Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/EFOBGczogc8g-TM7Kvgc-Z8c9aA.roa
File: EFOBGczogc8g-TM7Kvgc-Z8c9aA.roa (raw, json)
Hash identifier: 19dS/Qb+X/pkl7rumy1c3jUmZ5xXdNgYiO2zcKCj7Ec=
Subject key identifier: 10:53:81:19:CC:E8:81:CF:20:F9:33:3B:2A:F8:1C:F9:9F:1C:F5:A0
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019EA69B83FF30E1F903674B3750B850DD68
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/EFOBGczogc8g-TM7Kvgc-Z8c9aA.roa
Signing time: Mon 08 Jun 2026 09:41:10 +0000
ROA not before: Mon 08 Jun 2026 09:41:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 109.122.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:9b:83:ff:30:e1:f9:03:67:4b:37:50:b8:50:dd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jun 8 09:41:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10538119cce881cf20f9333b2af81cf99f1cf5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:50:93:9f:6e:20:7f:78:23:c3:bd:89:5a:
3c:4f:87:7d:6b:07:03:11:c0:52:5f:b9:d2:1b:91:
16:14:06:fe:39:3c:7e:59:5b:d2:e4:fe:be:03:dd:
33:af:bd:3e:41:97:7c:9e:4e:78:e1:96:f1:fa:2c:
6f:e9:93:3f:f6:1b:3f:8a:d0:58:29:73:f1:c5:53:
38:44:8b:d7:dc:f4:06:20:38:9a:9c:b4:58:5c:81:
56:6b:4b:ba:df:88:e2:77:04:f3:a1:04:bb:c1:20:
9e:87:56:26:44:1c:11:58:6a:23:90:1b:e0:a5:b7:
28:d1:57:ef:82:a4:89:2c:8d:8b:e4:e8:73:9b:37:
6a:8f:f0:0f:1a:cb:42:08:e6:16:1d:d6:33:fd:9f:
45:8c:2f:3c:6e:6f:3f:59:41:06:07:85:cf:4a:02:
f9:bf:73:e4:5c:f4:15:8d:58:52:aa:16:21:0b:46:
eb:33:33:b6:ef:58:0a:ed:ea:ab:10:fb:22:a7:ad:
0d:6a:70:a9:12:cb:44:eb:a2:91:9b:ec:83:7e:6a:
07:7b:e3:83:1c:70:c9:83:9a:4c:48:40:8b:59:a2:
9b:50:bf:f5:28:b7:e7:54:8c:91:2a:04:70:94:02:
d5:3c:14:b7:77:b8:f2:dd:26:23:a7:02:7c:d8:bb:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:53:81:19:CC:E8:81:CF:20:F9:33:3B:2A:F8:1C:F9:9F:1C:F5:A0
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/EFOBGczogc8g-TM7Kvgc-Z8c9aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:f8:6b:97:c6:35:b2:8b:83:78:b0:98:3e:7f:ce:93:d9:a8:
15:2e:9d:29:79:46:42:c2:1d:6b:e9:7e:28:a2:2c:5b:70:f9:
2c:03:1a:b6:3e:26:24:18:3a:37:a7:06:24:90:ff:db:c2:1f:
19:d6:58:07:a5:28:ff:ff:74:a7:76:e6:19:73:7d:fe:08:43:
76:84:53:0d:f5:fe:5c:19:0a:25:27:b4:2a:44:91:de:72:ca:
9a:6f:25:1f:92:ee:af:64:a1:8a:3e:52:56:6d:0d:9d:19:4c:
a1:67:c6:7b:5e:ff:80:d5:43:ff:83:d6:e5:60:75:01:e2:73:
73:5d:94:7b:9f:49:a6:39:bc:7c:73:ef:ce:07:0c:f8:e4:ac:
a6:d4:f2:87:8b:bf:82:28:a6:e5:52:91:c3:23:b2:0f:93:4a:
f7:d8:3b:1a:b1:59:04:3d:21:0a:f8:cb:a2:3d:4e:73:30:70:
d7:0c:12:e6:35:d1:14:fd:28:70:49:3c:ea:29:3f:16:c9:c0:
45:57:1c:04:8b:a4:a2:1b:45:6f:79:d2:1c:51:6b:e4:87:25:
4d:8f:d9:65:7a:6e:d5:f6:a6:d0:35:1c:a8:45:e5:1b:7f:b9:
40:24:25:54:f0:b0:11:15:09:a1:e0:0a:de:88:54:85:c7:e7:
fe:ea:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:26 2026 by rpki-client