Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/EYQtAfhdmZfDZdsN4DzNwEpURfE.roa
File: EYQtAfhdmZfDZdsN4DzNwEpURfE.roa (raw, json)
Hash identifier: jh9O88OI/DxugLonRxp5PXkbVTMwIQJK6Pvwlc3iuWU=
Subject key identifier: 11:84:2D:01:F8:5D:99:97:C3:65:DB:0D:E0:3C:CD:C0:4A:54:45:F1
Certificate issuer: /CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Certificate serial: 019F23695D91EEBC68BEECCF66F10B9313B8
Authority key identifier: 98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/EYQtAfhdmZfDZdsN4DzNwEpURfE.roa
Signing time: Thu 02 Jul 2026 15:18:55 +0000
ROA not before: Thu 02 Jul 2026 15:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137
IP address blocks: 147.122.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:5d:91:ee:bc:68:be:ec:cf:66:f1:0b:93:13:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f4c7576885c28284a4d6640b3eda94e300b72c
Validity
Not Before: Jul 2 15:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11842d01f85d9997c365db0de03ccdc04a5445f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:ad:1f:9d:54:05:15:65:6b:9f:cb:99:9a:
00:01:ff:6f:95:14:c4:f0:d8:b2:e3:3d:69:d5:8b:
3d:46:5c:78:22:9a:51:a1:26:38:8e:90:40:cf:f6:
66:16:ca:22:8c:b7:47:da:2e:1b:1f:23:07:72:b3:
89:33:fe:c3:57:a2:ae:3e:e9:04:70:8c:99:79:be:
4d:9e:44:0b:58:b0:d9:6a:f3:aa:7f:c3:7c:b5:86:
5b:98:1f:c5:61:54:25:cc:b0:66:ef:09:34:4a:44:
2d:09:be:72:a6:d7:52:ca:e2:d7:00:40:08:2d:fa:
c6:f0:88:74:7b:e9:bd:50:c6:6a:37:ff:f0:bd:5b:
af:a4:45:bb:19:a7:c9:d1:14:94:c0:72:1c:50:10:
68:6e:ac:2f:7c:17:ae:4e:b1:81:7c:97:9a:b8:24:
d9:ae:b2:0c:9f:fb:a8:a6:f2:5a:3a:b9:9d:c6:9c:
1b:7f:cc:84:c3:b5:91:24:ed:33:74:ad:60:08:cf:
cc:5e:77:9c:37:86:e7:bf:dc:74:d8:ac:d2:07:bd:
10:81:da:e5:dd:3f:6f:d2:b7:82:d0:0a:55:0b:1e:
78:ac:43:53:ab:16:b9:37:15:f2:aa:1a:67:e7:b9:
76:ab:76:a9:48:10:b2:07:81:f7:81:fe:54:43:f0:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:84:2D:01:F8:5D:99:97:C3:65:DB:0D:E0:3C:CD:C0:4A:54:45:F1
X509v3 Authority Key Identifier:
keyid:98:F4:C7:57:68:85:C2:82:84:A4:D6:64:0B:3E:DA:94:E3:00:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPTHV2iFwoKEpNZkCz7alOMAtyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/EYQtAfhdmZfDZdsN4DzNwEpURfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/mPTHV2iFwoKEpNZkCz7alOMAtyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.122.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:6f:00:d7:54:d6:18:66:84:f7:7d:bd:d0:aa:f5:f0:e3:d8:
b2:46:7f:26:0b:3c:cf:f9:90:2f:af:a6:41:ee:4c:c3:b7:36:
e2:42:ec:d9:18:38:75:cb:d3:43:30:c0:cf:ed:23:56:d6:d7:
8e:c5:aa:87:a6:1a:17:a9:6f:72:4d:1d:cb:54:32:47:d7:28:
7b:47:a5:97:e5:f0:e6:e9:d6:1c:6d:27:2b:9b:d0:0b:ab:54:
a9:25:9e:01:e0:03:ad:f7:f4:37:ea:e5:93:67:1b:26:94:c8:
bb:1f:42:fc:df:c6:f8:13:4f:51:24:41:fa:00:34:f1:b7:5e:
9d:72:07:ff:d7:9b:f3:74:f3:27:7c:02:8d:4e:79:42:8b:0f:
42:19:d7:95:be:da:ed:89:bb:ea:2b:59:da:c4:41:3c:a8:00:
d0:1a:10:fc:87:c1:4b:8c:2a:09:96:5b:ea:a2:93:71:fb:7b:
6c:f4:40:a9:41:39:30:b4:dd:df:39:61:55:7b:62:93:51:ed:
5f:f9:0a:35:fd:f7:02:c3:e4:fb:c8:09:69:c8:a6:74:25:cb:
45:1c:a5:dd:80:c2:d4:12:9b:2e:bc:ed:d0:bd:a4:9d:5f:82:
2d:97:a5:34:6c:67:5f:3f:7f:b7:88:ac:eb:f5:63:cc:9a:96:
c8:e2:a5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:35 2026 by rpki-client