Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/EQLSllES_a4CIjugh4QvOWXk-gA.roa
File: EQLSllES_a4CIjugh4QvOWXk-gA.roa (raw, json)
Hash identifier: aLO/AwsoH5ixsVkjeHK+ol56t3cAyHjhQnk5MRO6tTY=
Subject key identifier: 11:02:D2:96:51:12:FD:AE:02:22:3B:A0:87:84:2F:39:65:E4:FA:00
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 01A19E262C2AED096F0324FADE5714E09EE2
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/EQLSllES_a4CIjugh4QvOWXk-gA.roa
Signing time: Mon 02 Nov 2026 21:24:24 +0000
ROA not before: Mon 02 Nov 2026 21:24:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208626
IP address blocks: 95.181.164.0/24 maxlen: 24
95.181.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:26:2c:2a:ed:09:6f:03:24:fa:de:57:14:e0:9e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Nov 2 21:24:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1102d2965112fdae02223ba087842f3965e4fa00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ad:95:5b:fa:40:3c:b1:1e:87:27:ca:f2:e5:
d7:ef:56:70:07:42:bc:a4:bd:b1:0e:c2:07:30:46:
6d:40:9a:b5:e1:f2:77:12:c1:35:a8:85:8c:7f:94:
12:d5:6f:2e:d8:71:1f:d6:79:17:05:85:34:d2:d4:
ce:fe:28:c0:e4:fb:84:c6:48:e3:8d:13:14:95:e7:
07:0b:eb:2b:2b:1b:df:65:00:39:d2:2b:c5:c7:65:
e8:22:3f:09:4f:b0:26:66:06:21:33:9f:ef:49:56:
80:5d:43:1b:7e:c1:3a:cc:00:9e:ea:1e:84:d7:33:
4a:da:43:a5:a2:2e:b3:91:71:f7:ec:3c:e3:5b:15:
94:43:b9:94:5d:9a:44:83:75:ec:27:f9:5f:96:ba:
c3:b4:09:12:48:b5:6b:5d:33:e8:e5:b1:06:ca:7b:
60:45:99:8b:00:75:9c:e0:90:c1:21:0e:ae:58:a6:
d0:e3:4c:a0:48:b6:b0:30:40:ca:6e:d8:38:66:20:
da:6d:95:1a:be:f7:1f:7a:a8:9d:fc:48:5a:c3:a5:
b7:93:0f:9a:27:8e:d7:2b:62:99:3e:da:53:ac:1a:
7d:8e:8d:f5:a9:56:dd:77:30:d6:ef:42:ed:ff:82:
5d:35:25:85:56:d4:46:d6:55:4d:93:3a:cc:ef:16:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:02:D2:96:51:12:FD:AE:02:22:3B:A0:87:84:2F:39:65:E4:FA:00
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/EQLSllES_a4CIjugh4QvOWXk-gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.164.0/24
95.181.170.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e1:b5:64:f9:32:98:ce:b0:4b:a8:f4:7c:ee:37:e1:5c:27:
ec:da:e1:40:96:1b:6a:57:92:5c:dd:64:b1:62:fb:45:22:92:
8e:04:89:32:81:98:af:62:29:90:4a:1b:e5:08:55:55:a4:7a:
f8:cb:76:c9:b4:c4:fb:f1:5e:fe:be:4b:45:d4:fd:01:bc:5f:
40:19:8b:9c:43:3c:0e:9a:5e:e8:b0:f7:ae:34:e7:ff:6b:2a:
73:20:1c:3f:9f:20:06:db:77:5f:7b:6d:a3:7c:fc:39:aa:1c:
4c:bc:f7:5f:37:0c:33:86:74:82:a3:51:66:d4:b5:3b:ed:fb:
a7:30:e2:24:cd:70:95:4b:1c:33:31:dd:6f:a4:fd:1e:9c:ad:
d6:39:d9:ac:a6:11:e2:f6:0a:70:04:f7:2b:af:30:71:d3:5d:
1a:df:43:41:d3:ac:a6:38:7e:49:47:40:b1:0a:5d:3a:7f:aa:
de:79:30:b7:01:ec:fa:54:75:53:04:75:14:c5:37:f6:4c:2f:
f1:74:c4:94:56:86:2a:28:07:03:1e:c7:08:1a:6a:c2:0e:69:
59:8a:f5:d9:55:d3:21:4a:a4:81:58:56:27:43:a7:ff:1f:31:
b7:1a:24:cb:32:88:cf:23:f8:fc:ba:d9:58:16:1b:64:dc:e7:
21:6a:0b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:20 2026 by rpki-client