Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/EqD5liyFpdPq2XLyZyti6Tv-BNE.roa
File: EqD5liyFpdPq2XLyZyti6Tv-BNE.roa (raw, json)
Hash identifier: 45CS/GD+FH3aynJbkHhA0cCnbCPZTt1kF44EBED09Gk=
Subject key identifier: 12:A0:F9:96:2C:85:A5:D3:EA:D9:72:F2:67:2B:62:E9:3B:FE:04:D1
Certificate issuer: /CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Certificate serial: 019DB9C6CC63EAF1CC882ABC4EB19D34A6C1
Authority key identifier: 31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/EqD5liyFpdPq2XLyZyti6Tv-BNE.roa
Signing time: Thu 23 Apr 2026 09:58:26 +0000
ROA not before: Thu 23 Apr 2026 09:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 158.94.160.0/24 maxlen: 24
2a0f:6b40::/44 maxlen: 44
2a0f:6b41::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:c6:cc:63:ea:f1:cc:88:2a:bc:4e:b1:9d:34:a6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Validity
Not Before: Apr 23 09:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12a0f9962c85a5d3ead972f2672b62e93bfe04d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5a:64:25:46:9e:b2:e3:51:8e:0d:f2:3f:8a:
01:40:e1:c3:83:0d:48:36:e9:b5:81:f2:30:59:0f:
7b:83:52:34:a7:0b:9f:ce:6e:ce:20:61:20:6a:7f:
08:b9:4e:d2:33:d5:b3:5d:a8:e8:a0:32:ec:47:90:
98:80:cf:a4:c5:7d:b5:9f:ef:4b:a0:df:45:5d:e0:
97:df:a3:6e:86:a5:fb:5b:16:2c:5c:c3:81:25:e0:
1f:39:4f:31:84:e1:9d:cf:92:80:72:10:1c:16:84:
2a:0b:a9:ea:12:68:04:17:2b:5d:01:3a:73:84:9a:
1b:2b:19:a5:d4:3b:41:a4:14:28:ad:d0:90:fc:48:
d7:2a:aa:11:d7:6a:4b:56:43:a8:06:a9:bd:2e:be:
fb:a2:37:05:07:0a:58:7a:d3:da:77:d3:1b:15:22:
5f:3b:d2:3a:50:d8:17:6f:bf:02:44:50:e5:0a:ff:
f6:49:fa:47:48:d9:c4:73:17:a9:13:33:5f:66:ea:
df:40:09:4c:bf:91:ed:9e:b2:28:31:bb:28:ee:cc:
53:5a:2c:bd:9f:2e:3b:e5:a0:00:f7:59:84:ba:8a:
e7:cd:6d:b3:ad:5b:80:46:97:b5:43:a2:fa:a7:ba:
0f:d3:5d:24:cb:74:54:1c:11:9f:4b:e8:73:d0:ff:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A0:F9:96:2C:85:A5:D3:EA:D9:72:F2:67:2B:62:E9:3B:FE:04:D1
X509v3 Authority Key Identifier:
keyid:31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/EqD5liyFpdPq2XLyZyti6Tv-BNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.160.0/24
IPv6:
2a0f:6b40::/44
2a0f:6b41::/44
Signature Algorithm: sha256WithRSAEncryption
8a:47:ed:b6:9d:35:d9:fe:f5:6a:fe:f8:a4:dd:59:77:04:bb:
d7:42:eb:4f:98:93:a2:22:1f:90:ab:04:72:a7:37:8d:3a:ac:
94:66:7a:5f:2d:35:6e:72:42:11:30:29:6a:aa:0b:91:04:d5:
15:c1:82:65:3b:e3:1a:0c:e5:76:a9:4e:9f:bf:29:cb:2d:bf:
cb:dc:38:d9:2b:69:3b:5c:d4:95:04:ee:d3:39:32:ed:b3:d7:
79:6c:a2:18:20:3a:ed:0b:8f:c8:64:50:9d:fe:ed:1b:dd:36:
a8:2e:79:61:eb:38:be:2c:27:2e:93:f3:18:e7:a5:36:ad:fd:
a9:35:d7:5c:fd:a4:9f:c8:c9:70:7d:25:14:5b:55:0a:e9:e4:
bb:1c:98:94:de:67:f8:27:f8:27:89:fa:59:30:99:dc:19:2c:
fe:56:dc:0f:4c:c9:36:f6:fe:02:bc:6e:d6:88:ef:73:79:61:
b3:3a:7e:43:d9:72:29:bd:9e:a6:f1:22:d8:d8:fd:32:86:23:
06:67:51:3b:af:73:78:c8:b0:ab:87:ce:b2:f3:81:0e:21:fb:
5f:f9:36:2e:11:f8:5e:a7:84:9f:ec:92:3a:39:87:07:0a:04:
7f:26:0d:f6:68:59:b8:d9:6a:a6:46:c4:a3:19:ba:78:e7:6d:
26:55:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:09 2026 by rpki-client