Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/Eu0fB4RPCslDaY2STwFsEjtmjM4.roa
File: Eu0fB4RPCslDaY2STwFsEjtmjM4.roa (raw, json)
Hash identifier: baHCjNbN0yoBwK8/yKMs0jfLYaaJD3Ay7zAQGrvne+A=
Subject key identifier: 12:ED:1F:07:84:4F:0A:C9:43:69:8D:92:4F:01:6C:12:3B:66:8C:CE
Certificate issuer: /CN=d6c3a37c218dc9e814dbfc42ab476f2616631d47
Certificate serial: 019F236850E49782B1641A6601F69387C970
Authority key identifier: D6:C3:A3:7C:21:8D:C9:E8:14:DB:FC:42:AB:47:6F:26:16:63:1D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sOjfCGNyegU2_xCq0dvJhZjHUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/Eu0fB4RPCslDaY2STwFsEjtmjM4.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213783
IP address blocks: 185.238.164.0/24 maxlen: 24
2a14:c800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sOjfCGNyegU2_xCq0dvJhZjHUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:50:e4:97:82:b1:64:1a:66:01:f6:93:87:c9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c3a37c218dc9e814dbfc42ab476f2616631d47
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12ed1f07844f0ac943698d924f016c123b668cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:31:cb:b9:b6:75:bd:fd:79:70:cf:7c:df:d1:
19:2b:59:ab:4c:26:2e:c6:0d:31:15:9d:c2:3b:4f:
ea:5a:c5:96:da:22:5c:25:44:ef:30:14:e1:9c:a1:
02:95:05:04:27:a4:6e:6f:97:37:e5:28:26:30:a2:
d0:74:af:1b:f6:41:55:65:e7:5f:3d:ab:8e:e7:4b:
06:d6:9a:7b:e1:7a:85:72:eb:35:a4:bb:b4:0e:4a:
e7:9e:31:d6:67:34:19:54:18:7c:8b:98:e6:97:95:
74:66:ed:4f:a9:c2:35:7c:c8:c8:a1:e2:e2:b6:25:
ee:8f:a1:68:94:49:da:64:3f:16:dd:7e:e0:2a:4b:
6f:8e:b1:65:38:cd:2c:57:b2:ee:c7:b8:cc:07:8a:
f4:bf:16:56:66:90:23:46:6c:4d:44:42:aa:c2:9b:
e5:31:11:d6:1d:3d:2b:c0:78:de:dd:73:2e:c0:6e:
84:66:76:d3:cf:6d:b7:3b:db:f8:66:41:a1:d5:4a:
e8:f5:d1:38:39:1d:9f:5e:38:b7:6a:ba:a5:6b:c0:
a3:ec:15:8c:5a:2e:59:0f:79:e9:ff:35:10:ff:13:
c8:c6:6c:70:18:b2:66:8d:3f:f1:3a:a0:6d:2f:93:
b7:ea:1d:66:0c:6c:5a:90:1b:ea:df:c5:7e:00:6a:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:ED:1F:07:84:4F:0A:C9:43:69:8D:92:4F:01:6C:12:3B:66:8C:CE
X509v3 Authority Key Identifier:
keyid:D6:C3:A3:7C:21:8D:C9:E8:14:DB:FC:42:AB:47:6F:26:16:63:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sOjfCGNyegU2_xCq0dvJhZjHUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/Eu0fB4RPCslDaY2STwFsEjtmjM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.164.0/24
IPv6:
2a14:c800::/29
Signature Algorithm: sha256WithRSAEncryption
5b:85:c4:d6:ca:89:5e:6a:f8:44:a6:dd:c9:e2:46:c2:4d:54:
b8:70:09:3a:f2:43:18:5b:6e:8a:da:77:02:5a:75:51:24:0d:
ec:e5:97:38:bb:b1:6e:3f:42:89:da:17:59:12:b2:18:2a:0b:
5c:3b:f9:6e:79:ea:12:e6:e7:6f:03:9c:25:e9:da:b1:c0:0a:
68:ef:03:60:83:bd:5b:64:66:dd:06:06:4e:44:64:bb:40:dd:
19:e1:f5:57:b4:0a:12:bb:70:60:74:4a:bd:ca:a3:f5:08:8c:
7c:b7:68:37:5b:ac:1d:58:b1:c4:26:fe:0b:7d:ac:c0:8f:90:
14:ea:53:a9:bd:7b:76:58:cf:d8:9b:d0:b1:f2:e5:21:78:66:
0e:ea:01:8e:30:1f:7b:40:48:6e:20:66:b0:02:07:96:73:6b:
d5:ed:53:16:00:31:63:27:a2:3c:f5:10:64:f7:99:0e:cc:50:
e0:89:b9:00:08:85:78:b8:3a:30:2a:55:b4:8e:d4:d2:bd:52:
95:38:7a:9b:34:b3:5d:32:ae:bc:1c:cc:39:5b:8b:3d:01:72:
49:c1:09:45:70:f3:17:cc:22:2d:38:43:5e:09:cd:c6:54:ef:
91:bd:6a:b0:a0:1b:2c:1f:3c:ad:72:c7:89:b9:1b:83:d9:e4:
17:64:e6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:00:49 2026 by rpki-client