Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/EQf8U92EPcL_zr9ov9fIcuwfS6k.roa
File: EQf8U92EPcL_zr9ov9fIcuwfS6k.roa (raw, json)
Hash identifier: iWOvjNxxXFUdMLTjnE7BkMW4tfC1Dpshim0UgfoaFX8=
Subject key identifier: 11:07:FC:53:DD:84:3D:C2:FF:CE:BF:68:BF:D7:C8:72:EC:1F:4B:A9
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 01A1B09607E5F0F4433411A997C38CEDE505
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/EQf8U92EPcL_zr9ov9fIcuwfS6k.roa
Signing time: Fri 06 Nov 2026 11:19:44 +0000
ROA not before: Fri 06 Nov 2026 11:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 193.111.196.0/24 maxlen: 24
193.111.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:96:07:e5:f0:f4:43:34:11:a9:97:c3:8c:ed:e5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Nov 6 11:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1107fc53dd843dc2ffcebf68bfd7c872ec1f4ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:11:76:cb:68:2b:03:26:aa:d6:e2:7f:a4:
a3:31:58:27:ce:4a:d3:08:39:6f:08:92:80:65:65:
60:a7:2b:9e:fb:f7:30:95:1b:54:07:3a:2f:84:e8:
b1:07:5f:84:29:3c:51:a6:ee:ed:e9:a5:fa:f1:4a:
51:b4:04:db:7c:8a:e6:e5:98:b7:d9:17:80:a1:18:
83:bd:1e:75:f8:66:71:27:e4:6e:1a:f2:9e:4d:e8:
44:1a:ed:54:7a:e6:d2:fa:93:30:f9:d9:db:53:98:
69:16:6b:fb:78:8e:f6:71:c7:7d:b2:60:b1:73:77:
b6:8a:55:07:5c:d2:e2:24:a3:b1:03:e1:ee:27:91:
34:07:95:6c:2e:bc:86:35:b3:c4:b8:f5:ee:1d:f7:
98:1a:e9:a9:35:69:e3:ff:b8:b6:e7:07:b5:49:47:
f1:8c:85:85:34:12:bc:4e:0a:7f:0d:dd:9e:58:6a:
94:e6:99:e1:89:8c:15:d5:0b:3b:6e:82:08:0e:a8:
a6:ba:ff:b3:d7:a7:74:aa:34:e3:9e:f3:d5:48:9b:
e9:43:1c:bf:a2:e8:c0:90:ab:44:e5:fd:42:7e:9d:
2e:d7:33:03:dc:67:16:bd:db:1d:8e:8b:e6:4b:2f:
5e:2c:7f:9d:4f:c5:01:47:2a:2a:8f:f1:73:25:b8:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:07:FC:53:DD:84:3D:C2:FF:CE:BF:68:BF:D7:C8:72:EC:1F:4B:A9
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/EQf8U92EPcL_zr9ov9fIcuwfS6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.196.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:f9:33:b9:eb:38:da:44:e8:c0:c2:97:5c:8a:b0:86:52:e3:
c9:2b:6c:dd:2b:6d:e0:e9:92:04:8d:61:8e:3d:d9:d7:73:1a:
61:b8:eb:00:10:8e:92:30:44:93:cd:39:2f:3b:7b:96:36:fe:
de:ce:23:fa:aa:be:40:b2:f2:c2:f2:27:a9:61:ed:15:d2:7e:
15:c1:b8:ea:65:e4:76:07:cf:c6:c3:93:92:3a:92:b9:5b:78:
d8:f1:f6:12:0d:c1:b0:ef:3c:3a:e1:13:41:a3:f1:43:ce:07:
3e:e6:fe:95:91:93:ce:0a:93:17:fc:10:fa:bd:4c:08:80:ea:
c4:a3:86:f1:23:87:21:16:22:36:2e:8f:a0:9d:e0:61:5d:3a:
04:7d:44:10:07:77:81:40:f8:8f:ad:05:64:42:dc:2d:91:32:
83:99:33:55:48:83:70:13:11:68:d4:ea:28:be:f4:2a:db:a5:
2e:16:7d:c9:9a:92:ff:5f:f9:f1:8b:ef:a5:f6:0c:17:76:49:
d2:d9:a4:cf:5d:cd:29:f7:e1:63:19:2e:ff:db:9d:25:0c:90:
59:65:5e:0e:18:6f:eb:51:d0:91:51:06:d1:f8:4e:46:6f:42:
93:73:e5:2a:8b:a1:32:09:a6:01:6f:e9:d8:4d:58:17:91:74:
91:3a:dc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:01:41 2026 by rpki-client