Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/Ebg0ux5rcibv_t_FMLVeGO1p-6s.roa
File: Ebg0ux5rcibv_t_FMLVeGO1p-6s.roa (raw, json)
Hash identifier: /4FrUXbz6Hz/uPMenmCysdLSPs/BOSlhWYQVSb8RAn0=
Subject key identifier: 11:B8:34:BB:1E:6B:72:26:EF:FE:DF:C5:30:B5:5E:18:ED:69:FB:AB
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 019F8070590910E085B7DABBCE5AD0A37B45
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/Ebg0ux5rcibv_t_FMLVeGO1p-6s.roa
Signing time: Mon 20 Jul 2026 16:51:14 +0000
ROA not before: Mon 20 Jul 2026 16:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206938
IP address blocks: 2a03:2107:2::/48 maxlen: 48
2a03:2107:3::/48 maxlen: 48
2a03:2107:4::/48 maxlen: 48
2a03:2107:5::/48 maxlen: 48
2a03:2107:6::/48 maxlen: 48
2a03:2107:7::/48 maxlen: 48
2a03:2107:8::/48 maxlen: 48
2a03:2107:9::/48 maxlen: 48
2a03:2107:a::/48 maxlen: 48
2a03:2107:b::/48 maxlen: 48
2a03:2107:c::/48 maxlen: 48
2a03:2107:d::/48 maxlen: 48
2a03:2107:e::/48 maxlen: 48
2a03:2107:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:70:59:09:10:e0:85:b7:da:bb:ce:5a:d0:a3:7b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jul 20 16:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11b834bb1e6b7226effedfc530b55e18ed69fbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:c0:12:a0:d9:e3:33:d8:c2:d7:44:ec:db:
e1:ae:43:0e:e0:7b:5a:6b:80:3d:03:46:d0:13:48:
3d:7e:b6:4e:99:75:c7:d3:e3:a6:5d:1b:31:00:fc:
45:58:a3:0b:e0:ea:7d:c9:92:06:c5:28:88:b3:9f:
1c:c8:2a:b2:da:6b:d1:4f:9b:c3:65:3d:64:c5:74:
f2:a6:e8:92:65:fc:19:f5:a2:75:23:26:36:bc:e0:
e3:6b:7c:85:5f:10:6e:97:68:60:1b:98:c6:9a:af:
1d:95:2c:25:14:60:72:6d:39:f6:68:35:75:d0:c6:
2f:f5:85:30:99:86:d6:f1:8c:64:75:f6:4e:21:76:
da:07:b5:59:2a:59:3f:6c:a8:bf:34:c0:ef:ab:90:
eb:75:dd:68:84:79:db:da:7c:d4:5c:40:fa:e0:fc:
82:47:98:28:42:6d:d6:2b:4c:b1:a4:d2:fe:f9:5e:
91:d3:1a:28:a4:4a:24:a6:34:40:5d:ab:33:68:53:
89:57:f9:87:6c:47:18:d3:6c:cb:a7:ab:36:55:e4:
2a:0f:57:10:7a:b1:c4:d8:0b:8f:4f:8e:46:d6:5a:
5f:48:05:1d:bf:48:c2:e5:cd:bc:d4:10:76:82:79:
08:7c:de:11:ce:fa:9e:a9:4f:91:f6:1d:2d:9c:20:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B8:34:BB:1E:6B:72:26:EF:FE:DF:C5:30:B5:5E:18:ED:69:FB:AB
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/Ebg0ux5rcibv_t_FMLVeGO1p-6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2107:2::-2a03:2107:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
44:0f:41:d2:a2:b4:a0:04:51:44:ba:8f:84:35:28:32:f3:4d:
e0:b1:ab:c5:1f:e3:05:08:9c:e4:0c:06:b4:63:6e:31:37:36:
53:1f:e6:27:ff:ac:c2:11:ef:21:0a:a5:f0:0b:ea:20:52:88:
d8:86:0d:5f:7a:3b:0b:a6:17:53:b1:04:22:96:01:57:fc:66:
d5:a9:c4:ff:ff:19:90:7b:de:88:97:de:4c:b2:71:a0:75:af:
3c:4b:7e:f6:e5:38:f3:95:a8:8b:b5:ff:32:59:e3:18:24:1c:
7a:6c:cf:87:df:66:1b:9c:af:57:c4:26:ef:db:0c:bc:27:93:
83:8c:eb:a5:69:44:ce:df:a8:c4:6b:cc:24:5d:fe:2e:7a:7c:
5b:fa:2d:c4:52:68:9c:93:b9:de:2e:80:97:1a:3b:59:b4:53:
0f:9c:be:e7:37:36:04:62:0e:27:8a:d7:49:33:55:b1:1f:68:
e8:8b:fd:9a:1b:1c:23:c8:8f:15:c8:67:1d:d2:4e:c7:d0:ab:
0d:77:03:27:51:6e:31:94:b5:fb:aa:4b:1e:20:9f:1c:02:ea:
1f:d2:f5:a0:80:ff:4b:72:44:21:bd:79:fb:2c:7b:56:19:c8:
a2:da:8e:70:a8:36:12:0e:f8:17:68:7c:38:ad:8e:1f:cd:b7:
69:9a:93:9d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ+AcFkJEOCFt9q7zlrQo3tFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky
MDVmM2MwHhcNMjYwNzIwMTY1MTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWI4MzRiYjFlNmI3MjI2ZWZmZWRmYzUzMGI1NWUxOGVkNjlmYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsXAEqDZ4zPYwtdE7NvhrkMO4Hta
a4A9A0bQE0g9frZOmXXH0+OmXRsxAPxFWKML4Op9yZIGxSiIs58cyCqy2mvRT5vD
ZT1kxXTypuiSZfwZ9aJ1IyY2vODja3yFXxBul2hgG5jGmq8dlSwlFGBybTn2aDV1
0MYv9YUwmYbW8YxkdfZOIXbaB7VZKlk/bKi/NMDvq5Drdd1ohHnb2nzUXED64PyC
R5goQm3WK0yxpNL++V6R0xoopEokpjRAXaszaFOJV/mHbEcY02zLp6s2VeQqD1cQ
erHE2AuPT45G1lpfSAUdv0jC5c281BB2gnkIfN4RzvqeqU+R9h0tnCDv5wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBG4NLsea3Im7/7fxTC1XhjtafurMB8GA1UdIwQY
MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt
ZWQzZTM4Zjk1NzdmLzEvRWJnMHV4NXJjaWJ2X3RfRk1MVmVHTzFwLTZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm
LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwEqAyEH
AAIDBwQqAyEHAAAwDQYJKoZIhvcNAQELBQADggEBAEQPQdKitKAEUUS6j4Q1KDLz
TeCxq8Uf4wUInOQMBrRjbjE3NlMf5if/rMIR7yEKpfAL6iBSiNiGDV96OwumF1Ox
BCKWAVf8ZtWpxP//GZB73oiX3kyycaB1rzxLfvblOPOVqIu1/zJZ4xgkHHpsz4ff
Zhucr1fEJu/bDLwnk4OM66VpRM7fqMRrzCRd/i56fFv6LcRSaJyTud4ugJcaO1m0
Uw+cvuc3NgRiDieK10kzVbEfaOiL/ZobHCPIjxXIZx3STsfQqw13AydRbjGUtfuq
Sx4gnxwC6h/S9aCA/0tyRCG9efsse1YZyKLajnCoNhIO+BdofDitjh/Nt2mak50=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:43:36 2026 by rpki-client