Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EPOhWTjQpLzPcBO7BYqjeZiYFJw.roa
File: EPOhWTjQpLzPcBO7BYqjeZiYFJw.roa (raw, json)
Hash identifier: bc4Sd0aCrqJSOCs197z9kn5B8gNucSjgK118PHdGWsM=
Subject key identifier: 10:F3:A1:59:38:D0:A4:BC:CF:70:13:BB:05:8A:A3:79:98:98:14:9C
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01A0D816E7BFE69F8F0A7BC5BFE506219532
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EPOhWTjQpLzPcBO7BYqjeZiYFJw.roa
Signing time: Fri 25 Sep 2026 10:22:54 +0000
ROA not before: Fri 25 Sep 2026 10:22:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 91.205.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:16:e7:bf:e6:9f:8f:0a:7b:c5:bf:e5:06:21:95:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 25 10:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10f3a15938d0a4bccf7013bb058aa3799898149c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:a3:44:a1:6c:b2:8b:64:76:03:cc:b6:0b:
1c:f2:1c:f0:32:75:ea:ca:8f:9e:74:32:40:87:83:
3e:57:a5:d4:8b:ed:83:9a:de:a3:97:9a:6a:2b:37:
ee:a7:ab:82:d2:df:a9:a5:17:7a:b5:58:c8:0b:17:
12:98:3d:ff:09:ff:38:dc:9c:7a:f2:fa:15:51:25:
4b:f2:02:a5:10:36:bc:d9:2b:17:50:6d:7d:e6:3c:
a6:64:61:04:71:3a:70:57:d2:55:d2:81:ae:4c:e4:
ce:e4:f4:7d:6d:02:97:b4:19:10:5d:40:09:75:76:
90:4f:35:0b:c1:e6:e0:64:24:fa:4d:02:4f:39:c6:
fe:b5:ba:3d:74:78:00:a4:08:a8:94:69:e3:6c:91:
98:3f:ef:0f:fe:77:aa:dd:35:61:56:db:bf:4e:32:
c7:86:74:b9:db:58:47:fd:7c:d2:3f:97:5b:3c:b0:
49:b2:97:70:1f:09:fb:af:99:2c:19:2c:0f:5a:b8:
11:65:ca:40:fa:7f:59:5b:35:bf:a7:d4:67:33:7a:
d4:8a:3f:18:f0:ec:35:93:23:67:f0:aa:f6:b7:e9:
5f:be:0b:fe:fd:f9:d5:ef:48:de:76:bc:00:47:bf:
e6:4f:2f:ef:00:16:74:45:93:5a:b4:4d:bd:e0:ed:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F3:A1:59:38:D0:A4:BC:CF:70:13:BB:05:8A:A3:79:98:98:14:9C
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EPOhWTjQpLzPcBO7BYqjeZiYFJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.228.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:85:fd:68:81:34:a9:b5:e9:cb:97:43:ff:5f:85:e5:24:48:
0b:9f:2d:1c:f4:68:86:db:c6:7c:5e:89:e7:1a:d7:93:fe:9f:
66:f9:23:59:6d:e2:26:0c:62:73:80:9e:01:8f:83:0d:0e:2e:
e9:00:74:a9:26:ed:1a:e4:46:1f:7b:85:65:49:ed:78:f8:a7:
a7:ed:75:62:a0:67:b3:9b:24:96:57:f8:67:e1:5c:f0:72:3e:
de:e5:3a:f3:68:cb:22:cd:c8:e2:c1:57:4e:d8:81:33:88:9c:
ee:f4:b4:83:b7:39:2b:cb:65:c1:72:c9:65:d9:39:55:1f:c2:
7d:1e:38:d0:10:ec:d7:67:9b:4b:8e:5b:3f:5b:46:38:4e:5b:
e1:08:d4:40:8e:46:8b:94:bd:8d:be:2d:79:81:47:55:03:51:
2c:a4:10:db:41:ea:23:d9:6f:8a:7c:ea:78:50:20:b1:d8:9f:
64:4b:7a:3f:ff:49:95:66:48:3f:ee:9e:29:d2:9b:53:d6:4b:
5e:e6:3f:c2:0f:43:73:f3:26:ed:a6:04:e7:3f:82:54:56:d3:
f9:87:ae:17:95:14:c7:ff:a0:77:46:41:8a:0f:fb:d2:93:d0:
04:0b:10:75:9a:d1:9d:5b:7d:48:57:ee:18:81:d1:bd:fe:3a:
9d:51:4e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:04:12 2026 by rpki-client