Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/EjRGmDzvaxLmwHNTtjOXaCz9U7s.roa
File: EjRGmDzvaxLmwHNTtjOXaCz9U7s.roa (raw, json)
Hash identifier: DiOXAHVLFTKKr3dT1PY1tAEci/bbe0sz/zVufkS6kQs=
Subject key identifier: 12:34:46:98:3C:EF:6B:12:E6:C0:73:53:B6:33:97:68:2C:FD:53:BB
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 019F8EB54D1584942C34F434BF658A64751D
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/EjRGmDzvaxLmwHNTtjOXaCz9U7s.roa
Signing time: Thu 23 Jul 2026 11:21:14 +0000
ROA not before: Thu 23 Jul 2026 11:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50837
IP address blocks: 31.171.240.0/20 maxlen: 24
45.88.24.0/22 maxlen: 24
91.92.71.0/24 maxlen: 24
93.123.14.0/23 maxlen: 24
93.123.82.0/23 maxlen: 24
94.156.200.0/22 maxlen: 24
178.22.64.0/21 maxlen: 24
185.12.4.0/23 maxlen: 24
185.12.6.0/24 maxlen: 24
2a01:9980::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:b5:4d:15:84:94:2c:34:f4:34:bf:65:8a:64:75:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Jul 23 11:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=123446983cef6b12e6c07353b63397682cfd53bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:4f:65:d9:94:fc:96:c9:c8:42:08:c1:f6:
31:50:87:9e:02:db:ce:4c:85:77:8a:a7:50:dc:0b:
f1:bd:5b:88:02:67:c4:c7:6e:a7:6a:0d:91:94:3b:
09:78:c5:89:a4:af:79:d0:e0:0d:f2:26:c9:da:84:
1a:f9:d4:2e:e1:55:91:f0:72:80:b1:ce:0f:c6:8a:
0d:49:c2:fb:93:53:b0:3f:69:8d:7d:f1:0f:a9:b2:
34:92:86:e3:84:bd:7f:56:14:36:3a:51:8b:c0:d1:
ae:18:0a:f8:f8:50:7d:f9:b0:a0:1a:d4:ec:c6:9d:
63:9b:41:42:03:c6:a8:64:bd:79:5f:09:ea:be:af:
9e:a5:37:e9:20:c2:41:bb:eb:d0:a0:3e:57:8f:89:
5c:73:49:94:22:86:e3:5b:1b:2b:44:63:20:b7:f3:
49:de:d4:f4:20:f4:20:47:f5:b3:21:0f:81:89:1c:
23:a3:63:95:6c:86:2a:fc:9d:45:fa:29:42:72:0b:
cf:74:63:0d:9e:c4:d0:b5:20:2d:37:a8:c8:14:cb:
9f:64:03:cb:58:10:8f:60:ee:f0:d6:8c:21:d1:af:
fd:87:d0:1c:31:7d:a6:e6:81:63:2e:4d:cd:c8:4a:
45:48:d8:7f:2f:08:bb:de:f6:c5:dc:78:98:c9:83:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:34:46:98:3C:EF:6B:12:E6:C0:73:53:B6:33:97:68:2C:FD:53:BB
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/EjRGmDzvaxLmwHNTtjOXaCz9U7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.240.0/20
45.88.24.0/22
91.92.71.0/24
93.123.14.0/23
93.123.82.0/23
94.156.200.0/22
178.22.64.0/21
185.12.4.0-185.12.6.255
IPv6:
2a01:9980::/32
Signature Algorithm: sha256WithRSAEncryption
8c:84:f6:df:1b:c9:2e:9b:46:2b:0f:ed:bf:67:f5:d9:6f:60:
fa:1d:33:63:f9:56:e0:59:c3:d8:e3:6a:f7:6d:2f:96:d3:d5:
a3:33:dc:ad:d9:66:a9:e2:b1:93:9f:e2:33:b9:0a:1d:34:db:
3a:be:89:34:90:80:69:62:65:8c:7e:0f:72:d9:73:4b:77:cf:
4d:2b:86:4b:fc:59:1a:8a:d7:72:35:32:a9:6e:38:33:19:7c:
24:e1:b5:45:5a:3c:f1:9f:10:09:a6:9c:88:11:6e:af:6c:e8:
9a:25:28:a3:ac:e4:66:ac:f4:1c:c3:e2:32:61:d9:be:1e:5c:
61:ec:41:16:5f:81:eb:39:8b:6c:d7:5a:00:8b:89:a9:52:0b:
68:bb:ab:51:e0:9c:51:89:7d:17:2f:00:1c:22:f6:71:cb:31:
3c:1d:dc:fd:02:0b:8d:55:aa:1d:d5:7b:5e:27:01:41:69:03:
c0:0a:a0:c4:ef:2c:5e:0b:a3:13:6e:5a:43:14:f0:34:2b:09:
38:c0:52:b4:a5:ac:fc:f2:d7:1d:aa:67:3e:78:ab:04:4f:2f:
3c:41:dd:c7:8a:7a:be:88:79:f0:37:36:e4:5c:46:e3:14:b8:
f8:cd:d5:76:27:2b:20:e8:3b:8a:4c:5c:c5:3b:79:fe:33:3f:
36:a7:9b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:13:53 2026 by rpki-client