Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/EgBbpVG9xP9smim8D2qxVcivfLE.roa
File: EgBbpVG9xP9smim8D2qxVcivfLE.roa (raw, json)
Hash identifier: esOaIQ3v7I/N8VlsFyKJ8aupbOgvKlvXRplG2D2AhQs=
Subject key identifier: 12:00:5B:A5:51:BD:C4:FF:6C:9A:29:BC:0F:6A:B1:55:C8:AF:7C:B1
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019D2B2B19588AB3EA260282F99F718CB935
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/EgBbpVG9xP9smim8D2qxVcivfLE.roa
Signing time: Thu 26 Mar 2026 17:22:18 +0000
ROA not before: Thu 26 Mar 2026 17:22:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216139
IP address blocks: 150.251.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:2b:19:58:8a:b3:ea:26:02:82:f9:9f:71:8c:b9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Mar 26 17:22:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12005ba551bdc4ff6c9a29bc0f6ab155c8af7cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:0d:e8:0c:76:1e:48:72:44:e9:81:71:ce:
54:d6:b3:e4:9a:44:26:35:12:81:69:fb:cc:d7:15:
ff:7a:3a:7b:73:83:ec:44:a6:24:67:86:e8:f3:1d:
aa:f0:18:81:20:c0:0e:a1:5a:c8:69:a2:10:49:d0:
c9:a9:a8:4b:e1:dc:2a:06:c3:94:a6:52:c4:e1:88:
5e:a7:59:5a:8d:a9:e0:0e:0b:a4:54:81:86:47:cb:
83:f9:b0:39:7e:38:55:15:d9:cc:a4:1d:6b:52:4e:
fb:8c:13:aa:a9:1c:f3:1e:22:07:2a:d3:e5:ed:f9:
95:b1:fe:07:5d:a3:ff:b0:27:21:f0:8c:32:d7:ee:
d9:96:34:ee:f2:1c:4b:c6:74:37:83:37:40:58:ac:
27:2b:b6:38:b2:5c:56:9f:20:db:2c:ff:0a:a7:81:
86:4a:7b:45:b4:c5:24:ec:85:90:15:01:42:ad:39:
71:46:9f:b2:54:cf:5a:e7:c7:f8:7e:49:fd:00:91:
2a:91:09:22:12:28:5a:52:27:39:4b:bd:2e:bf:fd:
51:86:f2:6d:02:19:d3:b7:2b:0d:7d:2b:e4:9d:e0:
8c:eb:50:b0:50:74:3e:4d:23:2b:cc:12:9d:23:4f:
b0:2f:08:e8:20:f8:ac:f0:68:cd:f0:58:5d:21:5b:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:00:5B:A5:51:BD:C4:FF:6C:9A:29:BC:0F:6A:B1:55:C8:AF:7C:B1
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/EgBbpVG9xP9smim8D2qxVcivfLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.137.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ad:65:be:72:c0:0e:d4:59:14:dc:ce:ac:34:ac:22:21:04:
32:48:8d:9b:e9:71:ef:fd:9f:18:f4:e2:2b:99:ec:52:a6:0b:
73:55:17:10:72:ef:28:11:af:f8:08:75:ca:34:8e:a1:8f:d9:
34:30:ae:1c:b0:27:60:26:09:63:db:05:9f:a5:2a:ef:95:da:
42:ea:56:6a:01:92:a6:20:98:66:ef:2a:86:da:a6:35:4d:9f:
c0:fa:47:ac:9d:b2:dd:22:12:44:77:fc:13:e7:eb:55:e0:b3:
6b:0c:a1:70:6f:4d:1f:40:73:c8:25:14:6e:fe:e8:0a:6e:a1:
d0:96:24:68:6c:ee:d4:de:9d:6f:b7:7d:b3:45:03:fb:18:b9:
1b:e8:fa:68:a6:a1:36:7c:89:e1:7d:f9:78:e6:fd:6b:65:78:
d5:ef:08:08:9b:a6:e2:4c:e3:86:26:45:78:29:25:8e:59:f7:
46:36:27:73:83:d1:39:c7:d3:23:ff:27:6d:f2:0e:ee:28:14:
58:44:40:06:d4:23:60:2d:19:30:7e:b7:a6:11:d9:09:9a:ad:
54:64:c9:60:dd:7d:87:f4:a0:63:82:28:23:71:35:b7:b4:dc:
57:6f:ba:de:64:99:25:ee:a5:d1:25:1d:af:a0:9c:cb:27:e2:
76:b2:71:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:11:07 2026 by rpki-client