Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/EQfmCyJK-Mg7Q_CC4AI7nvAhUuU.roa
File: EQfmCyJK-Mg7Q_CC4AI7nvAhUuU.roa (raw, json)
Hash identifier: nQFMDnKwdHJt2eJYO2p0fDKyUyFDWX4J7EnUACLeHDg=
Subject key identifier: 11:07:E6:0B:22:4A:F8:C8:3B:43:F0:82:E0:02:3B:9E:F0:21:52:E5
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 019E2B93168ADB0EF386E4B2D0AF596FC504
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/EQfmCyJK-Mg7Q_CC4AI7nvAhUuU.roa
Signing time: Fri 15 May 2026 12:18:39 +0000
ROA not before: Fri 15 May 2026 12:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8315
IP address blocks: 83.98.192.0/21 maxlen: 24
83.98.200.0/22 maxlen: 24
89.30.192.0/19 maxlen: 24
89.30.208.0/20 maxlen: 24
89.30.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:93:16:8a:db:0e:f3:86:e4:b2:d0:af:59:6f:c5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: May 15 12:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1107e60b224af8c83b43f082e0023b9ef02152e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:8f:99:87:12:68:1e:cf:c7:45:3c:9e:94:
11:76:81:78:43:00:d9:7c:88:89:cb:68:8d:36:10:
f8:3d:c5:d4:df:21:fc:c4:91:7c:99:63:a2:6f:45:
ca:27:ef:af:94:d3:29:03:c2:75:52:21:30:ee:eb:
98:26:f5:a2:c1:16:e3:00:4c:b2:b2:58:b6:b8:f9:
1a:68:be:cb:04:14:d8:17:31:9c:8b:1b:5d:c3:a2:
0d:37:a0:e2:d8:9c:4b:88:13:98:4f:50:37:ee:4e:
cd:7d:98:54:5f:2e:e3:21:20:16:21:1c:26:b2:54:
c3:0b:ac:ef:a9:8c:9e:6e:cd:a0:f6:d9:0e:79:bf:
5d:2c:b6:38:50:ff:8c:cd:0c:14:28:8b:45:36:d4:
6f:a0:52:74:60:e3:21:de:ec:a8:cf:3e:6d:8a:ed:
99:4d:c0:c5:4f:ca:04:b4:e1:21:16:93:15:7e:fd:
0f:90:7e:f4:eb:5f:1b:f6:45:05:08:01:0c:a2:d8:
15:18:78:eb:19:8e:10:66:31:b0:50:a2:24:1c:fa:
c3:52:71:e4:c3:0a:3d:f4:38:3b:92:47:b5:4c:df:
9b:7e:a3:15:4a:5f:4f:f7:cc:96:26:43:1c:e9:8b:
b1:df:01:0e:53:a5:ec:83:ca:f4:28:31:22:af:70:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:07:E6:0B:22:4A:F8:C8:3B:43:F0:82:E0:02:3B:9E:F0:21:52:E5
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/EQfmCyJK-Mg7Q_CC4AI7nvAhUuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.192.0-83.98.203.255
89.30.192.0-89.30.231.255
Signature Algorithm: sha256WithRSAEncryption
89:6b:b7:69:f1:18:54:8c:31:30:42:6b:a0:29:d9:1b:a7:35:
5f:e2:b4:b2:30:2a:b5:49:8b:57:4e:f6:35:20:3f:de:9c:fe:
da:b5:35:1c:19:53:6b:a0:55:51:49:82:a3:63:36:09:6b:9e:
52:30:7e:ef:2c:2c:b6:d3:17:fe:b6:57:bb:0e:a8:b5:33:5d:
48:fd:f8:b3:db:45:c8:32:64:72:92:0c:e2:4d:df:c6:58:91:
28:78:dd:65:44:53:0f:94:ac:e7:34:18:58:1c:b1:f7:a8:6f:
e9:dc:b9:28:5f:27:db:33:01:29:d2:42:52:4f:e4:ce:12:82:
aa:81:d0:ae:b7:67:08:3d:3f:fa:54:a0:4b:25:72:2c:b4:9c:
62:75:3f:69:f8:5d:e3:6e:fa:06:0b:7c:f0:16:83:37:03:39:
34:44:00:52:d8:35:8c:44:28:2b:04:c9:6a:40:22:39:b6:87:
a9:00:80:b6:f2:ee:8b:32:01:88:fa:8f:a3:49:7a:a3:ee:69:
f7:32:d3:7d:92:11:ba:14:15:e0:5c:4b:21:b2:71:13:44:ff:
73:6e:4a:68:ee:ce:ea:fb:1e:15:86:e6:11:65:9f:3f:25:cb:
3d:8a:74:dc:24:36:ae:32:50:24:b3:1c:28:06:5c:87:a7:da:
e7:61:07:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:27:56 2026 by rpki-client