Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EIUzYL9dO2Qn-Fda_a97uXPCJjw.roa
File: EIUzYL9dO2Qn-Fda_a97uXPCJjw.roa (raw, json)
Hash identifier: q1Zg8Mx+jYiYSkeHCT9zu4rPgyehvfXn1s1rfXiiirg=
Subject key identifier: 10:85:33:60:BF:5D:3B:64:27:F8:57:5A:FD:AF:7B:B9:73:C2:26:3C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A16A20F36965B38DFF39E41A9B18D52AD7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EIUzYL9dO2Qn-Fda_a97uXPCJjw.roa
Signing time: Fri 23 Oct 2026 18:58:26 +0000
ROA not before: Fri 23 Oct 2026 18:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218421
IP address blocks: 5.230.79.0/24 maxlen: 24
185.47.142.0/24 maxlen: 24
2a02:2fc0:1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:20:f3:69:65:b3:8d:ff:39:e4:1a:9b:18:d5:2a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 23 18:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10853360bf5d3b6427f8575afdaf7bb973c2263c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:a3:0a:80:a3:7e:de:63:7a:7b:d1:bc:d5:
b6:07:89:24:74:ff:22:32:18:cf:cf:26:5f:17:99:
81:b5:71:63:56:3d:d9:6b:24:cd:8f:cf:f3:ce:67:
1b:c0:3b:31:25:07:ad:79:ba:a6:82:fa:86:9c:81:
4d:a8:df:ed:88:d2:57:5e:79:4c:fb:fd:36:d2:db:
1f:7f:0f:40:5a:65:66:c3:de:d6:26:66:c3:bc:10:
b4:ff:05:0c:f5:5c:88:fd:8e:d7:f2:33:d3:fa:b7:
5f:37:22:28:31:bb:7c:29:34:4c:53:f8:c6:f4:dd:
d0:a0:c4:4d:48:42:8a:f0:1c:1c:37:e0:75:54:c0:
53:ee:f0:de:45:b3:ec:96:0d:9e:0a:6c:0d:85:f7:
f2:d9:bc:a5:7d:ca:6d:cf:a7:44:7b:1d:53:5d:4a:
9b:39:64:e0:91:75:c8:77:8b:9c:95:aa:73:af:f3:
91:cc:3f:b5:1d:66:d7:97:a8:90:c6:3d:f6:a2:f5:
7d:c4:ec:de:20:d3:53:06:ee:ec:78:08:af:f7:a8:
c8:e7:cc:81:ca:a3:6d:33:eb:a6:7e:e8:0a:02:75:
f0:00:d1:f8:d6:a3:d8:5c:7b:60:5b:74:6f:53:96:
25:f3:2b:c7:5f:7b:fb:a3:e9:a3:81:6c:55:ad:94:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:85:33:60:BF:5D:3B:64:27:F8:57:5A:FD:AF:7B:B9:73:C2:26:3C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EIUzYL9dO2Qn-Fda_a97uXPCJjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.79.0/24
185.47.142.0/24
IPv6:
2a02:2fc0:1e::/48
Signature Algorithm: sha256WithRSAEncryption
7d:bd:a7:de:ed:d5:10:f1:84:5b:89:78:f5:08:e9:ad:b0:10:
f6:6b:fd:22:60:46:58:f0:a9:e0:72:7a:e4:98:ed:4c:3d:50:
aa:90:16:9d:b8:75:a2:47:51:6c:20:50:ec:03:5e:f3:3a:a0:
f1:f0:98:8c:68:11:09:89:4a:cc:c4:14:da:8a:20:e1:4d:c9:
58:83:f2:45:3d:ad:67:3b:09:0c:78:cc:4a:29:44:2e:d5:54:
79:4f:18:48:94:b0:fa:36:aa:72:fb:28:56:0f:1e:cb:2c:9c:
2c:07:06:6d:d9:a1:d8:ce:81:e2:1c:1b:40:00:36:63:46:f5:
da:d9:11:fd:bf:59:89:4e:87:aa:d3:a1:39:2f:c4:58:3f:a6:
06:84:f9:fd:51:fb:16:ca:44:82:59:73:d9:e6:8f:5a:fa:f9:
ed:c4:8b:a2:68:1e:d0:b6:21:bc:4b:1d:21:0b:98:af:b3:19:
c9:74:23:4c:c2:7a:b5:7c:f5:39:4d:36:27:e8:33:02:a8:37:
d6:f1:a8:ed:7e:77:75:f3:32:97:c7:90:d4:78:67:6a:78:bc:
18:aa:ea:bb:76:25:2f:19:52:6b:be:97:ee:5d:57:e3:ec:38:
ce:f1:ec:ff:7a:64:b7:bd:e2:b4:ba:bc:52:37:09:15:a6:36:
11:08:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:29:13 2026 by rpki-client