Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/EPoE4gsTkP933V3-pgLEo8zsy7w.roa
File: EPoE4gsTkP933V3-pgLEo8zsy7w.roa (raw, json)
Hash identifier: fekIOkyV2Bo+kFHWE4bvjR3pCE5ezbt15oCa5WLPf5M=
Subject key identifier: 10:FA:04:E2:0B:13:90:FF:77:DD:5D:FE:A6:02:C4:A3:CC:EC:CB:BC
Certificate issuer: /CN=faa401b6e9015d573a96dea26bf1974150a3911e
Certificate serial: 019F2368575C1F17EB2613A9BC388187388C
Authority key identifier: FA:A4:01:B6:E9:01:5D:57:3A:96:DE:A2:6B:F1:97:41:50:A3:91:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qQBtukBXVc6lt6ia_GXQVCjkR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/EPoE4gsTkP933V3-pgLEo8zsy7w.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200675
IP address blocks: 138.124.188.0/22 maxlen: 22
185.71.176.0/22 maxlen: 22
185.232.76.0/22 maxlen: 22
2a05:3400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qQBtukBXVc6lt6ia_GXQVCjkR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:57:5c:1f:17:eb:26:13:a9:bc:38:81:87:38:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa401b6e9015d573a96dea26bf1974150a3911e
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10fa04e20b1390ff77dd5dfea602c4a3cceccbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:91:7c:ac:ac:d0:6a:fb:7f:d2:7b:8b:96:
51:06:87:84:9c:80:b2:b6:ec:37:37:24:1b:c1:1b:
d6:0e:da:07:1c:72:dd:90:47:c8:7c:cb:d2:a1:1b:
a2:ed:d5:8f:6a:4d:9e:76:6d:57:6c:4a:4f:89:18:
bb:ce:13:e4:57:5b:d9:21:3c:a2:0b:31:3f:e8:5b:
b3:90:84:27:b8:67:56:0b:2b:6d:0b:00:2c:c3:3f:
4d:d4:4b:7f:3d:8c:df:0a:cc:a8:8a:bc:1a:4e:e4:
0d:09:5e:13:e2:d2:a0:e6:3a:d4:f3:7a:62:7f:32:
61:8a:85:a8:0d:47:ec:2d:f2:d4:c3:8d:1a:37:bc:
8f:07:44:dd:bb:6a:ca:31:a7:b9:24:2b:92:8f:92:
4b:c9:27:0d:6b:11:57:b5:e3:62:b3:9b:52:1d:db:
cf:d7:71:6a:5f:df:36:0a:b7:86:03:ed:c6:24:20:
f8:4e:ff:1f:6b:2d:69:ed:c2:41:39:d9:65:8e:f2:
fc:9a:00:2f:c2:09:12:d6:3b:90:14:28:84:ef:6d:
d5:f2:45:1c:c2:c6:21:c2:60:63:7c:0f:9e:a0:3a:
df:2d:a8:e7:33:f9:99:eb:1c:71:55:bc:1e:0c:d1:
4b:b9:09:7d:da:1d:37:c6:84:a7:71:95:e6:e7:cf:
a7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FA:04:E2:0B:13:90:FF:77:DD:5D:FE:A6:02:C4:A3:CC:EC:CB:BC
X509v3 Authority Key Identifier:
keyid:FA:A4:01:B6:E9:01:5D:57:3A:96:DE:A2:6B:F1:97:41:50:A3:91:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qQBtukBXVc6lt6ia_GXQVCjkR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/EPoE4gsTkP933V3-pgLEo8zsy7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.188.0/22
185.71.176.0/22
185.232.76.0/22
IPv6:
2a05:3400::/29
Signature Algorithm: sha256WithRSAEncryption
04:17:f8:7a:7f:68:0e:2e:b6:4d:17:bb:c9:e0:df:f4:93:0c:
3a:b1:7e:7d:1a:ea:d9:e7:f9:8f:1d:98:1b:ff:44:6d:2d:c8:
b3:5e:98:45:78:35:46:e2:0d:a0:33:49:12:98:1f:c2:f9:a9:
e6:68:58:6c:bb:7e:a5:f7:b0:96:db:b6:7c:be:04:9e:2f:a3:
d8:90:bf:b2:f7:68:6b:4f:bc:02:98:a9:03:ec:fd:1c:e3:18:
3b:14:7e:20:7b:89:6f:46:ef:52:46:c6:c1:3c:05:d6:50:35:
d8:8f:a9:54:6b:83:c4:d6:51:1a:6e:43:97:0e:15:a1:1c:e9:
f0:a5:7c:39:be:ac:87:c3:32:f7:e3:26:7a:9b:e3:b7:1d:a6:
d9:c6:64:bd:09:27:8d:61:85:30:30:14:ee:38:d5:93:1e:60:
d9:df:13:91:74:8a:3a:52:7c:06:04:cd:37:eb:5e:e4:bb:fe:
0e:32:f1:11:01:5e:64:6e:f2:eb:cf:ea:9f:ee:88:82:21:d2:
5a:25:e4:66:db:20:0d:3c:e0:57:e7:8c:c2:b2:6d:5d:2e:95:
ba:3e:3e:da:02:71:75:81:e3:08:f6:e7:1f:16:b5:8f:70:b9:
9b:83:4a:e3:f8:0c:e0:f7:87:9b:4f:b6:f3:bb:69:52:f8:55:
46:1c:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:42 2026 by rpki-client