Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/EYm7bhXHLcCQGHE5epE931gXQps.roa
File: EYm7bhXHLcCQGHE5epE931gXQps.roa (raw, json)
Hash identifier: ZOEEDs46E4NiKmAsq4D5e/9vRW+/ilsDeK9Cfn1vbjs=
Subject key identifier: 11:89:BB:6E:15:C7:2D:C0:90:18:71:39:7A:91:3D:DF:58:17:42:9B
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019FF20B8EE8713D59172CCDA3E11A00FCDC
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/EYm7bhXHLcCQGHE5epE931gXQps.roa
Signing time: Tue 11 Aug 2026 18:17:51 +0000
ROA not before: Tue 11 Aug 2026 18:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54004
IP address blocks: 95.164.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:0b:8e:e8:71:3d:59:17:2c:cd:a3:e1:1a:00:fc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Aug 11 18:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1189bb6e15c72dc0901871397a913ddf5817429b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6b:18:bb:5c:c5:6c:01:b7:71:ec:90:3e:19:
19:de:8d:fc:4b:16:19:68:d3:8e:8f:7e:22:20:89:
df:14:bf:ba:dc:b7:b8:6d:64:e1:8a:6d:82:6b:6c:
a0:da:54:ce:65:04:56:ec:03:1f:27:a6:98:74:7f:
43:0e:ad:1e:00:5b:be:01:5d:09:7e:39:0a:e4:9a:
01:f3:85:f8:11:39:92:4c:a3:d9:e6:04:a2:eb:59:
81:cf:cb:19:6b:1a:86:66:f9:05:f4:12:7d:59:5d:
da:35:10:53:87:b0:f0:fc:24:b9:e6:87:ee:94:34:
23:09:34:7b:3d:a4:a3:96:07:4a:e9:56:02:7c:8e:
91:46:58:35:a6:0f:7b:e5:be:a9:24:58:a0:95:b1:
85:b9:82:8c:ab:f9:7d:95:ec:73:df:8c:63:a6:1f:
d4:2c:4d:65:20:af:93:a2:00:57:3e:07:1d:02:4a:
b7:71:87:9e:22:bb:a0:8c:c6:7a:03:3e:15:46:cb:
5a:78:a0:92:9d:91:c0:ed:3c:1e:4d:a1:23:a2:43:
a0:8d:31:29:7f:b1:65:cb:62:84:07:3e:18:12:24:
ea:f1:83:d9:82:7e:d4:39:22:dd:a9:1f:65:42:fa:
f8:4f:54:df:78:d2:67:1c:19:60:20:c0:b1:e7:f6:
92:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:89:BB:6E:15:C7:2D:C0:90:18:71:39:7A:91:3D:DF:58:17:42:9B
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/EYm7bhXHLcCQGHE5epE931gXQps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:17:e1:8e:d7:69:7b:c3:22:8b:81:5b:0e:8f:dc:f6:af:41:
00:ef:76:89:23:30:ab:08:3b:ee:41:34:1d:dd:f5:a2:ea:6a:
5f:45:89:39:92:dc:d9:92:5d:df:f2:db:59:a9:f1:cd:46:57:
1c:ca:48:1e:87:aa:39:1c:e8:e9:81:7b:d1:be:ba:c4:10:ce:
61:b8:d3:6f:05:b9:8c:0c:13:9e:23:aa:16:d7:39:e5:62:77:
26:3b:4b:6b:d2:28:88:38:ac:f4:f3:3b:26:69:81:4d:48:a5:
28:27:10:23:89:93:51:b0:f2:ba:c0:20:60:54:92:e3:a6:13:
0d:b8:bd:e6:f5:b5:22:92:d2:f3:db:77:a2:1b:09:63:64:7e:
2c:99:85:1c:17:72:59:3b:e3:7a:18:46:e2:ef:4f:b6:e9:1b:
e0:e2:bd:e3:78:74:ea:d8:2d:75:7c:08:df:30:be:48:8b:b4:
77:e1:1b:94:cc:16:e7:35:c0:96:9f:9e:a8:09:26:f8:7f:32:
7d:ee:91:37:e0:5a:7b:b2:0a:69:8c:20:4c:a7:ac:ee:94:53:
d9:7b:3c:34:05:d8:79:09:2a:4b:73:a3:1f:54:81:31:0c:5f:
3b:72:e4:6b:de:ca:03:03:a2:01:76:74:8b:62:0a:96:ee:19:
3a:6a:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:49:03 2026 by rpki-client