Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/eq_DMYPwsIw93qds04ZGjJJH5B4.roa
File: eq_DMYPwsIw93qds04ZGjJJH5B4.roa (raw, json)
Hash identifier: AYOWm+f8xS5MEpFp7ruiXJOd+PYdgBsKeFC1t5gELcY=
Subject key identifier: 7A:AF:C3:31:83:F0:B0:8C:3D:DE:A7:6C:D3:86:46:8C:92:47:E4:1E
Certificate issuer: /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial: 019B775925202A0CFBA0CD688CAE46B1427B
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/eq_DMYPwsIw93qds04ZGjJJH5B4.roa
Signing time: Thu 01 Jan 2026 02:18:09 +0000
ROA not before: Thu 01 Jan 2026 02:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203838
IP address blocks: 2001:67c:2ecc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:25:20:2a:0c:fb:a0:cd:68:8c:ae:46:b1:42:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Validity
Not Before: Jan 1 02:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7aafc33183f0b08c3ddea76cd386468c9247e41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a2:9b:fb:e0:d9:07:55:c1:77:48:d8:f8:c0:
23:2c:7c:fa:3a:08:4e:dd:41:0d:84:96:03:56:6e:
22:87:4d:96:fc:8b:95:5c:f6:e3:4e:4e:42:04:58:
05:8d:52:58:fb:34:11:fa:3a:1a:49:80:cd:0b:9d:
04:ae:b8:0b:76:2a:89:34:9f:7f:cb:0e:48:b3:5a:
42:c4:1f:05:b8:36:84:e8:5d:ee:7b:3c:74:b0:d6:
52:48:b8:de:19:1d:de:2e:67:08:dd:0e:95:b5:f6:
b2:bc:d7:a9:6e:75:4e:02:d3:2b:fa:22:40:11:ec:
f5:42:d5:79:03:f2:50:29:86:07:90:7f:0c:01:18:
28:22:57:88:e2:b3:2a:14:d8:ab:06:1d:f3:5b:84:
47:32:1c:bc:cd:2c:30:3c:80:52:bf:4d:48:a2:29:
38:60:ac:35:62:d7:f4:9b:b1:3a:5a:57:21:15:b3:
0f:0b:d5:a3:37:9c:80:aa:b9:ea:5d:e0:4a:17:db:
e2:ff:0f:13:09:3d:63:83:4b:f1:88:26:4a:a7:13:
88:7d:53:be:bc:78:dc:65:fa:58:64:b9:d5:db:6f:
af:40:0b:c6:de:66:34:d0:f5:28:c4:38:1a:ea:8c:
ec:16:dd:6c:ad:f5:69:ce:bc:6f:0a:32:b9:84:11:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AF:C3:31:83:F0:B0:8C:3D:DE:A7:6C:D3:86:46:8C:92:47:E4:1E
X509v3 Authority Key Identifier:
keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/eq_DMYPwsIw93qds04ZGjJJH5B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ecc::/48
Signature Algorithm: sha256WithRSAEncryption
90:52:44:a9:b9:ca:8b:0f:79:0f:43:ff:53:af:af:7e:11:bf:
2d:f9:cb:4a:6c:19:2a:36:ec:4d:73:5e:f6:51:f0:28:b5:26:
e0:bf:cd:f0:20:2e:17:f3:cc:04:0b:4f:04:40:0a:f4:47:4b:
ce:d2:26:5f:41:6e:20:1c:ff:b9:90:2f:f7:e0:ea:e1:a0:c7:
a5:4f:4a:8b:69:66:1b:8e:c8:f9:fd:ae:49:b1:db:3b:f2:aa:
e3:bc:61:62:81:0d:93:d1:2c:58:39:c9:dd:a4:94:e5:d2:29:
37:a7:7a:8a:20:4d:4a:ad:12:f5:08:d1:e6:9d:6e:0a:f1:17:
f6:77:ac:8a:f3:92:a3:84:60:b1:fa:02:c1:1d:46:c6:d1:5f:
32:6a:92:79:32:8e:39:82:32:ec:c5:98:d9:37:1f:c2:01:35:
53:12:0c:96:79:15:91:4c:17:ec:ba:1f:da:7c:7c:90:82:39:
8c:ad:3e:e5:ac:29:37:2d:9f:cd:ad:56:45:93:2d:79:fa:ec:
9c:af:10:54:05:4c:a7:e5:c3:01:eb:c1:ec:25:c1:91:e4:c6:
a3:c0:76:24:21:44:01:c7:c2:10:a2:a3:ce:ed:90:44:ff:6a:
92:ef:b2:46:4d:20:43:51:ff:92:ff:1e:2d:02:d9:c4:4b:be:
23:54:66:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:34 2026 by rpki-client