Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EuBE6dY65yJl3VRWAaU2JkDP2VE.roa
File: EuBE6dY65yJl3VRWAaU2JkDP2VE.roa (raw, json)
Hash identifier: nHSnPCZ8pkiIoyZUTKcciv1zOaMtAepjUcUE+7Xl2Bk=
Subject key identifier: 12:E0:44:E9:D6:3A:E7:22:65:DD:54:56:01:A5:36:26:40:CF:D9:51
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0C80ECC5C15130193F79416C08AF35CA2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EuBE6dY65yJl3VRWAaU2JkDP2VE.roa
Signing time: Tue 22 Sep 2026 07:40:08 +0000
ROA not before: Tue 22 Sep 2026 07:40:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 87.84.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:0e:cc:5c:15:13:01:93:f7:94:16:c0:8a:f3:5c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 22 07:40:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12e044e9d63ae72265dd545601a5362640cfd951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:ad:84:b1:40:0b:7c:82:8e:82:6b:df:ae:
b7:c5:fb:d2:58:fe:aa:7f:75:cc:43:5d:9c:d2:4e:
12:3a:55:a9:e3:04:88:a6:2d:ae:9f:00:8e:76:05:
bc:c8:fe:cc:a6:72:ea:32:52:fb:9b:76:2a:eb:c9:
12:5a:83:f9:5d:b3:cf:b8:b6:ed:ce:04:43:5b:e7:
35:5f:1a:5a:cc:d0:75:92:67:d9:20:f8:c8:fe:c2:
11:69:70:f1:0e:84:ba:85:94:2c:b1:e1:43:a8:c4:
e3:c2:00:49:c2:7c:ab:5c:a1:8b:d3:ce:a0:07:25:
d6:63:4e:4d:87:b8:93:6e:2e:2b:e8:2f:31:60:b9:
da:c2:d2:b0:1c:35:75:6e:88:bb:6e:1d:3c:6b:ce:
64:91:3c:90:6b:51:2a:df:5d:9d:0c:1c:4b:62:93:
3d:6b:b9:94:d8:2d:ef:58:21:2e:7e:29:ed:5e:65:
26:a2:60:5f:aa:9b:ee:c3:8b:e2:7b:f4:01:82:d5:
aa:5b:77:07:99:5a:a8:9f:eb:6d:b5:13:f1:44:57:
11:04:a0:8c:51:05:54:6a:ca:f4:01:93:56:a5:b2:
98:91:9d:5c:fc:5c:7c:64:7f:27:77:09:2a:46:d2:
2a:b4:a0:8a:57:a0:a9:a0:3c:d7:fe:48:8c:a5:a4:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E0:44:E9:D6:3A:E7:22:65:DD:54:56:01:A5:36:26:40:CF:D9:51
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EuBE6dY65yJl3VRWAaU2JkDP2VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.202.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:5b:bd:17:7a:cb:64:23:c6:be:52:9f:40:1e:db:f6:f4:31:
be:78:e2:14:4a:c2:81:7a:b1:16:90:0b:e2:f9:39:19:a9:aa:
c4:9a:50:47:e4:59:db:fc:f3:22:1f:76:65:0b:36:6a:19:90:
fd:8e:af:e7:8e:34:13:06:1d:fa:d6:d9:da:ea:77:9d:c0:7d:
52:18:bf:f2:af:8c:55:28:90:b4:39:84:8e:74:79:8c:38:90:
59:48:69:a0:25:98:24:41:cc:26:aa:ab:f1:ee:66:7b:4d:08:
c6:6b:c0:89:27:ad:2c:50:be:4c:d6:fc:fe:0c:eb:2e:ce:02:
03:bb:5d:7a:05:0e:cd:f6:c4:64:fe:08:2a:21:53:f3:b3:3d:
88:36:c0:2a:3e:80:02:b3:07:3c:34:f6:dc:1c:59:43:3e:79:
2e:05:64:95:6d:0c:50:1c:31:76:e6:5e:88:4c:73:e0:dd:17:
12:f8:ff:41:5d:e2:d2:99:84:dd:60:8e:57:a5:02:09:70:4a:
d1:c1:d5:21:31:7f:f6:60:dc:c4:96:fa:6d:81:fc:b8:83:96:
55:84:1e:c8:e6:81:36:b9:03:c1:de:3f:18:b3:89:d6:3d:22:
ad:b6:46:07:7f:07:f2:54:9f:94:6d:aa:33:b7:a9:1a:ce:4c:
c9:61:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:08:54 2026 by rpki-client