Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Eq0lVbnpwt-j35Pt16fwKtpYWlg.roa
File: Eq0lVbnpwt-j35Pt16fwKtpYWlg.roa (raw, json)
Hash identifier: 8XgY8nFFV6rMdltJ5ykRgUQrFC+LRpa8w5mJU4kQ77s=
Subject key identifier: 12:AD:25:55:B9:E9:C2:DF:A3:DF:93:ED:D7:A7:F0:2A:DA:58:5A:58
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019E3AE8D10A74D05D643590B856741E512F
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Eq0lVbnpwt-j35Pt16fwKtpYWlg.roa
Signing time: Mon 18 May 2026 11:46:36 +0000
ROA not before: Mon 18 May 2026 11:46:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197698
IP address blocks: 195.228.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:e8:d1:0a:74:d0:5d:64:35:90:b8:56:74:1e:51:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: May 18 11:46:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12ad2555b9e9c2dfa3df93edd7a7f02ada585a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:6f:06:fa:70:f1:03:8d:c3:41:48:ac:cb:
5e:1b:a5:11:c7:0e:82:e2:f9:ec:b5:78:f6:d3:90:
45:75:2d:21:61:3d:0e:c3:d7:c4:25:00:d4:38:ab:
a6:4a:a6:ba:62:32:21:6d:b0:a0:b7:1f:98:55:cf:
2f:91:e6:84:db:94:d4:18:31:b8:65:19:51:03:c0:
3c:0c:4b:31:87:bd:ff:49:4d:8c:d3:d0:4d:a0:ca:
e2:b7:b3:ce:09:76:ec:e3:ed:5c:f5:b1:ea:2b:a3:
74:65:c6:82:c6:33:d6:5d:aa:0e:4c:2f:5d:93:32:
35:c1:65:25:3b:c3:ac:67:d3:02:f6:08:c6:93:a3:
8c:2e:a0:8f:ed:61:eb:6e:9f:0c:3d:6c:f1:70:1b:
4f:08:92:e6:fe:a9:3c:18:b2:36:0d:e4:54:5b:f5:
5c:e2:2f:35:fb:5e:d5:85:12:65:8e:d2:d6:07:d3:
36:55:82:91:88:8f:66:cd:fd:a5:60:07:2b:81:8e:
af:58:0f:55:4d:4d:98:bc:aa:c6:4d:05:7d:3b:c9:
93:54:38:6c:35:00:f5:88:87:2b:95:88:24:92:02:
76:60:5a:7f:15:b8:18:b0:99:23:e3:55:25:97:2b:
b4:11:cc:ae:ed:e6:c0:64:60:1c:96:72:4a:b7:ad:
1b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AD:25:55:B9:E9:C2:DF:A3:DF:93:ED:D7:A7:F0:2A:DA:58:5A:58
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Eq0lVbnpwt-j35Pt16fwKtpYWlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.228.5.0/24
Signature Algorithm: sha256WithRSAEncryption
16:15:f9:93:69:66:d0:88:6a:65:cc:62:c8:a4:39:88:98:12:
44:78:b6:e5:12:e6:2a:58:6b:5b:42:67:a3:f8:1a:f2:28:c8:
e2:12:12:51:25:5a:00:dd:88:3a:81:5d:d9:63:f5:de:6c:c6:
70:ed:05:cf:0d:ba:35:a0:a5:1f:60:ae:fd:e1:0d:87:1d:c5:
f8:40:05:8e:62:96:ad:43:58:31:85:9d:2d:e5:b7:33:5c:50:
79:61:54:ed:46:52:eb:ba:9a:43:6e:55:71:65:92:88:9b:da:
47:10:a1:97:15:e3:db:ef:4a:d9:c5:d5:f2:09:71:35:d8:63:
b6:b7:0f:c1:d5:01:f5:a2:04:28:05:38:ca:31:1f:74:03:db:
a8:e2:00:77:18:48:e8:e2:a4:fc:3b:1b:82:ad:c6:ee:35:d6:
f5:1f:81:fa:7b:fb:1c:ac:ee:b1:8f:fb:aa:f3:83:8b:f3:97:
a8:88:f5:42:01:64:7b:a0:95:ba:22:a9:45:1e:88:11:c3:1d:
e4:cb:01:df:a2:ed:c7:00:5c:24:79:b3:d7:1b:ee:3f:18:8d:
ae:96:b6:30:67:a0:23:31:b0:6c:64:72:d7:e9:a1:3a:f4:c7:
75:55:dc:96:b2:35:1d:1b:ac:3b:18:33:c6:5a:07:14:86:cf:
ff:3a:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:41 2026 by rpki-client