cb:48:0a:b1:25:bd:0e:d1:1d:af:e7:09:c6:6b:54:65:e1:
f8:0e:ac:f8:8c:f4:7e:fb:85:c6:4f:68:d3:24:7d:af:2f:2f:
96:4e:f3:71:a8:23:2b:61:91:1b:87:1b:93:6f:b2:fe:d2:27:
6e:67:3d:5c:a8:18:ed:1a:8e:9d:fc:3a:15:aa:cc:57:b8:d5:
77:17:67:15
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAKEbUs2ReaGdP2h3ldYgMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjYwODE2MTAxNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODQ2MDQwOGZiOTMwMGM0YjEzZjM5MjM0ZTg3YmUwMmMxODcxYjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3RCuQicIrcNBbAnOqEOnZan1ylw
huGZOQlyxWKZeY3skM7gwv/KVRyL1UnU606KxfZiAUg7TzD7UN3G81mw801Fd8Hl
9cLaATm8trqYhQkdsFoCWQm88xLk9BYZlYJJ+hvvsJkuiyKPtQMJ/ZnrIQ0O3rM3
oCJ+jvBlQXwIJQkiDSt9yS/CZTysuxA8Po+snzAM7dsIBsm5f+0TxpogB+xMJA0Z
Ey54LccUONXLLnCGOa/7u1mHVQ7oThzeka7d3TF3H/+R6ToG4ovMr8kvTSWZpAgW
QDohY97BODc1jL6iAJCYXwlGN3beADFuL5saHo2yvdkxib+qCXtr8HfCOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHhGBAj7kwDEsT85I06HvgLBhxtKMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvZUVZRUNQdVRBTVN4UHpralRvZS1Bc0dIRzBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXD1nAwQA
wpiIMA0GCSqGSIb3DQEBCwUAA4IBAQA1xLZHiPIz98EEWjVok/QQAQEvL25CjI4O
CTddCipoKkbDYIwWrzIgc9xV4h9ptcSx6WDVTPYkQhtp5k7PJ7CirWBpaPTADCCG
JDaoU3M8VWActlmd9XU7QcUbmCYY9dLSvVCkhLky/gXbYk4plW5n91coFiHLDSPA
D27OGHApTGhC/zH54wzURjKFClJ4X3gEjfyUNKjT2/eNR6bmUc8FI+6fT7ELczR8
S3FzxbnTTBmP8kC2y0gKsSW9DtEdr+cJxmtUZeH4Dqz4jPR++4XGT2jTJH2vLy+W
TvNxqCMrYZEbhxuTb7L+0iduZz1cqBjtGo6d/DoVqsxXuNV3F2cV
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:13:40 2026 by rpki-client