Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Eu0yeBNKe9kvX2Q7OroqWApsXAg.roa
File: Eu0yeBNKe9kvX2Q7OroqWApsXAg.roa (raw, json)
Hash identifier: DycZzKRjASdGPWCvEe7wIXygt7lohrHYcbmcoZSbRMw=
Subject key identifier: 12:ED:32:78:13:4A:7B:D9:2F:5F:64:3B:3A:BA:2A:58:0A:6C:5C:08
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019C8F508E208B47D0CAE5A7E796DFC26B38
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Eu0yeBNKe9kvX2Q7OroqWApsXAg.roa
Signing time: Tue 24 Feb 2026 11:02:26 +0000
ROA not before: Tue 24 Feb 2026 11:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209057
IP address blocks: 2a0d:d940:90aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:50:8e:20:8b:47:d0:ca:e5:a7:e7:96:df:c2:6b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Feb 24 11:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12ed3278134a7bd92f5f643b3aba2a580a6c5c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:04:74:f7:37:25:4f:ce:e6:23:7f:97:57:26:
46:be:51:a2:d2:54:ad:e6:e4:0e:08:f2:c2:fa:62:
ec:2b:1a:0c:9d:b6:9e:ae:fd:88:3e:2d:f5:f6:23:
01:f4:6e:b9:7f:0e:a9:ff:b2:d4:dc:67:6c:54:50:
30:d2:24:32:ba:3e:46:33:9a:d3:b0:a0:d1:0d:bb:
4c:1a:0b:b9:36:25:a8:17:b4:d4:41:09:fa:37:45:
dc:f6:e7:43:45:26:5e:85:93:4b:a7:67:e2:f6:e6:
37:db:bb:4c:cc:7e:21:75:34:85:0a:df:6c:d3:3e:
5a:9d:3e:f2:1b:f5:0d:07:e7:d6:83:ba:5f:78:80:
5c:24:3e:cb:0a:f9:60:55:31:ea:f2:40:27:2d:30:
4a:07:40:ef:fb:fb:dc:df:44:39:5c:89:48:ae:c0:
a3:66:9b:fe:12:bd:13:b3:28:6e:e5:5b:f5:77:65:
d5:7c:34:eb:d7:87:c0:23:be:8d:e2:09:bd:74:ac:
4b:a5:00:3a:a8:af:41:97:f9:f5:eb:d0:b2:00:dc:
22:89:7b:61:aa:b6:96:fe:0b:df:67:54:9d:db:b2:
a7:21:88:fa:1e:a0:42:9d:45:7f:c7:be:9e:8c:3c:
a4:23:f7:ad:88:af:64:0c:06:e4:b2:f7:b3:99:ef:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:ED:32:78:13:4A:7B:D9:2F:5F:64:3B:3A:BA:2A:58:0A:6C:5C:08
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Eu0yeBNKe9kvX2Q7OroqWApsXAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:90aa::/48
Signature Algorithm: sha256WithRSAEncryption
22:63:88:a4:61:11:20:c7:2e:f1:e5:47:11:9f:19:c3:d8:f1:
f9:44:22:8f:5d:b2:97:11:8d:13:4c:8a:cf:cc:68:52:bd:41:
aa:35:5d:8f:1d:b9:de:9a:aa:21:88:54:9d:41:df:65:cb:2d:
8f:d4:3d:45:ee:12:48:15:73:65:80:f9:0f:07:43:92:f6:af:
2b:02:c6:1a:5d:88:23:57:f3:c6:ee:17:5e:6f:95:a9:c8:e2:
6c:4e:bc:61:57:6e:d4:3e:b4:e5:58:4e:61:1a:84:2d:d0:11:
55:5d:21:f7:be:76:06:36:ef:5c:75:40:ae:16:95:e8:26:ec:
9c:43:fd:db:9b:39:76:1a:ac:29:93:53:7d:4e:24:aa:df:40:
67:3c:e3:f4:49:1e:7d:76:87:c3:8b:55:58:ed:f0:1b:14:35:
bb:30:6f:9b:7f:65:06:c8:f3:63:ef:73:59:be:f5:bb:52:5c:
a9:80:03:46:ab:5e:db:45:8a:bb:4f:aa:d5:be:dc:6c:7c:d1:
00:ca:10:71:45:51:d5:c2:14:f6:0e:0a:6c:9f:b0:66:10:13:
ee:8e:5c:bc:87:d2:cb:eb:94:57:ad:25:2d:7c:17:ac:48:e7:
7d:75:c9:c9:78:b8:ea:b2:c4:9f:d7:2c:a0:04:39:38:72:75:
e8:2c:cf:df
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZyPUI4gi0fQyuWn55bfwms4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwMjI0MTEwMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmVkMzI3ODEzNGE3YmQ5MmY1ZjY0M2IzYWJhMmE1ODBhNmM1YzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQR09zclT87mI3+XVyZGvlGi0lSt
5uQOCPLC+mLsKxoMnbaerv2IPi319iMB9G65fw6p/7LU3GdsVFAw0iQyuj5GM5rT
sKDRDbtMGgu5NiWoF7TUQQn6N0Xc9udDRSZehZNLp2fi9uY327tMzH4hdTSFCt9s
0z5anT7yG/UNB+fWg7pfeIBcJD7LCvlgVTHq8kAnLTBKB0Dv+/vc30Q5XIlIrsCj
Zpv+Er0Tsyhu5Vv1d2XVfDTr14fAI76N4gm9dKxLpQA6qK9Bl/n169CyANwiiXth
qraW/gvfZ1Sd27KnIYj6HqBCnUV/x76ejDykI/etiK9kDAbksvezme/RLwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBLtMngTSnvZL19kOzq6KlgKbFwIMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvRXUweWVCTktlOWt2WDJRN09yb3FXQXBzWEFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg3ZQJCq
MA0GCSqGSIb3DQEBCwUAA4IBAQAiY4ikYREgxy7x5UcRnxnD2PH5RCKPXbKXEY0T
TIrPzGhSvUGqNV2PHbnemqohiFSdQd9lyy2P1D1F7hJIFXNlgPkPB0OS9q8rAsYa
XYgjV/PG7hdeb5WpyOJsTrxhV27UPrTlWE5hGoQt0BFVXSH3vnYGNu9cdUCuFpXo
JuycQ/3bmzl2Gqwpk1N9TiSq30BnPOP0SR59dofDi1VY7fAbFDW7MG+bf2UGyPNj
73NZvvW7UlypgANGq17bRYq7T6rVvtxsfNEAyhBxRVHVwhT2Dgpsn7BmEBPujly8
h9LL65RXrSUtfBesSOd9dcnJeLjqssSf1yygBDk4cnXoLM/f
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:56:40 2026 by rpki-client