Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/EPuA-rz2GCC_9oWJncgSaaD-Amw.roa
File: EPuA-rz2GCC_9oWJncgSaaD-Amw.roa (raw, json)
Hash identifier: 1zdJX0jOCZ5hbksB1gikYMcKYGrQ1RKUiTOb42T+2/Y=
Subject key identifier: 10:FB:80:FA:BC:F6:18:20:BF:F6:85:89:9D:C8:12:69:A0:FE:02:6C
Certificate issuer: /CN=e930b76e721f5d834ed53e49284d9790339211c8
Certificate serial: 019F46CA8024D3FCA860A269CEB0F31D60E2
Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/EPuA-rz2GCC_9oWJncgSaaD-Amw.roa
Signing time: Thu 09 Jul 2026 12:11:43 +0000
ROA not before: Thu 09 Jul 2026 12:11:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210618
IP address blocks: 109.68.216.0/24 maxlen: 24
194.9.180.0/24 maxlen: 28
194.9.180.240/28 maxlen: 28
2a12:8740::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:ca:80:24:d3:fc:a8:60:a2:69:ce:b0:f3:1d:60:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8
Validity
Not Before: Jul 9 12:11:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10fb80fabcf61820bff685899dc81269a0fe026c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:a3:c2:a3:4c:bd:2a:1d:40:e8:6d:1f:25:
f3:a7:e0:f3:6f:a9:f0:35:8d:8b:b5:20:ae:b1:54:
28:27:cd:3e:97:9c:02:92:8d:4e:03:0b:84:fc:fc:
9c:3c:aa:1c:f1:22:24:31:96:b5:a1:80:2e:d3:e1:
6f:67:94:d0:6d:14:75:cc:7f:79:69:77:52:8e:05:
80:58:38:6e:8b:57:8f:f7:33:e8:c0:9f:75:db:7b:
71:5f:3e:f2:9c:3a:e8:07:f8:a2:4c:97:ad:fe:ce:
82:60:de:38:29:79:dc:30:91:1a:38:1f:fc:26:56:
83:c1:4b:09:14:e9:51:53:80:83:fa:52:31:69:0b:
ea:15:79:17:27:b3:2d:a3:45:89:1c:5b:ea:00:70:
57:4b:4b:25:44:d5:f8:7a:98:1f:20:2d:fd:10:3d:
95:30:52:fa:41:8f:c7:b0:43:53:18:cc:94:60:89:
19:39:b6:7c:2d:00:e3:80:eb:88:b0:6b:8c:87:7a:
e3:f4:fb:bb:71:09:4f:98:a6:3c:6e:86:ac:74:75:
ba:c9:ef:3f:af:26:98:b1:fa:6c:a3:e0:6a:e2:27:
3f:ba:89:cd:f2:89:ee:25:75:87:72:19:41:29:e4:
b5:e8:4a:45:63:e5:92:78:da:70:7e:19:7c:73:0b:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FB:80:FA:BC:F6:18:20:BF:F6:85:89:9D:C8:12:69:A0:FE:02:6C
X509v3 Authority Key Identifier:
keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/EPuA-rz2GCC_9oWJncgSaaD-Amw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.216.0/24
194.9.180.0/24
IPv6:
2a12:8740::/32
Signature Algorithm: sha256WithRSAEncryption
0c:ca:7f:0f:d2:d6:64:9d:11:b0:f5:38:e7:4f:2e:10:26:67:
2c:68:bb:30:d9:f8:34:2f:af:77:d5:8a:66:f7:9c:52:c0:a1:
1b:c4:8d:8e:99:ed:52:76:0d:38:9a:cf:de:86:40:1d:af:33:
ce:1b:90:49:87:34:57:9f:b8:c8:d7:89:16:55:bf:f8:bf:b5:
ab:24:64:65:05:d4:20:fc:62:9b:ff:a1:b6:4c:bd:4f:88:1f:
b3:22:e0:6f:96:c4:47:d0:bd:d9:2b:29:e1:07:9f:0d:0f:53:
d1:f1:e1:cc:44:a2:1f:f9:cb:17:98:e3:72:ba:f3:76:e4:cc:
4c:24:0a:6b:5e:5d:57:1f:7e:ea:1f:e0:db:09:16:35:7a:a1:
23:f4:23:c1:3c:b0:2b:21:ca:af:9b:de:fd:fe:a2:83:d2:e1:
5f:96:36:27:05:41:a4:44:98:8e:17:a3:9c:fc:3e:57:f8:33:
9e:0c:fd:d0:fc:26:ea:2f:36:46:2c:24:15:9d:11:84:7b:ca:
da:7b:1d:93:ff:1c:54:05:52:39:e4:a2:db:c5:ed:93:37:c1:
f7:e4:32:a0:eb:2e:11:26:d6:72:4b:2a:b2:a0:6d:5c:2e:b4:
6e:87:4c:95:b6:22:2a:11:45:21:60:9c:10:82:f5:8e:f3:56:
36:c6:fd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:49 2026 by rpki-client