Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/EJfABy6xbptq-YVkmN9Ysa6iIlo.roa
File: EJfABy6xbptq-YVkmN9Ysa6iIlo.roa (raw, json)
Hash identifier: P40yzqL11f3walON7ALTY/q0LTBj9gB5kkP4LzmmZ9I=
Subject key identifier: 10:97:C0:07:2E:B1:6E:9B:6A:F9:85:64:98:DF:58:B1:AE:A2:22:5A
Certificate issuer: /CN=8ee015a033835a34fc16628c5c5b80434216f24e
Certificate serial: 019D0CE6406879F8FBDF0722AE86C8DC8BE1
Authority key identifier: 8E:E0:15:A0:33:83:5A:34:FC:16:62:8C:5C:5B:80:43:42:16:F2:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/juAVoDODWjT8FmKMXFuAQ0IW8k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/EJfABy6xbptq-YVkmN9Ysa6iIlo.roa
Signing time: Fri 20 Mar 2026 20:18:29 +0000
ROA not before: Fri 20 Mar 2026 20:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204197
IP address blocks: 185.204.148.0/24 maxlen: 32
185.204.149.0/24 maxlen: 32
185.204.150.0/24 maxlen: 32
185.204.151.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.mft
rsync://rpki.ripe.net/repository/DEFAULT/juAVoDODWjT8FmKMXFuAQ0IW8k4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:e6:40:68:79:f8:fb:df:07:22:ae:86:c8:dc:8b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee015a033835a34fc16628c5c5b80434216f24e
Validity
Not Before: Mar 20 20:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1097c0072eb16e9b6af9856498df58b1aea2225a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6f:f8:d0:bf:64:22:35:c5:9b:d4:c7:47:a5:
43:6e:ca:81:d7:9d:7c:7a:59:fd:24:59:29:cb:0c:
87:9d:d3:82:fe:5e:da:44:26:61:01:4a:16:06:94:
21:9b:74:d6:17:ae:33:dc:33:81:62:ae:39:0f:87:
97:06:d1:61:4e:09:75:92:92:24:f8:4a:75:ef:39:
66:99:7b:83:94:63:ec:68:86:a5:87:fa:b1:29:3b:
64:a7:69:96:2b:b5:bf:6d:00:2d:77:2c:bf:b2:14:
32:e2:da:41:5c:38:dd:e5:93:05:4f:8f:31:b3:3f:
f4:b1:54:86:a2:90:fa:c8:79:6c:57:b7:db:e6:e5:
be:15:9e:af:cf:a9:38:d2:81:ea:28:b0:28:22:2c:
0e:06:8d:95:f5:58:8c:0e:91:f4:21:44:0c:90:f3:
65:8a:df:5e:5a:29:a3:2e:ea:26:0a:67:3d:a4:26:
a7:f3:b1:cb:1b:07:3f:52:26:56:72:d5:0b:6c:21:
52:01:36:af:f1:5b:e1:f1:f3:2d:14:ce:d5:39:12:
1f:92:16:7a:9d:1a:7b:ff:82:80:77:59:6e:0a:57:
89:78:c7:6d:22:e6:18:97:0e:dc:e9:46:b0:a2:8f:
17:b2:76:ee:a1:3c:af:0d:91:c7:0c:e2:49:06:2f:
31:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:97:C0:07:2E:B1:6E:9B:6A:F9:85:64:98:DF:58:B1:AE:A2:22:5A
X509v3 Authority Key Identifier:
keyid:8E:E0:15:A0:33:83:5A:34:FC:16:62:8C:5C:5B:80:43:42:16:F2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/juAVoDODWjT8FmKMXFuAQ0IW8k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/EJfABy6xbptq-YVkmN9Ysa6iIlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.148.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:9e:4f:5a:15:34:91:46:aa:77:54:ef:d9:2a:68:fc:6e:6e:
51:f1:47:7c:12:6e:86:e8:b0:92:17:cd:1a:5a:ea:f2:1e:3b:
78:ae:09:f9:f3:5c:1d:72:3f:8c:40:37:69:9c:06:07:ea:78:
a6:68:61:6a:88:33:95:d8:2e:92:85:0e:a0:c9:f0:48:ac:0a:
09:ae:03:b3:7f:66:36:5f:07:b8:20:21:d2:58:1a:b9:f3:92:
ab:92:b9:59:18:55:d6:86:e9:b2:c0:0b:0a:39:84:c3:d9:1d:
b2:5a:f4:f3:68:80:b8:d9:78:55:e9:d3:f7:55:ab:7e:0c:a0:
2f:d1:a6:52:80:3e:17:0a:58:34:a2:dc:de:71:07:a9:a2:3c:
2c:bf:53:22:e8:eb:af:7d:a1:88:8a:e8:00:fd:85:27:8a:59:
10:13:8d:5f:47:62:27:7e:9f:e7:34:fc:2e:ed:72:1b:5f:b4:
e9:2b:ee:d1:4b:7e:10:d9:6b:16:2f:59:d5:42:ca:79:3d:bc:
7f:ac:4d:3b:fa:ce:0b:6f:f1:14:c3:dd:49:f1:26:33:59:35:
71:78:e0:91:63:db:f6:a9:26:31:fb:5a:c4:58:5f:4d:d6:9a:
2b:8c:a8:4b:75:13:52:91:e3:a1:a2:f5:ac:c7:9f:11:00:0d:
3a:bb:67:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:51 2026 by rpki-client