Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/EmBlgt9DiqGnntOySw2kXk1fbNI.roa
File: EmBlgt9DiqGnntOySw2kXk1fbNI.roa (raw, json)
Hash identifier: Ewovb+0atkBX/R3/b9XAWQZEcWOC9hdgz4bchJJSz4g=
Subject key identifier: 12:60:65:82:DF:43:8A:A1:A7:9E:D3:B2:4B:0D:A4:5E:4D:5F:6C:D2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019ED811D748DF8C1C301C4E38883E744235
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/EmBlgt9DiqGnntOySw2kXk1fbNI.roa
Signing time: Thu 18 Jun 2026 00:11:48 +0000
ROA not before: Thu 18 Jun 2026 00:11:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393521
IP address blocks: 77.111.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d8:11:d7:48:df:8c:1c:30:1c:4e:38:88:3e:74:42:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 18 00:11:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12606582df438aa1a79ed3b24b0da45e4d5f6cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:5a:dc:f6:97:5a:33:71:e2:fb:c0:fb:05:
43:27:d0:97:b2:b2:69:15:61:97:f0:7e:19:f6:c8:
22:81:b7:04:1e:3c:60:0f:d0:95:7b:9a:25:3d:3a:
19:4c:8a:59:14:ba:22:1f:d1:37:48:41:cd:bc:7c:
f9:e1:67:4c:f3:cc:0f:a4:f4:a0:22:01:ab:ae:ea:
22:bc:d6:d9:96:bf:44:bc:53:90:9f:14:00:7a:17:
ee:2f:9a:7c:8d:96:f1:5f:bd:19:9e:ed:a9:e9:f6:
8d:38:73:cb:42:4e:08:ea:b5:49:e0:ba:77:b7:04:
3a:ef:70:79:95:c3:07:4c:71:30:85:69:f5:2a:cf:
65:e9:bd:0e:d4:3e:9d:8b:58:22:32:72:0c:2d:07:
98:0c:df:0a:fa:95:a6:96:39:7b:ad:96:ce:ae:3c:
b8:ff:e9:6a:e8:76:dd:c1:c4:65:57:00:59:45:53:
b7:a7:91:1b:fe:0c:a6:31:80:f0:1f:c5:ac:2e:c4:
60:4c:6f:f8:21:ce:6c:b6:0d:08:36:90:4c:dd:5b:
ad:68:1c:ad:7e:24:25:e3:e6:08:6f:85:95:4a:2c:
22:27:9f:a9:68:5e:13:0b:cd:23:20:e7:09:e4:ef:
67:a6:8c:aa:45:39:35:a0:a4:c5:67:e1:92:64:37:
41:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:60:65:82:DF:43:8A:A1:A7:9E:D3:B2:4B:0D:A4:5E:4D:5F:6C:D2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/EmBlgt9DiqGnntOySw2kXk1fbNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.100.0/24
Signature Algorithm: sha256WithRSAEncryption
65:87:c5:f9:09:1f:46:18:94:fa:ab:84:38:aa:3f:2e:6e:67:
5d:1d:9a:fd:5c:c9:e3:47:ce:4f:0f:f5:60:3f:87:e9:46:a1:
00:a8:b3:66:b7:2a:c4:0b:66:a2:4f:b9:69:00:ef:44:dd:8a:
26:91:b7:5d:80:fb:99:79:2b:d1:63:a2:9b:fa:ff:9d:0f:07:
61:d4:02:4c:45:fc:80:20:23:60:67:3a:ae:fe:36:b8:49:d3:
7b:b6:a5:db:c5:65:f5:d1:06:3f:6f:36:d3:ee:2c:82:39:2c:
57:fa:fe:bd:34:7b:5b:25:af:dc:b1:7b:83:1a:ff:c8:69:51:
20:40:7e:b8:79:f7:6c:25:30:13:aa:e9:89:fb:7b:91:a3:17:
e6:de:25:e7:ac:8c:3c:20:79:28:26:0a:01:a7:8f:89:0e:08:
e0:ae:dd:a3:a3:49:75:6b:a6:2b:e4:73:e7:8e:e4:51:2c:12:
c4:d7:d1:e6:ea:00:34:5b:71:d3:80:e4:6c:d8:53:d1:51:4b:
21:38:55:fe:97:a9:74:ba:19:44:43:55:be:9d:f0:56:43:a4:
8d:b5:3a:59:11:9e:c1:5b:0f:e5:67:5f:6b:41:0f:46:3d:c2:
3e:6e:a7:20:b3:87:fe:c2:74:2a:c6:81:f5:7d:31:53:48:1d:
42:6a:cd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:50:54 2026 by rpki-client