Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EgsYUIzE-JlyCQCL9PlRo9TdXPU.roa
File: EgsYUIzE-JlyCQCL9PlRo9TdXPU.roa (raw, json)
Hash identifier: fceLts3Ii+RNdF3NcvJHpX0PcO74Qab+wsRXQqGaLt4=
Subject key identifier: 12:0B:18:50:8C:C4:F8:99:72:09:00:8B:F4:F9:51:A3:D4:DD:5C:F5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F1CA5F29C410895989974B41DC9A01F9A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EgsYUIzE-JlyCQCL9PlRo9TdXPU.roa
Signing time: Wed 01 Jul 2026 07:47:45 +0000
ROA not before: Wed 01 Jul 2026 07:47:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49592
IP address blocks: 151.246.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:a5:f2:9c:41:08:95:98:99:74:b4:1d:c9:a0:1f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 1 07:47:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=120b18508cc4f8997209008bf4f951a3d4dd5cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:04:0d:8d:3c:e4:a1:f1:4e:64:77:c4:e2:
5e:f5:04:51:8a:74:3a:88:b9:5c:75:84:20:4d:67:
73:b6:e8:35:c7:5c:0f:05:6f:92:51:a6:3c:9c:26:
a8:c6:39:9d:61:43:c8:af:f2:79:17:5f:68:e8:25:
0a:7e:2d:d0:f9:56:03:29:19:98:b6:59:f8:f4:31:
0d:7a:28:b9:b6:0c:b3:1c:85:8f:0c:69:57:9f:cb:
3a:c0:f7:a7:18:17:5c:5e:1a:0b:e8:11:8b:63:f5:
bb:27:3b:1c:3b:e2:e9:fa:d5:e9:4b:0c:f4:9b:f2:
29:de:92:af:e3:4a:7b:6b:80:28:4b:4b:a0:9c:c0:
a4:75:23:c1:4d:38:4d:f6:34:d0:01:3f:4e:fe:65:
9e:16:44:66:64:40:1a:08:52:ca:4d:31:e2:d7:d6:
bc:1c:60:85:6d:f1:81:17:5c:1c:ac:1d:59:21:dd:
52:94:af:75:9b:f1:6c:a0:0a:90:46:08:2e:db:1a:
f9:40:3b:3d:c7:89:d0:8f:97:ac:c5:9f:81:f0:b3:
d8:92:53:00:16:36:39:a8:33:9f:b4:83:d3:1c:a9:
4d:1c:ba:13:1e:62:0a:36:ea:47:9b:64:51:9c:69:
75:28:26:61:da:fd:f1:d1:e0:4a:fa:87:a4:28:e2:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0B:18:50:8C:C4:F8:99:72:09:00:8B:F4:F9:51:A3:D4:DD:5C:F5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EgsYUIzE-JlyCQCL9PlRo9TdXPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.132.0/22
Signature Algorithm: sha256WithRSAEncryption
87:3b:f4:d5:09:85:6b:a0:ab:70:28:dd:e6:28:aa:27:a1:b9:
73:41:f1:92:bd:59:f7:7a:a0:d2:50:0d:07:df:5d:69:b4:51:
41:e5:d6:89:54:85:d9:ac:bc:7f:cd:08:ad:76:cc:b7:31:d3:
7a:3d:e8:3e:1c:5a:9d:f4:de:01:8d:b7:5c:1f:eb:8d:dc:69:
b4:09:bd:1d:e2:6f:10:00:29:1f:77:8f:74:9c:0b:2e:4d:a8:
fb:4e:57:7c:9c:b2:e8:e5:7f:63:31:0e:a8:06:57:07:6b:9a:
e4:dd:cf:30:c3:49:ab:aa:16:c5:69:60:85:ec:3c:5a:80:45:
5d:0b:33:31:30:96:c1:59:e0:0f:58:ea:45:a8:11:b6:6c:b1:
21:9f:d0:94:02:11:c3:5c:34:e9:05:ad:99:d9:3b:17:6b:86:
81:4d:b9:de:04:c9:6b:a3:cb:3c:7b:10:18:a0:a6:62:d7:40:
2d:26:a5:de:0b:85:21:57:e5:9e:16:f8:b6:ab:cf:54:8d:35:
61:2f:d8:e5:f0:b7:12:08:1e:83:cb:53:9b:31:0e:27:41:53:
b8:8d:b6:de:73:3d:6d:5e:5b:c2:d3:87:4a:4d:6d:99:e4:82:
96:fc:dc:aa:80:4a:02:3c:c7:ce:05:a5:0e:8a:e2:66:72:7a:
a2:1d:66:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:49 2026 by rpki-client