Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/05e5b9-2275-49b7-bee5-37eab9214863/1/EuKejVNSbVkVfdpMijMMkKc4iIs.roa
File: EuKejVNSbVkVfdpMijMMkKc4iIs.roa (raw, json)
Hash identifier: 1DWWx4F4OjWg9qPN2dpeYGA2/7Q+syRfWE3gfur/Hos=
Subject key identifier: 12:E2:9E:8D:53:52:6D:59:15:7D:DA:4C:8A:33:0C:90:A7:38:88:8B
Certificate issuer: /CN=5166b91179c07e349fca5348ea4d8124c03e7983
Certificate serial: 01A1D5E5DBBAB295169290802F313C9F33A6
Authority key identifier: 51:66:B9:11:79:C0:7E:34:9F:CA:53:48:EA:4D:81:24:C0:3E:79:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWa5EXnAfjSfylNI6k2BJMA-eYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/05e5b9-2275-49b7-bee5-37eab9214863/1/EuKejVNSbVkVfdpMijMMkKc4iIs.roa
Signing time: Fri 13 Nov 2026 17:12:53 +0000
ROA not before: Fri 13 Nov 2026 17:12:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34309
IP address blocks: 31.214.212.0/22 maxlen: 22
31.214.212.0/24 maxlen: 24
128.65.208.0/20 maxlen: 20
2001:4d50:fd00::/40 maxlen: 40
2001:4d50:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/05e5b9-2275-49b7-bee5-37eab9214863/1/UWa5EXnAfjSfylNI6k2BJMA-eYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/05e5b9-2275-49b7-bee5-37eab9214863/1/UWa5EXnAfjSfylNI6k2BJMA-eYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWa5EXnAfjSfylNI6k2BJMA-eYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:e5:db:ba:b2:95:16:92:90:80:2f:31:3c:9f:33:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5166b91179c07e349fca5348ea4d8124c03e7983
Validity
Not Before: Nov 13 17:12:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12e29e8d53526d59157dda4c8a330c90a738888b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:3f:df:f0:ca:a1:5d:12:04:cf:41:2f:64:
13:fc:39:8e:2d:d6:42:04:a3:9e:08:3f:2e:d6:b1:
c1:43:73:70:61:5e:b8:67:0d:36:b3:01:92:76:1f:
c0:23:96:93:db:1d:e0:61:23:7b:88:ef:ad:d0:eb:
95:bc:56:29:bb:f9:b4:b3:61:17:af:2a:5a:99:80:
99:76:fd:ec:e2:eb:f5:1a:e4:7f:e3:4e:90:22:6a:
c1:c9:51:a7:27:6f:11:d8:f0:0e:5b:31:a1:70:88:
99:82:c1:ba:64:03:f2:4f:24:e9:1c:07:f4:d5:2f:
7f:c0:77:61:3d:84:33:d2:a4:68:9d:50:14:43:c1:
7b:17:73:28:27:98:65:4a:a1:78:69:45:a1:5d:c5:
1e:95:e3:8e:ac:f0:04:a0:74:28:e6:9a:e7:cf:59:
76:b8:9d:ec:66:8a:fd:4d:bc:15:f6:07:73:73:76:
a6:da:52:d2:8e:29:8a:b5:53:35:b0:4c:67:43:6b:
e2:c5:eb:41:5e:8b:c2:9c:58:c6:6a:78:9c:b4:2e:
4f:3b:53:c7:04:b0:4d:00:af:47:47:7e:d0:47:5e:
6d:43:eb:b5:05:73:8b:67:eb:5c:37:18:d6:5a:c9:
7e:4d:87:71:73:46:08:37:cf:63:10:1b:b6:77:5b:
17:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E2:9E:8D:53:52:6D:59:15:7D:DA:4C:8A:33:0C:90:A7:38:88:8B
X509v3 Authority Key Identifier:
keyid:51:66:B9:11:79:C0:7E:34:9F:CA:53:48:EA:4D:81:24:C0:3E:79:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWa5EXnAfjSfylNI6k2BJMA-eYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/05e5b9-2275-49b7-bee5-37eab9214863/1/EuKejVNSbVkVfdpMijMMkKc4iIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/05e5b9-2275-49b7-bee5-37eab9214863/1/UWa5EXnAfjSfylNI6k2BJMA-eYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.212.0/22
128.65.208.0/20
IPv6:
2001:4d50:fd00::/40
2001:4d50:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
a2:d3:de:c4:aa:a5:5c:9b:0a:6c:f5:62:14:07:a3:83:58:0c:
71:36:da:ac:bb:e6:2c:ac:4f:74:3b:ae:ca:2e:b4:9e:a2:13:
92:3e:36:2b:07:69:4d:78:43:7c:d8:97:0b:97:5e:7c:e2:29:
a8:e8:f9:13:05:0c:92:b9:75:ab:c3:d9:f9:c4:ae:17:04:21:
14:84:75:7b:f1:fc:41:87:ac:a5:90:df:f1:99:73:1c:2f:c1:
e2:e1:c8:a3:56:db:f3:98:6d:8b:86:fa:22:6e:b6:4c:48:b6:
86:4a:9b:97:77:1c:c1:37:4b:e5:2f:18:f2:54:1d:64:24:83:
d0:02:54:c1:ce:a1:e3:0c:41:b4:04:7a:b8:cf:ba:12:4c:ca:
56:e5:7a:79:72:a0:68:7b:88:eb:c1:6e:b9:9c:64:b0:4d:b5:
6e:d0:4a:90:dc:27:23:b1:3d:cd:5e:ea:3b:0e:ae:f6:f9:24:
04:ef:37:45:4f:a7:92:43:77:1b:3d:06:2f:c2:f4:b6:0a:f6:
c5:b4:29:ae:66:1e:40:3f:d2:18:9a:65:e3:25:dd:4e:3b:56:
1c:84:54:2c:6c:9c:44:7c:e9:3a:dc:2b:c3:18:77:ae:15:be:
2b:37:97:0b:25:2c:3a:e0:1b:b7:8d:5c:39:7b:66:55:6e:3e:
cb:6f:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:17:19 2026 by rpki-client