Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/eEM7L-IeQOgxlVI2xCL1oevjnCU.roa
File: eEM7L-IeQOgxlVI2xCL1oevjnCU.roa (raw, json)
Hash identifier: zYLOFEjVTIWUNSV6YmqTR3p8aLe+oZcUF5zSoMD1xM0=
Subject key identifier: 78:43:3B:2F:E2:1E:40:E8:31:95:52:36:C4:22:F5:A1:EB:E3:9C:25
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019F896A528867507F6D0CAF8AC8AC5117B1
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/eEM7L-IeQOgxlVI2xCL1oevjnCU.roa
Signing time: Wed 22 Jul 2026 10:41:14 +0000
ROA not before: Wed 22 Jul 2026 10:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47193
IP address blocks: 5.188.192.0/22 maxlen: 23
5.188.192.0/23 maxlen: 23
46.161.56.0/21 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:6a:52:88:67:50:7f:6d:0c:af:8a:c8:ac:51:17:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jul 22 10:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78433b2fe21e40e831955236c422f5a1ebe39c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:0c:4e:8f:80:48:6e:01:cf:99:0b:1a:bd:
be:d0:b6:e9:46:98:25:d2:a5:91:8e:ff:0d:71:74:
e4:c9:b3:be:c2:60:fd:06:2e:93:1b:b1:46:67:75:
b9:ce:e4:19:a6:2b:a6:22:40:ad:ff:5b:d7:a2:d1:
ec:4d:81:fa:c7:d5:a1:e7:e5:aa:03:f0:f3:1d:75:
d7:d3:63:4b:4d:98:8e:27:d0:53:de:27:5c:24:0a:
57:ef:e1:eb:36:b5:11:12:3a:03:f5:bc:df:ad:45:
09:f2:21:c2:23:82:12:d8:5e:79:54:ea:d0:07:81:
21:e9:f9:4b:56:2b:56:f4:34:de:40:36:4b:df:fe:
75:6a:d6:dd:9c:cc:cd:5a:36:d9:a6:3d:8d:4c:e8:
27:02:46:76:2a:d1:d3:95:87:80:bb:be:6e:d8:06:
91:18:26:34:52:57:a4:5e:9e:97:99:9e:68:13:60:
cc:c9:5a:77:5c:93:37:58:f7:b4:13:3c:bc:76:ee:
ac:af:5f:f6:e4:ee:9c:99:54:c2:37:ac:01:73:99:
c0:27:e3:75:9f:0b:42:77:c3:91:e9:3e:56:8b:a8:
11:1a:53:2e:b3:7f:3c:ed:f4:cf:e0:e2:53:c8:f4:
75:37:14:c2:47:34:c2:32:7d:f3:cb:c6:5c:fd:67:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:43:3B:2F:E2:1E:40:E8:31:95:52:36:C4:22:F5:A1:EB:E3:9C:25
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/eEM7L-IeQOgxlVI2xCL1oevjnCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.192.0/22
46.161.56.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:a3:2c:5c:c1:06:06:70:da:0a:3e:1d:f2:55:c2:7d:89:17:
fb:b8:c6:5d:4a:05:97:8f:2f:5d:c5:7f:09:52:5b:1b:07:55:
cb:46:a3:a2:d3:c0:c4:e6:f4:9a:8d:ef:ef:f8:f9:b8:81:b3:
3c:b8:4a:58:8a:7c:ae:7b:96:52:2b:e0:95:1e:89:df:81:52:
52:c2:6e:47:55:e7:f7:df:a2:17:03:da:f8:ac:8d:ea:7b:12:
92:e2:35:80:d9:dd:58:19:96:ee:45:6a:9a:c2:70:2d:15:aa:
0a:7d:6a:a6:7d:49:d7:6d:ba:d0:aa:9f:67:ae:2a:1c:02:d0:
65:84:d2:ac:60:80:4c:48:ec:e3:d9:9c:a8:ee:91:ff:ba:11:
c1:35:38:17:43:ae:09:1e:22:7b:a7:de:a4:29:16:17:44:60:
74:d7:6f:7a:86:a0:56:ab:41:5d:93:6f:fe:bd:6f:c5:87:39:
a5:bf:c5:9d:5e:9b:27:98:68:a7:c0:23:47:a1:97:a5:35:54:
94:3b:d8:87:fc:d1:54:18:6b:cb:0a:57:56:ca:13:68:80:b8:
a3:36:9c:9d:61:72:03:12:04:82:d7:19:4d:58:8a:d8:e5:70:
30:7c:fe:5a:d8:cd:91:0a:ae:2c:00:52:2b:2d:91:a4:1b:7d:
e5:79:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:49 2026 by rpki-client