Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/EJdtqQdc0UeFz8mnfKqKtvtPGnk.roa
File: EJdtqQdc0UeFz8mnfKqKtvtPGnk.roa (raw, json)
Hash identifier: va4uWHoCe/BbcgVjzuzuEu6jfJbdipgHv67I7KVhA7I=
Subject key identifier: 10:97:6D:A9:07:5C:D1:47:85:CF:C9:A7:7C:AA:8A:B6:FB:4F:1A:79
Certificate issuer: /CN=808b0022f8fddc8f2488ff9df9e13ac4e2ced710
Certificate serial: 019F2368412582297C5CFA82134E4A10F479
Authority key identifier: 80:8B:00:22:F8:FD:DC:8F:24:88:FF:9D:F9:E1:3A:C4:E2:CE:D7:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/EJdtqQdc0UeFz8mnfKqKtvtPGnk.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43395
IP address blocks: 185.110.218.0/24 maxlen: 24
185.110.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:41:25:82:29:7c:5c:fa:82:13:4e:4a:10:f4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808b0022f8fddc8f2488ff9df9e13ac4e2ced710
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10976da9075cd14785cfc9a77caa8ab6fb4f1a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:d8:62:72:ae:ce:c4:ec:63:e1:1f:72:dc:
35:7e:da:8a:1a:6e:a0:dd:d7:e2:e5:0a:cb:87:68:
2f:67:c0:0d:ba:36:ca:f4:89:28:5a:95:2e:17:40:
e4:84:1f:8b:b5:cc:c4:0d:13:95:a9:6c:c9:15:4b:
f1:2a:88:11:8c:d9:ee:00:0b:f1:60:47:55:5c:cb:
e9:40:78:23:a4:4e:9f:e7:e7:5e:26:f8:5a:15:e0:
f6:42:00:19:18:0c:40:2a:ef:c4:0a:54:d6:32:3b:
62:35:fc:63:f5:d6:f5:5e:7c:3f:9e:63:25:8f:86:
47:b9:fc:55:d8:e5:b9:c3:db:d8:db:56:08:20:b9:
b1:99:9a:07:0f:2f:94:46:c4:56:6a:65:06:47:af:
b1:89:1e:1f:77:a3:58:61:07:c5:94:7c:ee:eb:ed:
24:fb:4c:76:c3:69:f2:22:7e:5f:42:cf:2a:82:34:
bc:9c:7f:8b:c7:6b:a5:d7:61:b9:ff:7f:09:9a:d9:
01:d1:e0:68:e9:88:37:86:bb:ae:d9:1a:e1:96:4a:
9d:4b:f2:ba:f9:93:95:0b:3c:e2:61:91:a6:bc:8a:
74:81:50:60:f4:e1:a3:e0:be:cd:7d:7f:c3:f2:be:
6e:ff:02:89:05:85:4f:0e:e4:92:c6:bc:3a:6a:45:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:97:6D:A9:07:5C:D1:47:85:CF:C9:A7:7C:AA:8A:B6:FB:4F:1A:79
X509v3 Authority Key Identifier:
keyid:80:8B:00:22:F8:FD:DC:8F:24:88:FF:9D:F9:E1:3A:C4:E2:CE:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIsAIvj93I8kiP-d-eE6xOLO1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/EJdtqQdc0UeFz8mnfKqKtvtPGnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/gIsAIvj93I8kiP-d-eE6xOLO1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.218.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:4a:c5:d3:ec:4d:87:31:2c:61:86:bb:3a:21:1d:b8:8b:0f:
e4:50:3a:7e:fc:97:36:79:5e:ec:18:29:3a:96:cd:a8:2b:4a:
b8:6d:f9:76:ad:af:fd:64:9a:0e:36:e3:23:69:b4:00:aa:84:
04:9c:37:96:7f:c2:ed:04:82:91:cd:cd:53:ad:7b:1d:08:92:
28:5f:97:a5:3e:fb:6a:e7:b4:7e:6b:42:d9:57:7c:60:1c:94:
fa:cc:d6:10:88:6f:f9:62:47:80:d9:db:24:74:e6:de:9f:5d:
ce:52:fe:de:2c:3b:bb:e5:6a:8f:f4:28:47:6d:b2:53:77:f8:
5b:a2:76:25:1d:d6:fd:a9:fa:87:c8:72:5a:6a:44:2e:c0:de:
46:e1:03:89:6e:cc:27:b9:96:74:6e:2f:8b:34:86:92:18:c0:
e3:ea:ff:37:19:35:d9:a2:5a:95:4b:55:c3:ba:a1:4b:e7:ef:
ef:3f:cf:8d:7c:b9:0c:ad:31:72:7f:79:76:23:94:9c:b8:cd:
fb:bc:70:1a:f2:57:57:d6:a6:2b:01:c7:bb:bc:a8:a6:49:66:
00:8b:76:a9:cf:72:1a:0c:bc:62:99:e5:8c:46:dd:28:da:2b:
26:3a:b5:81:59:1c:50:18:b6:a8:ad:81:52:6c:0a:d1:8a:70:
82:7f:16:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:17 2026 by rpki-client