Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/EuhZP1AZU_rcBrUtpebBNKpZGDs.roa
File: EuhZP1AZU_rcBrUtpebBNKpZGDs.roa (raw, json)
Hash identifier: 4fJyMfdftWEjgJj30JHbQU1JK+JRhaZwjIp1NhaWeFg=
Subject key identifier: 12:E8:59:3F:50:19:53:FA:DC:06:B5:2D:A5:E6:C1:34:AA:59:18:3B
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019CB96FF7FAFD5B60DA6D40C829845FBA48
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/EuhZP1AZU_rcBrUtpebBNKpZGDs.roa
Signing time: Wed 04 Mar 2026 15:20:48 +0000
ROA not before: Wed 04 Mar 2026 15:20:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211190
IP address blocks: 185.5.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:6f:f7:fa:fd:5b:60:da:6d:40:c8:29:84:5f:ba:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Mar 4 15:20:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12e8593f501953fadc06b52da5e6c134aa59183b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:0f:36:22:ad:65:60:aa:4b:e8:d4:4c:07:
32:68:5d:6e:d2:03:ac:37:40:cd:b4:0d:f8:59:3a:
c5:05:2b:0e:6d:c5:bb:54:2b:d7:80:32:b5:97:02:
49:3f:07:a4:46:12:c0:68:39:97:e7:e8:92:3a:e3:
4e:fe:6f:9d:03:e6:d4:70:59:e1:43:5d:98:c3:a9:
d8:5d:77:62:a0:4e:d3:20:76:a1:a1:4d:3a:5c:7b:
97:26:c0:de:57:a5:59:61:38:63:00:a0:6e:ba:ce:
2f:e6:1f:ac:16:14:96:d3:3d:11:61:0a:0e:f3:e4:
99:79:9a:0b:f0:8f:7e:5a:10:2f:fd:05:b4:93:5a:
f2:f7:50:3a:6c:5d:3c:4f:aa:35:85:22:d3:06:5a:
46:26:18:c7:21:1d:b6:21:c5:3a:86:7b:10:e3:e2:
d3:a7:0e:96:4a:75:1d:43:4b:ec:0d:98:69:a9:bf:
d7:60:b2:44:8a:76:83:22:74:86:72:ee:3b:24:65:
98:08:85:ce:73:87:06:e5:81:68:13:7e:5f:22:d1:
6a:59:d6:ce:53:ea:51:c1:6d:74:34:bb:aa:b3:13:
f0:e2:8d:49:ea:7c:01:50:f5:f2:27:86:44:b0:fa:
f6:fa:45:cf:87:ef:84:11:d8:6c:de:a3:86:f0:ba:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:59:3F:50:19:53:FA:DC:06:B5:2D:A5:E6:C1:34:AA:59:18:3B
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/EuhZP1AZU_rcBrUtpebBNKpZGDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:86:bf:9b:3a:50:6d:3a:a0:74:5c:2d:c6:0a:bb:be:be:2b:
ab:b9:5f:83:b4:7a:99:a5:ce:a9:6a:35:10:ea:57:0d:26:21:
28:3c:8c:f2:b9:2b:8e:04:8a:cc:4e:5a:e3:b1:84:93:ec:1f:
9b:f7:e3:14:0c:a5:cc:39:6b:2a:89:5c:c4:ee:20:e8:5f:a4:
08:55:36:5b:5a:e8:d6:43:55:57:c5:3f:b0:ab:9e:a4:6b:e8:
a1:0b:d7:7e:5a:c3:6e:34:49:6d:ad:31:d7:4a:05:cc:36:9b:
ae:e8:7d:80:96:09:27:5f:51:57:70:76:a1:63:e6:a1:80:30:
ea:f1:5a:85:fd:80:f9:63:c5:5e:4c:be:06:0f:6e:44:cd:b7:
89:ef:f2:a3:bc:85:79:45:35:40:c2:4c:a4:3b:c2:96:52:bd:
f9:67:db:70:9b:74:6c:18:a5:67:42:1b:66:48:39:a2:46:9f:
87:01:9c:e8:bb:43:5a:fa:9f:69:37:22:36:95:80:28:a9:c7:
52:c0:bf:c1:1b:e2:bc:5d:ac:4e:22:27:3d:db:fa:d9:13:02:
39:2c:de:84:52:d5:63:67:08:10:74:6b:5f:21:94:2f:57:6f:
00:a0:05:b1:bc:e2:0f:48:13:ae:39:fd:f3:cb:d6:a6:51:45:
d4:e7:c4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:19:12 2026 by rpki-client