Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/EmsLiBKEkyX3Vmqoe6fo1oCbt7U.roa
File: EmsLiBKEkyX3Vmqoe6fo1oCbt7U.roa (raw, json)
Hash identifier: e8J72cchnni++KLKsalLxVlSHEj07DKNt+uGFsfkwSQ=
Subject key identifier: 12:6B:0B:88:12:84:93:25:F7:56:6A:A8:7B:A7:E8:D6:80:9B:B7:B5
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019DDF00E0091889EE01FF376CEC26BE23FF
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/EmsLiBKEkyX3Vmqoe6fo1oCbt7U.roa
Signing time: Thu 30 Apr 2026 15:27:49 +0000
ROA not before: Thu 30 Apr 2026 15:27:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399955
IP address blocks: 94.229.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:00:e0:09:18:89:ee:01:ff:37:6c:ec:26:be:23:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 30 15:27:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=126b0b8812849325f7566aa87ba7e8d6809bb7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:fc:d2:f5:1e:e2:5c:e8:f5:b3:dc:e6:15:
ff:21:c1:14:a8:3a:20:96:2a:f3:07:72:eb:d8:96:
b4:b4:d3:fc:66:6b:04:97:6e:4b:3c:d9:35:7e:4a:
4d:57:a1:e3:1f:26:3f:c0:f1:65:03:ca:05:3a:be:
2c:c7:9a:93:2c:65:5f:af:3d:33:86:a0:a8:f4:16:
a5:54:75:c1:2e:05:d4:20:4a:04:27:d2:b9:a7:d1:
e1:c7:a7:90:26:99:66:54:6f:da:85:de:1c:d3:04:
7a:98:1c:b0:57:3c:fc:00:ee:28:33:1d:10:d6:84:
7e:2b:e4:82:f3:0c:00:24:18:0c:fb:a9:8b:9a:b1:
bc:a1:29:f3:1e:47:93:83:7c:62:51:99:68:79:dd:
e2:77:ed:b5:03:1a:25:9f:88:34:9e:a4:88:46:93:
85:a8:cf:c5:29:08:b2:0c:02:e0:ca:56:57:58:ba:
f7:48:6b:da:4a:1e:50:9f:5e:8a:5b:aa:57:f5:af:
d1:ec:1f:0e:1b:25:06:3a:22:17:10:72:63:4d:72:
c2:a9:a1:7b:f9:60:e8:07:b3:7f:2f:21:89:d1:75:
fc:a1:ed:e7:74:49:4c:ec:19:da:17:02:72:07:e6:
3a:d3:d0:d5:92:3c:bd:63:22:ef:55:9c:11:19:40:
2f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6B:0B:88:12:84:93:25:F7:56:6A:A8:7B:A7:E8:D6:80:9B:B7:B5
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/EmsLiBKEkyX3Vmqoe6fo1oCbt7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.216.0/23
Signature Algorithm: sha256WithRSAEncryption
94:6e:45:33:3f:67:38:8c:1e:59:a8:cd:a3:d7:94:43:ec:ea:
6e:16:b3:de:f6:cd:f5:a5:17:11:05:07:b2:4c:13:8f:37:3b:
ac:fb:57:6f:6b:f6:a6:73:06:3c:6e:b8:dd:1e:4a:50:08:45:
de:e3:da:72:06:dc:a5:ca:04:28:01:64:b4:a8:7f:42:01:53:
5c:5e:66:a1:56:07:bd:3d:bf:af:49:41:c6:fe:ed:38:9d:8b:
6d:b3:d8:dd:d4:c5:bd:f3:b7:e5:64:c9:57:42:bc:3a:c0:b5:
b0:b2:dd:74:11:f0:f6:c3:34:68:8a:18:f7:bd:37:04:43:5f:
85:f5:3e:b7:b5:95:a7:56:8e:d3:3b:43:81:7d:23:13:23:ef:
0a:7b:da:3a:96:bb:4f:b9:83:e0:76:14:7e:f2:dd:40:c1:ee:
41:dc:6f:db:5f:9b:01:36:85:75:2c:c9:f2:8f:a1:1f:e0:67:
09:9b:05:32:2a:95:5e:9e:41:59:e9:76:95:97:e6:8d:7e:b2:
6d:35:89:bc:f1:55:6e:60:59:ae:4c:2a:c5:a3:7e:8b:f3:62:
de:84:7e:8d:ac:64:22:e5:97:be:a1:e6:9b:d2:06:ad:4a:dd:
38:a6:29:6d:18:d6:06:1e:34:e4:21:7b:e1:82:b8:99:b6:c1:
15:dd:77:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 07:37:34 2026 by rpki-client