Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/EycWZ_dfGLG-EqHrgSZrTtUENKs.roa
File: EycWZ_dfGLG-EqHrgSZrTtUENKs.roa (raw, json)
Hash identifier: KJ1RAPm5hecF2qlfjfmX1AbYuEVtEPM/dltRx7gtvV8=
Subject key identifier: 13:27:16:67:F7:5F:18:B1:BE:12:A1:EB:81:26:6B:4E:D5:04:34:AB
Certificate issuer: /CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Certificate serial: 019F23692513BD84D143626490A8D17D9A2C
Authority key identifier: D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/EycWZ_dfGLG-EqHrgSZrTtUENKs.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2200
IP address blocks: 134.158.72.0/23 maxlen: 23
134.158.78.0/24 maxlen: 24
134.158.120.0/21 maxlen: 21
134.158.159.0/24 maxlen: 24
134.158.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:25:13:bd:84:d1:43:62:64:90:a8:d1:7d:9a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13271667f75f18b1be12a1eb81266b4ed50434ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:20:75:24:e9:83:f0:e5:88:f6:7c:8d:72:
52:29:7f:6b:eb:08:a1:dc:94:17:88:6e:3d:d9:a2:
82:37:09:6b:6d:90:1b:18:9a:ef:6f:df:79:27:72:
74:7c:ab:e2:c5:20:0a:98:86:10:8b:79:49:79:f3:
ed:47:0e:8b:0a:b8:ef:b4:56:c1:e9:47:08:e7:5e:
c1:bf:56:4d:6b:de:1f:fb:40:95:7f:86:b6:64:76:
2e:9f:23:45:59:6c:b4:40:98:3d:43:7d:7d:77:d2:
39:7f:f1:fb:a7:91:48:86:e5:08:b1:fa:43:f3:f7:
8b:c6:4e:87:5c:3b:8a:b3:1f:a3:41:ce:15:ba:cb:
a1:6a:a6:f9:9b:b2:46:af:73:1b:74:8d:61:a7:a3:
9f:c8:97:80:69:cc:ca:73:c1:f1:82:13:e0:59:fd:
67:e6:fc:0d:38:56:ab:d9:0e:62:7b:3e:9b:89:78:
7d:5d:95:14:e0:11:9c:7f:de:e1:6e:26:e8:e0:6f:
0f:7a:ed:06:35:27:4a:a1:b5:dd:50:e5:79:a8:25:
81:8a:bd:48:ee:10:05:c6:2b:f2:81:40:0f:25:e8:
8c:e4:d2:8c:6a:a3:7d:76:86:19:33:05:3f:06:be:
01:d0:86:76:5c:0c:f5:22:84:bb:13:e0:2d:f9:d0:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:27:16:67:F7:5F:18:B1:BE:12:A1:EB:81:26:6B:4E:D5:04:34:AB
X509v3 Authority Key Identifier:
keyid:D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/EycWZ_dfGLG-EqHrgSZrTtUENKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.158.72.0/23
134.158.78.0/24
134.158.120.0/21
134.158.159.0/24
134.158.195.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:bf:9e:e7:24:80:16:40:4f:7c:27:8b:ec:87:a5:96:b4:22:
29:49:7e:a7:57:9d:52:e6:4d:80:a4:d3:99:bd:d4:ac:3a:2a:
15:95:68:be:a8:9e:63:a6:9c:5d:b5:01:d4:05:23:9c:aa:3b:
f3:39:6e:bb:8e:90:b2:93:d9:86:18:73:c1:0f:04:73:04:e4:
cb:20:e0:c7:e3:0f:70:c9:96:5a:50:52:bc:06:28:92:7c:7b:
fe:cb:5e:65:5a:c4:1c:8e:92:1b:4e:90:bc:40:49:72:a1:ba:
d8:08:a2:97:f1:de:1e:7c:cf:23:e9:d0:bb:b8:5c:d8:38:fb:
63:43:43:ed:74:96:8d:93:63:0d:d5:a7:3c:c9:63:60:04:e6:
d8:90:a9:7b:06:d9:69:5b:8f:44:f3:df:50:59:dc:35:d1:f9:
cf:f1:dd:fc:51:03:ac:01:05:88:82:11:f3:09:80:51:22:65:
62:9d:d5:c1:94:63:a8:b6:48:78:09:83:5f:b0:bd:2b:70:51:
cc:de:9a:26:90:a1:04:20:0e:51:e2:07:1d:b6:43:45:f4:a7:
a1:10:00:a5:e0:0a:f9:65:35:ab:36:95:93:c7:1e:2b:58:0f:
55:10:7d:a6:72:e7:59:6d:ad:5e:9b:cc:63:da:6d:e2:5b:89:
3f:b9:4c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:53 2026 by rpki-client