Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EORTpgNO0EOPqtnR8gq8HtYy9c4.roa
File: EORTpgNO0EOPqtnR8gq8HtYy9c4.roa (raw, json)
Hash identifier: NlRhMW354D6IyE7soSptrM1g5rv/53S//U2hzyAf240=
Subject key identifier: 10:E4:53:A6:03:4E:D0:43:8F:AA:D9:D1:F2:0A:BC:1E:D6:32:F5:CE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019F55E5AFC78BA9BB7458D93BE5FCE19E97
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EORTpgNO0EOPqtnR8gq8HtYy9c4.roa
Signing time: Sun 12 Jul 2026 10:35:43 +0000
ROA not before: Sun 12 Jul 2026 10:35:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142239
IP address blocks: 193.168.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:e5:af:c7:8b:a9:bb:74:58:d9:3b:e5:fc:e1:9e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 12 10:35:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10e453a6034ed0438faad9d1f20abc1ed632f5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:70:b0:39:6e:b6:ba:40:d1:36:f2:93:ba:
01:e3:e0:ec:80:d4:06:80:73:59:dd:2f:7f:9f:90:
45:32:65:01:61:06:0c:3a:63:8e:5a:96:fb:57:2c:
1b:b4:35:b4:6a:48:05:78:04:ba:14:0f:26:69:91:
0d:55:fb:dc:6a:24:96:be:0d:3c:6f:b6:3c:b2:7e:
82:7a:8a:b9:7d:27:61:17:ce:98:cd:57:64:95:81:
03:73:45:3c:05:30:3a:19:f1:06:4f:05:f5:7e:7d:
aa:32:b3:4d:82:73:78:fa:a3:25:52:c6:23:30:42:
2e:ae:dc:18:c2:28:d0:85:bb:a7:79:31:51:60:ad:
26:1f:a6:03:ef:82:e7:91:02:ba:2d:43:b5:47:98:
70:b9:43:55:53:44:27:98:6a:47:31:f7:23:2d:10:
44:a9:b0:e9:77:c1:d9:50:26:16:ec:37:66:33:0d:
54:a9:c5:f4:73:3f:c5:3b:7b:a6:0f:53:e0:c2:64:
7c:76:75:29:8f:a3:d3:74:0c:fa:7d:00:1a:b1:d6:
3b:70:e0:37:fa:64:4a:35:11:a9:14:b9:7e:a6:b5:
74:a6:bf:dc:29:77:89:57:b0:f5:10:98:5d:e3:bd:
d5:6e:79:62:09:69:55:28:08:66:a1:27:4e:fe:07:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:53:A6:03:4E:D0:43:8F:AA:D9:D1:F2:0A:BC:1E:D6:32:F5:CE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EORTpgNO0EOPqtnR8gq8HtYy9c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:bb:4c:04:45:26:84:cf:6a:6d:13:ba:78:a4:8e:38:1f:a1:
3c:ef:d8:84:a2:c8:c9:84:46:6e:37:84:6f:ae:9c:07:0a:ff:
f4:fb:fe:2e:3e:cd:0b:bb:1c:ba:aa:a8:3f:56:f0:a2:47:6b:
ae:4a:54:97:c5:bd:4e:5b:3d:c5:db:a2:27:2d:f8:86:b5:f1:
fa:b9:46:1d:c5:d0:af:32:98:a0:bf:ef:6c:c6:74:a5:e5:fd:
fb:54:e4:d8:a2:d1:f0:af:d2:5b:cd:fc:83:b1:17:a8:51:0d:
36:fd:83:db:a4:7f:3a:62:7d:33:43:f3:77:b1:bf:9b:33:14:
1c:3d:33:ef:15:82:96:56:34:e9:d3:a2:dd:f0:a3:1c:f1:51:
ea:61:88:31:0f:91:6b:74:fa:15:f9:29:ba:35:b8:f7:16:de:
58:af:09:0c:6e:23:e2:66:0d:e0:78:3d:e0:08:97:f9:4d:d6:
4d:64:65:f9:be:64:8b:bf:16:74:e6:86:71:da:a9:c8:8b:fb:
6f:fa:57:93:3d:79:a5:6b:8a:2a:22:6d:91:b3:bd:ac:3f:ac:
38:48:f6:39:4b:b9:f0:4f:65:9f:26:80:ea:8e:05:df:4b:f5:
e7:fc:20:84:55:ee:16:02:bf:42:25:63:42:97:85:e2:7e:74:
f3:d1:f1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:47 2026 by rpki-client