Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ECR02Lvma0Akqx8_eko_IQ3lvNk.roa
File: ECR02Lvma0Akqx8_eko_IQ3lvNk.roa (raw, json)
Hash identifier: WYbPrDTPpGPZPcdOFkDj0vuliDTMuVhh8dLndPv7htw=
Subject key identifier: 10:24:74:D8:BB:E6:6B:40:24:AB:1F:3F:7A:4A:3F:21:0D:E5:BC:D9
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019F237340DBA6FA1EB38B7D484BE2CCF8D0
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ECR02Lvma0Akqx8_eko_IQ3lvNk.roa
Signing time: Thu 02 Jul 2026 15:29:43 +0000
ROA not before: Thu 02 Jul 2026 15:29:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57027
IP address blocks: 5.56.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:73:40:db:a6:fa:1e:b3:8b:7d:48:4b:e2:cc:f8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jul 2 15:29:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=102474d8bbe66b4024ab1f3f7a4a3f210de5bcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:cf:c1:1a:7a:ed:a1:67:05:dd:3d:56:81:
a0:57:26:a7:11:6f:e0:8d:6c:fa:f3:51:11:78:64:
6c:4d:3d:8a:e6:d4:5e:80:d7:4a:21:38:fe:83:8f:
7f:36:30:64:62:aa:68:28:be:57:24:90:9f:5c:d5:
25:ae:cc:ff:fa:b8:c5:f1:21:b4:d8:65:aa:db:54:
ce:f4:94:30:fa:93:40:74:69:44:cb:24:b0:10:9f:
8d:e4:7c:ee:98:2f:8a:ad:b7:46:6f:81:bf:2c:a0:
72:df:98:73:20:28:27:1d:00:52:46:fe:c8:bf:ad:
a5:1a:8e:f0:d4:5e:b6:34:36:53:4c:be:10:9e:a4:
3b:86:0a:68:d5:aa:f5:f3:9d:d3:fe:a5:30:87:f6:
f5:e5:5e:8e:71:71:84:8b:fd:94:4b:12:65:16:5c:
eb:97:7d:8f:24:25:39:02:f1:d8:42:62:cb:eb:79:
d5:5d:f3:e3:03:4c:c9:5f:8a:05:be:98:e7:6e:fe:
fa:45:66:6f:f2:c9:6d:6a:8e:29:2b:ef:08:fb:06:
b9:f7:9f:6f:24:02:19:cf:93:4e:19:16:67:bd:e1:
4d:37:e7:79:91:de:84:05:7f:b5:a1:43:c0:95:8c:
c8:21:bd:9c:a9:e1:b9:ba:67:a4:41:65:54:60:72:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:24:74:D8:BB:E6:6B:40:24:AB:1F:3F:7A:4A:3F:21:0D:E5:BC:D9
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ECR02Lvma0Akqx8_eko_IQ3lvNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.133.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d6:e6:28:dd:70:2f:33:47:2e:6e:a6:ee:44:4c:06:ff:ca:
16:c5:79:5e:16:f7:e9:1b:8a:73:11:dd:c0:0f:c7:2b:9c:f8:
d1:f4:9f:ec:15:34:71:c0:d5:2b:6b:3e:90:de:e2:4d:eb:6b:
59:88:1c:95:d0:cb:11:a9:20:dc:6d:d7:b1:64:d5:87:af:35:
0b:8e:9e:de:fc:d0:f6:71:3e:62:0c:25:26:20:e1:c3:30:b9:
f1:62:92:ed:6d:bc:8d:d9:37:1b:d8:56:0a:7b:0b:8d:e5:57:
37:24:97:ac:96:e3:3c:54:57:9c:59:13:fb:80:94:56:e3:94:
fc:41:85:4a:3e:eb:49:aa:b7:10:db:4d:66:7f:f7:b8:37:97:
b6:f5:1a:78:11:34:1b:f7:60:ef:ff:59:9c:57:2a:55:0a:a9:
10:bf:69:f3:8c:5c:c4:04:08:a0:7f:34:5c:35:82:06:dd:ee:
97:d0:b1:28:fa:0d:64:bc:bd:dd:ee:2f:1a:7f:56:61:c7:ae:
cc:a5:f4:f2:0d:82:6f:26:7a:78:10:06:d5:71:87:86:5b:ff:
a5:ad:ce:41:be:66:01:4b:88:6f:dc:f5:89:1b:e8:52:21:6d:
23:bd:81:2c:d1:be:cc:06:7c:a7:c6:85:5d:ca:c9:16:7f:4e:
ef:ef:d7:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jc0Dbpvoes4t9SEvizPjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1
NTEwNTUwHhcNMjYwNzAyMTUyOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDI0NzRkOGJiZTY2YjQwMjRhYjFmM2Y3YTRhM2YyMTBkZTViY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxarPwRp67aFnBd09VoGgVyanEW/g
jWz681EReGRsTT2K5tRegNdKITj+g49/NjBkYqpoKL5XJJCfXNUlrsz/+rjF8SG0
2GWq21TO9JQw+pNAdGlEyySwEJ+N5HzumC+KrbdGb4G/LKBy35hzICgnHQBSRv7I
v62lGo7w1F62NDZTTL4QnqQ7hgpo1ar1853T/qUwh/b15V6OcXGEi/2USxJlFlzr
l32PJCU5AvHYQmLL63nVXfPjA0zJX4oFvpjnbv76RWZv8sltao4pK+8I+wa5959v
JAIZz5NOGRZnveFNN+d5kd6EBX+1oUPAlYzIIb2cqeG5umekQWVUYHIhrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBAkdNi75mtAJKsfP3pKPyEN5bzZMB8GA1UdIwQY
MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct
YjUzZTMwZTE0MTJhLzEvRUNSMDJMdm1hMEFrcXg4X2Vrb19JUTNsdk5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh
LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTiFMA0G
CSqGSIb3DQEBCwUAA4IBAQBn1uYo3XAvM0cubqbuREwG/8oWxXleFvfpG4pzEd3A
D8crnPjR9J/sFTRxwNUraz6Q3uJN62tZiByV0MsRqSDcbdexZNWHrzULjp7e/ND2
cT5iDCUmIOHDMLnxYpLtbbyN2Tcb2FYKewuN5Vc3JJesluM8VFecWRP7gJRW45T8
QYVKPutJqrcQ201mf/e4N5e29Rp4ETQb92Dv/1mcVypVCqkQv2nzjFzEBAigfzRc
NYIG3e6X0LEo+g1kvL3d7i8af1Zhx67MpfTyDYJvJnp4EAbVcYeGW/+lrc5BvmYB
S4hv3PWJG+hSIW0jvYEs0b7MBnynxoVdyskWf07v79dO
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:03 2026 by rpki-client