Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/eepn_yA5RHK6HUO_jpUA6PjT4fc.roa
File: eepn_yA5RHK6HUO_jpUA6PjT4fc.roa (raw, json)
Hash identifier: xTC9GfIgUIxHniW4ypv5L8Z1iQauYVQjpJ91dPDEi7I=
Subject key identifier: 79:EA:67:FF:20:39:44:72:BA:1D:43:BF:8E:95:00:E8:F8:D3:E1:F7
Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Certificate serial: 01A15EDA3EA0B26E49C97611F12F36FE1F69
Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/eepn_yA5RHK6HUO_jpUA6PjT4fc.roa
Signing time: Wed 21 Oct 2026 14:25:23 +0000
ROA not before: Wed 21 Oct 2026 14:25:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16125
IP address blocks: 87.192.39.0/24 maxlen: 24
87.192.56.0/24 maxlen: 24
87.192.57.0/24 maxlen: 24
87.192.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:da:3e:a0:b2:6e:49:c9:76:11:f1:2f:36:fe:1f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Validity
Not Before: Oct 21 14:25:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79ea67ff20394472ba1d43bf8e9500e8f8d3e1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:0c:97:42:18:7e:0b:57:6a:4f:4d:c6:12:
18:56:47:91:0d:97:ad:a2:1f:98:fd:3c:20:c8:80:
16:af:7d:f6:37:32:67:c9:4a:f9:da:f5:63:c1:15:
aa:32:75:fa:2b:4e:28:bf:1b:61:30:79:16:4c:bb:
3f:c5:46:5a:03:1f:c1:7c:b1:1a:75:28:14:3a:97:
eb:a1:b3:9b:fe:00:2e:75:cf:ed:55:3f:e6:9b:6b:
f2:f3:90:80:64:5a:30:13:2c:5c:fa:9c:4e:91:a2:
64:b1:10:d1:3d:4f:c3:e4:1f:fe:bf:c7:88:db:99:
3f:87:1c:de:78:88:09:fb:0a:04:b8:14:fb:82:30:
1c:e5:67:ba:ac:75:1d:04:15:68:5c:f5:3f:aa:25:
81:70:b7:0f:f0:8e:1f:47:2a:c2:0b:17:a2:ab:4b:
40:14:f9:56:5f:c9:71:ff:4b:20:04:9a:f5:07:37:
2b:5d:e7:d2:8c:ff:b6:ca:3c:fe:6e:dc:d9:34:9c:
7d:a5:40:0a:69:6c:2e:b5:78:ba:5b:86:c4:9a:b5:
22:e8:75:01:68:81:66:41:0a:c6:97:c4:5b:ff:84:
ba:60:96:c9:5a:71:eb:2e:1f:aa:99:43:20:f2:09:
20:f7:80:66:33:f3:9e:cb:a5:2a:2e:9a:d0:77:77:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EA:67:FF:20:39:44:72:BA:1D:43:BF:8E:95:00:E8:F8:D3:E1:F7
X509v3 Authority Key Identifier:
keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/eepn_yA5RHK6HUO_jpUA6PjT4fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.39.0/24
87.192.56.0/23
87.192.59.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1e:af:36:9d:28:c1:61:fa:37:40:84:4b:22:87:86:88:de:
60:0e:67:af:a7:54:25:b7:91:7e:d8:cc:53:41:9a:1a:bd:1a:
80:bb:7a:1a:de:7f:0f:c2:3f:b9:37:60:78:4c:0b:b0:91:68:
8e:b7:40:b9:b1:ef:a9:c3:41:08:e5:52:fd:53:1f:c4:7b:56:
00:b8:77:34:31:4c:48:b1:e4:1f:fb:36:1f:1a:bb:11:b6:04:
dd:a4:d8:a3:d6:1d:72:2a:53:dc:ca:e4:d2:7d:9b:5d:ba:cd:
fa:37:d7:65:da:bb:e3:3e:83:94:ff:2e:fe:55:85:f0:03:b6:
be:86:44:16:6e:06:2e:26:33:94:2f:bd:49:4a:35:7b:d6:39:
48:04:bd:2a:32:c1:02:bb:01:01:cc:e2:a9:83:78:a0:b8:39:
1b:82:de:b0:2a:38:f1:1a:5c:aa:cc:b5:10:d0:e5:dc:3a:d5:
e3:e9:20:b4:30:21:0f:dd:6d:5e:93:cd:b3:ef:c9:5a:01:ba:
fc:91:e6:61:98:fe:3b:40:7c:f4:41:42:40:e2:f2:a0:9d:ec:
ac:8d:2c:dd:06:15:3c:8d:c2:65:7f:54:06:e8:9d:94:80:e1:
13:60:87:97:ce:68:9f:84:2a:bc:75:11:ae:70:e6:bd:38:ab:
50:bb:6a:aa
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaFe2j6gsm5JyXYR8S82/h9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGQzNWQ0ZDY0NTllZjVmMzU1M2VhMzEwZTBjNjViYjNi
MGYwZDkwHhcNMjYxMDIxMTQyNTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWVhNjdmZjIwMzk0NDcyYmExZDQzYmY4ZTk1MDBlOGY4ZDNlMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAYMl0IYfgtXak9NxhIYVkeRDZet
oh+Y/TwgyIAWr332NzJnyUr52vVjwRWqMnX6K04ovxthMHkWTLs/xUZaAx/BfLEa
dSgUOpfrobOb/gAudc/tVT/mm2vy85CAZFowEyxc+pxOkaJksRDRPU/D5B/+v8eI
25k/hxzeeIgJ+woEuBT7gjAc5We6rHUdBBVoXPU/qiWBcLcP8I4fRyrCCxeiq0tA
FPlWX8lx/0sgBJr1BzcrXefSjP+2yjz+btzZNJx9pUAKaWwutXi6W4bEmrUi6HUB
aIFmQQrGl8Rb/4S6YJbJWnHrLh+qmUMg8gkg94BmM/Oey6UqLprQd3ce0wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHnqZ/8gOURyuh1Dv46VAOj40+H3MB8GA1UdIwQY
MBaAFOhNNdTWRZ7181U+oxDgxluzsPDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUwMTFOWkZudlh6VlQ2akVPREdXN093OE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lYzNmOGMtZGM3YS00MGQyLThmNDQt
YTUyNDgzODc3NmJkLzEvZWVwbl95QTVSSEs2SFVPX2pwVUE2UGpUNGZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lYzNmOGMtZGM3YS00MGQyLThmNDQtYTUyNDgzODc3NmJk
LzEvNkUwMTFOWkZudlh6VlQ2akVPREdXN093OE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV8AnAwQB
V8A4AwQAV8A7MA0GCSqGSIb3DQEBCwUAA4IBAQATHq82nSjBYfo3QIRLIoeGiN5g
Dmevp1Qlt5F+2MxTQZoavRqAu3oa3n8Pwj+5N2B4TAuwkWiOt0C5se+pw0EI5VL9
Ux/Ee1YAuHc0MUxIseQf+zYfGrsRtgTdpNij1h1yKlPcyuTSfZtdus36N9dl2rvj
PoOU/y7+VYXwA7a+hkQWbgYuJjOUL71JSjV71jlIBL0qMsECuwEBzOKpg3iguDkb
gt6wKjjxGlyqzLUQ0OXcOtXj6SC0MCEP3W1ek82z78laAbr8keZhmP47QHz0QUJA
4vKgneysjSzdBhU8jcJlf1QG6J2UgOETYIeXzmifhCq8dRGucOa9OKtQu2qq
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:23:13 2026 by rpki-client