Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EOao4K-Kp8p83bOkyq_enPqvSrU.roa
File: EOao4K-Kp8p83bOkyq_enPqvSrU.roa (raw, json)
Hash identifier: tD3kpua/zybSs0WPcpErUN0cUJnGcL8Wd6VTOfe0/6I=
Subject key identifier: 10:E6:A8:E0:AF:8A:A7:CA:7C:DD:B3:A4:CA:AF:DE:9C:FA:AF:4A:B5
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 019FD6A5BF8CDC6D2D651038009D61FDB993
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EOao4K-Kp8p83bOkyq_enPqvSrU.roa
Signing time: Thu 06 Aug 2026 10:36:54 +0000
ROA not before: Thu 06 Aug 2026 10:36:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201717
IP address blocks: 141.101.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:a5:bf:8c:dc:6d:2d:65:10:38:00:9d:61:fd:b9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Aug 6 10:36:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10e6a8e0af8aa7ca7cddb3a4caafde9cfaaf4ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:db:5d:57:ae:96:c7:06:e4:85:ba:9f:bc:
3a:65:e0:8e:20:59:14:a9:12:f8:e7:ac:a5:43:5b:
d9:47:5b:1d:a2:42:44:6d:b9:3c:ed:35:75:75:ff:
ba:c5:7d:a1:57:85:00:60:84:85:04:8b:4c:41:8b:
75:2d:50:74:57:fd:9b:ae:9a:dd:40:e8:33:11:2d:
9c:8c:23:64:d9:a4:59:d8:43:b8:bc:3f:19:63:78:
cb:e9:17:8d:8d:eb:4b:4c:d5:f5:2d:f6:0e:e0:90:
5e:da:bd:70:e7:ba:57:f8:59:8f:26:2c:c8:e9:37:
a7:a0:ff:43:57:3c:ed:00:30:00:14:36:ad:5f:35:
5f:de:f1:7f:d1:8a:d6:c2:12:06:72:52:22:d7:42:
40:e6:28:c2:1f:c9:d7:35:a1:e8:28:6b:15:20:31:
86:87:7d:4a:01:83:aa:a9:e4:fd:9b:a1:8f:b8:3e:
30:d8:c1:61:b2:cd:b6:d9:1e:2d:5b:7a:22:65:66:
82:57:27:0e:d3:db:b4:a3:22:01:c9:e4:69:b2:d4:
ad:6e:c2:dd:90:99:9e:ac:20:77:4c:c3:9f:9c:29:
08:f2:b6:86:2e:d1:78:01:03:4f:15:6b:f2:82:72:
14:44:ef:1e:e5:19:0e:1a:39:70:38:38:25:78:16:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E6:A8:E0:AF:8A:A7:CA:7C:DD:B3:A4:CA:AF:DE:9C:FA:AF:4A:B5
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EOao4K-Kp8p83bOkyq_enPqvSrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.225.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a6:46:03:49:b4:2f:ca:76:9e:93:92:4e:34:c2:96:ee:62:
93:64:65:e2:f6:a1:fe:cf:78:19:69:94:c2:4d:68:94:f2:e9:
8b:fe:0f:6b:58:31:36:22:13:40:be:dc:2f:a6:0f:1f:6f:9a:
b1:7f:51:8c:5e:c6:73:67:bd:e2:25:db:8c:d8:6f:32:d1:3a:
36:0e:79:6c:a5:de:cf:9b:86:96:7f:4c:90:35:b9:fb:07:a8:
91:25:98:1a:e2:c7:22:22:55:cb:53:93:a3:8d:d4:62:1c:b4:
04:de:a4:99:f6:55:80:13:05:34:9b:02:ac:77:19:f9:ac:c7:
8d:23:0b:4e:bf:e6:bf:12:09:6d:72:aa:4d:fa:12:47:79:43:
a1:81:51:46:15:2e:a1:2d:5a:e8:c7:4c:06:b4:85:9b:9f:d8:
1d:06:8b:65:d0:7a:1e:89:0b:08:87:a0:c6:2e:43:d8:84:8e:
a6:5a:2e:a9:13:3a:e0:ca:e3:33:76:4e:97:5d:5e:43:56:f8:
3e:5b:cd:04:36:3a:67:03:73:f1:85:bd:6f:ca:ae:26:30:a0:
3c:3a:15:b3:71:52:ab:34:b5:e8:5d:3f:f9:a3:81:cc:55:d2:
63:43:8f:ba:a7:6f:95:c0:4d:80:3b:5e:03:c8:c0:db:b4:23:
33:dc:13:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:40:19 2026 by rpki-client