Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EnRqBUA6wobPL5FLIc8yspIUEnY.roa
File: EnRqBUA6wobPL5FLIc8yspIUEnY.roa (raw, json)
Hash identifier: Evpnl92y9WTY4hS3a1DlP35WyH1wR6V2qsCMaeGdNgY=
Subject key identifier: 12:74:6A:05:40:3A:C2:86:CF:2F:91:4B:21:CF:32:B2:92:14:12:76
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019ED004E04590F7F17B65359F1B048640E9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EnRqBUA6wobPL5FLIc8yspIUEnY.roa
Signing time: Tue 16 Jun 2026 10:40:40 +0000
ROA not before: Tue 16 Jun 2026 10:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48803
IP address blocks: 192.71.221.0/24 maxlen: 24
193.183.148.0/22 maxlen: 22
193.183.250.0/24 maxlen: 24
194.68.117.0/24 maxlen: 24
194.132.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:04:e0:45:90:f7:f1:7b:65:35:9f:1b:04:86:40:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 16 10:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12746a05403ac286cf2f914b21cf32b292141276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ac:e0:05:2a:fe:42:f3:a7:27:df:54:95:9f:
15:85:06:bc:9d:ec:d1:c6:aa:66:ee:cb:d3:44:51:
6e:38:a5:e2:42:cd:fc:4c:f5:9e:51:af:2b:cd:fc:
cd:a3:fe:2b:5d:4d:f4:49:f0:04:e9:a2:12:33:72:
31:e4:2d:5b:81:4f:cb:5c:d8:80:ca:70:57:91:2e:
86:c4:ab:65:23:ee:1b:db:13:56:fe:34:75:e3:c2:
89:40:56:59:be:93:e4:0d:46:b6:f6:58:04:ca:bd:
47:3c:e1:62:20:e3:79:76:56:e7:2f:3d:ac:9c:98:
34:1b:27:49:42:d9:0c:bf:bf:a1:8f:09:8c:66:ac:
29:ec:2b:c5:49:34:93:6c:bc:8f:e2:ea:61:02:32:
56:1f:21:2e:f4:29:2b:f0:4a:1c:96:85:d6:f2:11:
ca:71:00:84:ed:66:2e:81:0e:89:8d:6b:63:70:d2:
ca:1e:1f:dd:1a:f8:6f:d2:7d:09:e6:97:f3:08:e8:
51:59:69:41:ac:3b:0e:ef:44:08:eb:0c:bc:7d:1b:
f6:2a:0c:57:21:64:df:f2:4d:b7:75:cf:0e:9b:59:
d5:02:02:22:99:e6:23:a4:ff:f1:50:24:f8:30:ed:
40:7f:66:4a:a1:db:1b:50:b4:ad:cb:48:43:62:b9:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:74:6A:05:40:3A:C2:86:CF:2F:91:4B:21:CF:32:B2:92:14:12:76
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EnRqBUA6wobPL5FLIc8yspIUEnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.221.0/24
193.183.148.0/22
193.183.250.0/24
194.68.117.0/24
194.132.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:d1:80:47:c9:90:fb:fa:72:09:9d:f4:6e:eb:57:fb:1d:a0:
41:2e:79:49:3a:68:27:7e:db:03:d4:33:76:a0:d8:32:84:0b:
c2:89:82:56:a6:e8:f9:8c:bd:94:7f:0e:5e:d3:7c:d9:3e:19:
e0:de:d6:ee:96:8d:26:c9:3b:75:2a:0a:87:5a:56:d8:db:9d:
ae:ff:b0:31:ff:e0:df:68:39:8f:69:18:7f:5e:16:17:ad:66:
52:e7:0b:c7:f4:14:78:a7:37:0a:b5:d7:4b:30:a8:d8:4e:03:
25:6d:5a:4b:af:80:cc:4d:4d:ee:39:30:1c:c4:7c:97:f6:80:
85:d6:03:78:98:35:1e:49:8a:2d:45:e5:97:d9:fc:3d:7d:3f:
1f:b6:5a:7d:f1:03:1e:8b:a2:ed:fb:64:e2:df:90:e8:c3:fe:
64:45:3c:98:de:4e:13:53:e7:cb:36:4d:f5:66:19:a3:24:96:
1a:9d:9a:45:b8:2c:e0:0e:d1:ab:c2:2e:84:3f:c1:19:d4:b0:
1b:84:a8:d3:e1:c1:6c:b7:5e:29:cc:63:92:52:f2:f0:80:1b:
cb:0f:94:51:ac:21:3b:52:b0:46:d8:b0:1d:cf:d8:bd:12:8d:
06:64:05:53:fd:b2:0f:ad:5f:9a:c8:12:28:d2:9c:81:26:80:
57:52:40:6b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ7QBOBFkPfxe2U1nxsEhkDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwNjE2MTA0MDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjc0NmEwNTQwM2FjMjg2Y2YyZjkxNGIyMWNmMzJiMjkyMTQxMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qzgBSr+QvOnJ99UlZ8VhQa8nezR
xqpm7svTRFFuOKXiQs38TPWeUa8rzfzNo/4rXU30SfAE6aISM3Ix5C1bgU/LXNiA
ynBXkS6GxKtlI+4b2xNW/jR148KJQFZZvpPkDUa29lgEyr1HPOFiION5dlbnLz2s
nJg0GydJQtkMv7+hjwmMZqwp7CvFSTSTbLyP4uphAjJWHyEu9Ckr8EocloXW8hHK
cQCE7WYugQ6JjWtjcNLKHh/dGvhv0n0J5pfzCOhRWWlBrDsO70QI6wy8fRv2KgxX
IWTf8k23dc8Om1nVAgIimeYjpP/xUCT4MO1Af2ZKodsbULSty0hDYrnInwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBJ0agVAOsKGzy+RSyHPMrKSFBJ2MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvRW5ScUJVQTZ3b2JQTDVGTEljOHlzcElVRW5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwEfdAwQC
wbeUAwQAwbf6AwQAwkR1AwQCwoTkMA0GCSqGSIb3DQEBCwUAA4IBAQBs0YBHyZD7
+nIJnfRu61f7HaBBLnlJOmgnftsD1DN2oNgyhAvCiYJWpuj5jL2Ufw5e03zZPhng
3tbulo0myTt1KgqHWlbY252u/7Ax/+DfaDmPaRh/XhYXrWZS5wvH9BR4pzcKtddL
MKjYTgMlbVpLr4DMTU3uOTAcxHyX9oCF1gN4mDUeSYotReWX2fw9fT8ftlp98QMe
i6Lt+2Ti35Dow/5kRTyY3k4TU+fLNk31ZhmjJJYanZpFuCzgDtGrwi6EP8EZ1LAb
hKjT4cFst14pzGOSUvLwgBvLD5RRrCE7UrBG2LAdz9i9Eo0GZAVT/bIPrV+ayBIo
0pyBJoBXUkBr
-----END CERTIFICATE-----
Generated at Tue Jun 30 21:32:35 2026 by rpki-client