Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/EJ834orq5XxkS33xyiAVciNKYTA.roa
File: EJ834orq5XxkS33xyiAVciNKYTA.roa (raw, json)
Hash identifier: tsKZbbD2a26s9kJQXaOMNeI95YAO2ar9y5cHWx269UQ=
Subject key identifier: 10:9F:37:E2:8A:EA:E5:7C:64:4B:7D:F1:CA:20:15:72:23:4A:61:30
Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Certificate serial: 019F827948A7E8B1FE5DB70BF5C8D2A9B6A6
Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/EJ834orq5XxkS33xyiAVciNKYTA.roa
Signing time: Tue 21 Jul 2026 02:20:14 +0000
ROA not before: Tue 21 Jul 2026 02:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211759
IP address blocks: 143.246.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:79:48:a7:e8:b1:fe:5d:b7:0b:f5:c8:d2:a9:b6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Validity
Not Before: Jul 21 02:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=109f37e28aeae57c644b7df1ca201572234a6130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:f1:db:d0:33:6b:66:11:77:c6:79:39:0f:
81:a6:09:8a:ab:09:6f:79:44:91:2b:4c:b3:44:b7:
4c:37:b0:43:a5:2c:14:9c:35:a6:87:12:8c:3e:a4:
fb:37:50:46:c6:6c:c1:5f:bf:ef:89:33:6e:dc:2f:
e0:2f:43:42:97:2b:8c:d6:08:03:c7:90:d1:ad:11:
45:b8:54:2e:f8:a0:38:7e:71:cc:c4:8a:33:d4:8b:
39:d0:ec:0d:c2:ae:a8:fd:b0:45:37:e9:fb:3a:e9:
45:28:c1:80:5d:20:7c:22:6a:63:40:27:be:8f:ff:
e7:e3:16:b2:85:e0:aa:cf:ca:84:16:24:ca:7f:48:
5f:95:88:9a:10:fa:61:5c:3f:16:18:64:06:6e:c5:
99:0f:e1:84:3e:d8:2a:2a:62:ba:4f:cd:52:36:c8:
c9:0c:c4:a2:51:95:c5:ff:4a:55:07:6b:b7:7d:97:
93:45:b7:bd:6b:10:32:4a:fb:a8:ce:aa:ec:12:9f:
04:81:bb:c0:81:0e:15:51:cc:7a:88:be:ec:60:eb:
a5:cd:f4:6c:c4:05:13:25:bc:59:f5:a3:f5:ed:1a:
ff:c9:66:85:ae:d0:8b:64:5a:0a:00:82:1d:7d:7f:
50:43:a7:18:2a:57:50:25:d4:b7:7f:60:dd:f7:93:
49:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9F:37:E2:8A:EA:E5:7C:64:4B:7D:F1:CA:20:15:72:23:4A:61:30
X509v3 Authority Key Identifier:
keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/EJ834orq5XxkS33xyiAVciNKYTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.48.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:c8:54:82:9a:da:fb:09:de:86:9c:57:6d:03:0f:6e:cf:41:
64:2f:f7:22:b2:ae:4f:4a:ec:69:97:af:dc:fb:5f:90:a5:b6:
c5:77:33:cf:5c:7f:f8:2b:bc:04:5a:c9:87:69:1d:ce:73:b4:
7f:13:32:ae:c6:cd:41:77:40:00:25:b3:47:c8:ee:ad:5e:f1:
75:1c:04:9f:e6:ac:cc:49:c6:d8:ef:1e:87:62:77:fc:88:24:
dd:a6:38:88:d9:3f:ad:90:57:38:90:8d:69:aa:6b:07:ba:67:
a3:39:a9:43:10:58:56:f7:c2:b3:e7:f9:fb:a1:16:fc:1d:00:
05:1f:ae:1f:29:1f:71:60:c1:ba:d2:ac:fa:58:15:74:f6:86:
e1:4c:74:78:b3:97:0e:a8:5e:5b:8f:fc:9a:b9:7d:38:63:a3:
c6:8d:6d:b2:61:80:c3:5e:93:26:e4:d5:4b:c4:5a:05:6a:06:
d1:10:c3:6e:45:d9:26:9b:9e:66:55:65:0f:ba:72:b5:74:de:
c2:ac:a3:e2:df:52:b0:6a:c5:06:c6:e0:09:02:a8:63:5b:16:
e1:d3:fd:b8:92:50:b3:d7:ff:84:0a:b4:d4:a7:a2:7a:64:fd:
6e:d0:4e:95:8a:0b:cb:6a:2c:68:3a:11:6f:3e:33:d3:56:67:
72:93:ac:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:31:34 2026 by rpki-client