Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/EkKYDgf8CJwACnwhA9TYZvLXaUY.roa
File: EkKYDgf8CJwACnwhA9TYZvLXaUY.roa (raw, json)
Hash identifier: 3LinOjO9RICNC29hk77B/mFnJ3J5EkBogfoC9PhscGw=
Subject key identifier: 12:42:98:0E:07:FC:08:9C:00:0A:7C:21:03:D4:D8:66:F2:D7:69:46
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 019FD8D08D65150477091279981BECF3A79A
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/EkKYDgf8CJwACnwhA9TYZvLXaUY.roa
Signing time: Thu 06 Aug 2026 20:42:54 +0000
ROA not before: Thu 06 Aug 2026 20:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402475
IP address blocks: 217.65.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:d0:8d:65:15:04:77:09:12:79:98:1b:ec:f3:a7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Aug 6 20:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1242980e07fc089c000a7c2103d4d866f2d76946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:31:ff:38:d4:84:61:42:73:30:88:b5:16:04:
e3:98:68:f0:a8:c2:ad:0b:37:5c:dc:51:1c:a8:57:
f0:04:bf:4f:b6:78:10:76:41:d7:11:f6:ae:d4:79:
0e:03:0c:09:f5:29:93:0e:cd:64:55:5f:fe:86:f3:
fb:0f:f3:09:f1:a5:cd:bf:cf:ad:41:85:7b:38:a1:
d6:7f:9a:e5:14:02:b1:59:d1:3a:5e:45:ac:f2:1c:
55:4e:ab:c9:d2:18:17:27:c5:79:f0:cd:06:a2:4e:
24:1a:ce:af:36:eb:42:43:65:25:7b:25:e6:1d:88:
3c:a6:41:66:b0:34:2d:72:55:80:98:8a:b8:96:81:
b1:03:83:56:b8:41:b5:de:0b:5e:c5:8d:d4:1e:93:
5e:f8:dd:4d:e8:d4:2a:6a:e1:61:b8:5b:fd:f4:34:
cb:7e:79:68:3c:a2:9c:8a:08:2c:ec:0c:df:36:f2:
11:77:f2:5e:98:ff:a1:a8:d9:ec:29:ba:bc:a4:8f:
7a:6f:b4:ae:48:97:62:49:c2:3b:b6:44:4d:a4:6b:
5a:45:b6:ae:31:28:6f:95:e9:28:b9:14:22:8f:d8:
c7:03:fc:12:4e:37:a9:4a:fd:da:bf:69:98:fd:f3:
41:06:75:e8:85:0e:f8:45:0c:a9:e3:f7:07:24:83:
59:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:98:0E:07:FC:08:9C:00:0A:7C:21:03:D4:D8:66:F2:D7:69:46
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/EkKYDgf8CJwACnwhA9TYZvLXaUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.65.72.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ca:b1:ee:bc:7d:04:ad:1f:25:01:8a:70:30:78:bb:fc:2f:
d8:74:f2:90:18:c7:35:5b:1d:9b:84:49:ce:73:76:5d:3f:92:
fa:56:11:f9:db:fe:93:94:9b:2a:eb:24:a3:86:63:b0:b3:6e:
d0:64:13:ff:e4:9b:23:05:22:8b:6e:3d:bc:a0:b2:d5:49:21:
cb:9e:79:67:a0:31:82:01:74:13:78:00:f6:ef:bc:01:b9:27:
24:f4:3c:70:c6:c2:39:05:c1:fb:0d:c5:00:57:fe:91:92:1b:
d3:96:fe:eb:c2:36:f5:32:5c:c5:c1:ca:00:6c:e5:41:6b:e2:
a8:09:aa:a9:c7:23:c2:5f:5c:7b:79:0a:e6:e4:fa:54:10:1c:
e3:ce:ae:34:c7:be:e6:4b:07:5a:4d:1f:34:86:c4:93:3c:b6:
1f:4e:03:8a:62:5d:29:f7:85:45:92:05:b8:d5:7c:07:c8:40:
94:3b:3c:12:ce:0f:f2:26:64:85:67:c3:12:3c:60:30:39:b8:
53:53:bd:f1:67:5a:30:b7:d6:f8:a7:62:b1:5b:d9:02:67:b3:
45:19:56:86:07:4f:97:6a:16:6a:a7:b7:15:60:0d:97:5b:a5:
09:7b:bc:c0:b9:ee:9d:52:ba:3a:a9:1e:78:98:af:2e:50:a0:
56:c6:f6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:34:11 2026 by rpki-client