Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/euykv0FyncRwBQFkywZp-52bpgQ.roa
File: euykv0FyncRwBQFkywZp-52bpgQ.roa (raw, json)
Hash identifier: ZOJbGj8NVyHjzXHRINSmo5KX6o2s1DTTLNtkxOa4CQU=
Subject key identifier: 7A:EC:A4:BF:41:72:9D:C4:70:05:01:64:CB:06:69:FB:9D:9B:A6:04
Certificate issuer: /CN=e2305e9cd6423dd03286feecf55db93b06282ff1
Certificate serial: 019F23682D125E4920E22083752426A6606F
Authority key identifier: E2:30:5E:9C:D6:42:3D:D0:32:86:FE:EC:F5:5D:B9:3B:06:28:2F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jBenNZCPdAyhv7s9V25OwYoL_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/euykv0FyncRwBQFkywZp-52bpgQ.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206858
IP address blocks: 2001:678:d88::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jBenNZCPdAyhv7s9V25OwYoL_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2d:12:5e:49:20:e2:20:83:75:24:26:a6:60:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2305e9cd6423dd03286feecf55db93b06282ff1
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7aeca4bf41729dc470050164cb0669fb9d9ba604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2e:7a:96:37:0f:fd:53:9d:4f:a7:7a:8a:fe:
5a:bb:53:42:f7:b9:97:9f:9f:b2:25:ba:e8:06:2d:
d7:1a:6d:96:8b:16:98:ff:db:7e:4e:b3:3a:4c:e2:
f3:f7:fa:ac:a8:a2:af:72:05:82:7c:12:f5:9c:ee:
c8:61:f8:f7:62:13:53:16:06:4d:1c:d4:80:76:ab:
4b:35:bf:0b:b9:f5:7e:b6:ac:50:3c:9c:3c:b5:e5:
b1:6b:db:a5:d3:5e:f9:95:2b:5c:d6:25:ca:93:b9:
d3:c0:76:47:67:f4:32:06:47:dc:ea:b7:eb:d7:3c:
34:b9:7a:c7:b0:69:be:34:99:65:6a:37:06:a2:c0:
8a:af:8f:ce:b9:fc:fe:e0:4c:51:bc:f9:8b:43:2e:
b5:bb:85:a6:8e:49:a8:2d:a9:90:39:15:6b:18:8a:
58:ff:5e:39:55:ac:2f:b6:c3:11:81:94:2b:03:87:
18:30:7f:cc:a7:77:8f:57:3f:aa:3c:bf:83:8b:eb:
88:d5:6d:80:72:16:12:73:94:8d:6f:f3:6b:d5:4c:
af:b5:cf:88:64:78:39:1a:af:aa:2c:05:b9:83:74:
a7:61:2e:e2:c6:8c:fc:bc:bc:c8:29:ba:e5:3f:f9:
25:4b:00:b0:0f:e3:13:a7:db:c9:81:2d:2d:ef:11:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EC:A4:BF:41:72:9D:C4:70:05:01:64:CB:06:69:FB:9D:9B:A6:04
X509v3 Authority Key Identifier:
keyid:E2:30:5E:9C:D6:42:3D:D0:32:86:FE:EC:F5:5D:B9:3B:06:28:2F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jBenNZCPdAyhv7s9V25OwYoL_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/euykv0FyncRwBQFkywZp-52bpgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d88::/48
Signature Algorithm: sha256WithRSAEncryption
99:95:bd:bf:b0:04:bd:86:e5:76:20:4f:37:fb:e3:e2:9a:08:
19:61:86:9e:77:c5:5c:82:c9:d7:db:fe:61:ff:4c:e5:c9:97:
84:97:9e:6e:92:a1:0d:5c:75:12:26:c8:90:46:3b:6e:98:f5:
ab:e2:fc:c7:27:33:9a:5f:55:11:3a:05:d8:83:d6:e2:0d:94:
45:e5:72:2f:70:8c:3c:7d:3c:76:47:dd:df:e6:dd:4a:92:88:
3b:3f:e4:80:04:ac:9a:fd:4d:48:b3:65:1f:2d:ec:de:2d:47:
3c:5e:36:ca:c5:3c:e3:d0:16:4b:9c:8d:a2:a8:68:a0:87:dc:
e8:e1:53:77:aa:97:a3:52:c6:ad:da:73:64:45:51:85:07:2c:
88:4c:6c:19:bd:ff:3b:ef:2b:4f:3a:db:8c:33:3a:05:25:0f:
c5:b6:3f:1d:12:7d:12:df:46:38:e5:d5:c3:6a:d6:3e:d3:bd:
be:27:c1:b4:82:72:e0:c6:cb:a4:7b:e7:c7:07:18:e3:82:c5:
c2:6e:f1:77:e1:23:5a:c0:66:99:eb:35:73:90:8e:9e:3c:17:
51:a5:23:da:c4:e6:a5:5e:bb:85:fc:fd:38:5b:54:90:a7:5e:
06:dc:79:fe:6b:76:5b:cf:b9:ab:5e:0f:71:ea:09:71:d0:79:
c5:b4:07:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:10 2026 by rpki-client