Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/EKgjSv3AAyUcoFtafm_vLY5Lg8c.roa
File: EKgjSv3AAyUcoFtafm_vLY5Lg8c.roa (raw, json)
Hash identifier: sPokOFOPQUE2Bao74FIM6ucy32wWZWINawyNDwlidCE=
Subject key identifier: 10:A8:23:4A:FD:C0:03:25:1C:A0:5B:5A:7E:6F:EF:2D:8E:4B:83:C7
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A0CD23C0313BE598F88CB2989227B27826
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/EKgjSv3AAyUcoFtafm_vLY5Lg8c.roa
Signing time: Wed 23 Sep 2026 07:21:07 +0000
ROA not before: Wed 23 Sep 2026 07:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
46.249.107.0/24 maxlen: 24
82.115.0.0/24 maxlen: 24
82.115.9.0/24 maxlen: 24
89.251.10.0/24 maxlen: 24
103.25.85.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
178.173.232.0/24 maxlen: 24
185.215.247.0/24 maxlen: 24
185.231.172.0/24 maxlen: 24
185.231.173.0/24 maxlen: 24
188.209.156.0/22 maxlen: 24
195.96.135.0/24 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:23:c0:31:3b:e5:98:f8:8c:b2:98:92:27:b2:78:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 23 07:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10a8234afdc003251ca05b5a7e6fef2d8e4b83c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:38:02:3b:4e:fb:c6:95:0f:3a:c0:1f:73:
34:47:32:5d:e6:44:10:5f:70:54:c2:23:21:0c:c7:
c6:dc:86:18:af:9e:6f:a8:90:ef:16:c2:96:47:1b:
e7:ef:83:1c:a3:bc:fc:4b:bf:81:77:27:db:c3:ee:
a7:a2:36:54:0e:93:58:9e:de:8f:66:89:8a:7c:62:
99:e0:6d:2b:c2:0f:ae:28:e5:bc:40:c6:c5:1d:81:
cd:5f:78:31:19:eb:2a:ea:2d:7c:5a:25:59:46:0e:
76:f9:96:a7:b0:c2:90:da:f3:0c:ab:06:e4:8e:f0:
08:a9:b4:37:1c:c8:21:ce:44:bf:b1:cc:86:3f:14:
29:e8:51:7e:f0:77:01:26:8d:db:59:eb:20:02:42:
df:2b:f1:02:88:a1:f5:1f:f2:c3:ea:6a:3c:54:5d:
b0:e3:49:cb:93:f0:6c:e7:00:0f:e1:f1:32:05:19:
3f:a0:1e:f8:37:3a:77:93:a2:7a:0f:b7:58:de:20:
e3:36:cb:89:a4:4d:ce:20:15:ac:ae:cf:95:90:66:
2b:71:07:d6:a8:1b:a7:6a:50:93:9e:ac:43:31:10:
85:14:a9:cc:d1:d1:5a:e5:75:c8:da:21:08:c0:bc:
af:2f:09:36:b5:d1:2e:b2:38:26:b8:06:39:b4:ae:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A8:23:4A:FD:C0:03:25:1C:A0:5B:5A:7E:6F:EF:2D:8E:4B:83:C7
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/EKgjSv3AAyUcoFtafm_vLY5Lg8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
46.249.107.0/24
82.115.0.0/24
82.115.9.0/24
89.251.10.0/24
103.25.85.0/24
159.255.32.0/21
178.173.232.0/24
185.215.247.0/24
185.231.172.0/23
188.209.156.0/22
195.96.135.0/24
202.133.90.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
21:75:26:29:7b:65:ab:23:6b:3e:40:a2:09:ff:6d:cb:1d:70:
76:0a:a6:63:54:39:53:2c:05:03:f5:8d:aa:3e:8c:c1:54:e7:
8a:56:22:14:75:83:7c:7a:ed:a6:5c:2b:1d:0e:77:58:e1:b5:
f6:a4:50:b0:47:27:32:ff:2b:71:37:2e:3e:6c:98:63:1e:90:
a9:fd:38:a5:98:7a:7d:dd:15:11:b4:05:14:82:3e:f6:a7:ab:
b7:18:08:1d:10:d8:88:09:64:3e:e6:1c:bf:f8:2f:9f:13:d6:
c8:55:61:3a:b0:ff:6f:08:b0:d7:79:09:ab:e4:c1:5a:71:17:
88:ec:6c:e3:b3:98:61:86:6c:3d:71:56:0a:e9:7a:a7:b2:e2:
d5:ec:52:d6:04:9f:7f:a5:20:da:4e:b8:7a:0a:fb:fa:4d:aa:
22:ab:74:f2:d7:fa:e6:71:1e:8f:d7:2e:90:ef:3e:33:87:ef:
26:67:6e:e3:f4:f8:67:2d:78:37:6c:0e:a5:5a:64:8b:f5:98:
64:88:27:87:7a:d6:e3:7c:7d:a3:d0:75:88:8c:52:41:ba:a3:
6d:f8:7f:4b:bf:d8:9c:25:37:03:8d:f5:c1:5e:f8:89:99:9c:
3c:3a:c9:65:ef:7e:5d:1f:6e:88:e7:87:6b:a1:25:9c:9d:e0:
9e:18:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:34:33 2026 by rpki-client