Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EaE-vRC-w2nbnNejoHHJzcH1hZA.roa
File: EaE-vRC-w2nbnNejoHHJzcH1hZA.roa (raw, json)
Hash identifier: kICZaRXfLsmsNiO6wj1I4hQIEsXolTZCsVq0OBOBxnU=
Subject key identifier: 11:A1:3E:BD:10:BE:C3:69:DB:9C:D7:A3:A0:71:C9:CD:C1:F5:85:90
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019FC697F83553E8C1EF233C714EB714B6F5
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EaE-vRC-w2nbnNejoHHJzcH1hZA.roa
Signing time: Mon 03 Aug 2026 07:47:56 +0000
ROA not before: Mon 03 Aug 2026 07:47:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8473
IP address blocks: 192.71.5.0/24 maxlen: 24
192.121.12.0/24 maxlen: 24
192.121.24.0/24 maxlen: 24
192.121.101.0/24 maxlen: 24
192.165.182.0/24 maxlen: 24
193.181.65.0/24 maxlen: 24
193.183.47.0/24 maxlen: 24
193.183.48.0/24 maxlen: 24
193.183.92.0/24 maxlen: 24
193.183.104.0/24 maxlen: 24
193.183.105.0/24 maxlen: 24
193.183.251.0/24 maxlen: 24
193.234.54.0/24 maxlen: 24
194.14.165.0/24 maxlen: 24
194.68.60.0/24 maxlen: 24
194.68.86.0/24 maxlen: 24
194.68.223.0/24 maxlen: 24
194.68.224.0/24 maxlen: 24
194.71.215.0/24 maxlen: 24
194.103.93.0/24 maxlen: 24
194.132.27.0/24 maxlen: 24
194.132.162.0/24 maxlen: 24
2a01:280:3e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:97:f8:35:53:e8:c1:ef:23:3c:71:4e:b7:14:b6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Aug 3 07:47:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11a13ebd10bec369db9cd7a3a071c9cdc1f58590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:ca:ce:b4:8e:32:b8:c8:ab:37:63:be:98:
3d:93:ce:7e:d7:75:28:69:fa:04:fe:88:1c:b1:19:
a5:28:6f:4f:a3:ea:77:99:e5:3b:fd:3f:90:3e:fd:
4b:cd:cc:13:94:ae:50:72:11:f2:1d:9c:9c:3b:5c:
75:90:ad:84:fb:31:eb:a4:0c:88:64:85:dd:65:9b:
6c:54:a9:aa:49:56:1c:14:0c:3e:9c:63:46:69:47:
b8:0d:bc:cf:ef:3c:0c:99:b1:4b:aa:7f:10:5d:7b:
b3:04:b2:30:6e:6d:cc:32:fb:13:29:6d:09:56:f3:
d3:b0:66:78:4f:7e:a0:89:08:d3:a2:a4:2c:91:4f:
88:f4:b2:fe:24:21:2a:e3:3e:b4:28:e1:4e:2d:d9:
4d:4d:e4:cf:6e:c1:c5:95:55:a7:39:2e:6e:c6:f9:
21:59:eb:e2:71:2b:9d:c3:a5:cc:d8:40:7e:6d:b1:
d1:a7:f3:22:69:70:d1:39:36:bc:18:45:e9:71:ef:
c6:99:aa:55:92:f2:6d:0a:80:35:72:87:68:9c:0d:
cd:6b:3f:e3:f5:e6:2a:e0:43:72:d5:17:80:72:ca:
40:5b:ae:3a:4a:ca:b0:0c:fd:e6:b8:b1:76:cf:03:
63:ea:6b:fd:4d:db:d0:da:66:60:9d:c1:c9:87:49:
8b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A1:3E:BD:10:BE:C3:69:DB:9C:D7:A3:A0:71:C9:CD:C1:F5:85:90
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EaE-vRC-w2nbnNejoHHJzcH1hZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.5.0/24
192.121.12.0/24
192.121.24.0/24
192.121.101.0/24
192.165.182.0/24
193.181.65.0/24
193.183.47.0-193.183.48.255
193.183.92.0/24
193.183.104.0/23
193.183.251.0/24
193.234.54.0/24
194.14.165.0/24
194.68.60.0/24
194.68.86.0/24
194.68.223.0-194.68.224.255
194.71.215.0/24
194.103.93.0/24
194.132.27.0/24
194.132.162.0/24
IPv6:
2a01:280:3e0::/48
Signature Algorithm: sha256WithRSAEncryption
30:7b:87:5b:ba:d1:24:22:7e:b2:e2:c8:7a:fd:6c:cf:5b:c2:
7f:51:70:d4:3d:f6:02:09:36:d6:f0:cf:c4:6e:ef:f5:f3:b4:
4d:91:3c:44:44:c4:e9:cc:69:d7:c4:60:ad:74:a6:20:f8:bf:
95:26:c5:d2:1e:62:e9:5e:72:5a:25:a5:ca:71:ec:eb:18:c0:
14:8a:14:21:da:bf:af:97:b6:b5:f4:d9:ce:6e:b1:73:05:84:
6c:ab:1c:f7:18:28:4b:d8:6e:23:33:26:ee:05:cf:d4:28:79:
28:d6:6a:c2:d2:7a:16:eb:6c:92:b9:21:d4:c1:65:4b:71:86:
97:0c:e0:37:f7:2d:9b:e3:54:45:1e:65:ec:f2:a1:f2:68:e1:
e0:52:77:d5:10:29:36:0f:ef:c8:38:fa:6a:53:7d:7e:ba:b8:
c7:ac:a2:82:aa:09:b6:ab:6e:63:e9:93:1a:e7:68:b1:ef:16:
5f:7f:7c:ee:c5:9e:12:f4:c9:6f:af:33:66:3a:89:e2:a5:40:
46:26:38:77:aa:cd:e9:29:9d:bb:fe:85:e1:54:c1:65:98:a4:
4c:cd:76:ba:a9:58:ef:1a:36:69:c6:0e:9a:dc:7c:eb:7c:fd:
25:63:a6:bf:c5:e3:cd:46:1a:21:af:3f:94:1a:14:81:d3:8a:
4b:50:25:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:27 2026 by rpki-client