Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/eR52hDpuVsi6QUQiLaAXfqKtwVM.roa
File: eR52hDpuVsi6QUQiLaAXfqKtwVM.roa (raw, json)
Hash identifier: yWSdxfRMpcePR8k+e61mD40tSzIqM/5uolLrHvFDrbI=
Subject key identifier: 79:1E:76:84:3A:6E:56:C8:BA:41:44:22:2D:A0:17:7E:A2:AD:C1:53
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019EB9FAF25B1DDC07AD1168B862BEE3463B
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/eR52hDpuVsi6QUQiLaAXfqKtwVM.roa
Signing time: Fri 12 Jun 2026 03:58:11 +0000
ROA not before: Fri 12 Jun 2026 03:58:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400618
IP address blocks: 64.178.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fa:f2:5b:1d:dc:07:ad:11:68:b8:62:be:e3:46:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Jun 12 03:58:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=791e76843a6e56c8ba4144222da0177ea2adc153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:72:92:59:f1:69:2a:e2:87:af:0d:de:e3:
a9:61:73:d5:67:14:ea:c7:09:ab:bb:78:e2:87:03:
90:ea:e4:8a:de:64:b4:51:fe:b4:b6:c3:b6:77:b1:
9d:83:ea:b5:8c:ef:74:c2:16:65:e1:2d:0f:47:35:
3f:42:37:06:43:35:29:8f:99:cc:8a:6d:0d:08:d1:
98:c2:94:8d:cc:c4:dc:c5:35:c6:5c:17:ba:e1:13:
23:19:ec:3a:8e:8e:55:89:ac:e7:89:e1:1d:b5:12:
94:ab:22:96:47:95:17:a2:7b:88:1e:aa:16:0f:ff:
02:b4:5c:ff:7b:aa:84:67:75:00:6c:f4:2c:02:6c:
e0:03:6f:88:b3:84:27:54:12:f4:c7:85:87:0c:af:
e4:a4:35:0e:ee:c7:1a:8d:bd:f5:18:ad:65:61:22:
4e:11:68:b7:e7:7a:52:7f:cb:65:2d:48:e2:c4:02:
c4:75:56:24:8f:8d:02:a0:a9:f9:f9:51:cb:93:49:
fa:50:40:d5:61:e0:4e:a8:31:34:a1:20:ae:43:ce:
88:48:3f:7a:e8:c7:df:d6:48:16:2d:f7:9a:2b:c2:
2b:78:3b:36:f1:39:8e:4c:d2:3a:ba:ac:d7:e2:98:
b8:da:ab:ac:73:e1:4a:48:88:25:1a:e5:97:cd:8f:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1E:76:84:3A:6E:56:C8:BA:41:44:22:2D:A0:17:7E:A2:AD:C1:53
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/eR52hDpuVsi6QUQiLaAXfqKtwVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.178.116.0/24
Signature Algorithm: sha256WithRSAEncryption
38:cf:a5:a8:4c:70:f2:a2:ce:3a:87:74:ac:84:28:8d:ad:9d:
7a:79:96:49:bf:e2:a9:9b:db:d7:52:23:b1:24:70:ac:64:98:
e4:65:88:7b:c7:2c:b2:dd:00:7c:7b:b2:d5:96:42:b8:b8:79:
8a:98:b4:e9:34:ed:b4:e4:27:58:33:db:4c:49:4f:16:60:d4:
0e:cd:06:1a:47:a7:1c:f8:ff:44:37:90:42:52:87:60:e4:11:
71:17:0b:6c:a5:6b:f5:1d:4a:d4:e7:da:ec:91:ab:2d:3b:b4:
5a:0b:5d:af:f6:07:13:b4:f1:f1:ca:8b:c1:7d:60:8f:f3:86:
77:d0:1e:6f:8d:13:a2:8b:96:8a:b0:de:55:35:07:34:39:46:
95:25:61:2c:c9:db:09:f3:02:15:bd:a6:07:ee:67:af:01:e5:
67:e0:d0:d1:94:99:a0:2d:f6:2c:d4:80:d0:a4:86:59:a2:87:
66:23:2f:1a:d1:64:40:c4:56:8b:2f:8d:4d:de:a0:20:af:49:
d1:96:0c:4c:13:32:68:a8:a6:84:46:92:b6:f9:5b:37:aa:03:
31:54:fe:2b:1b:0b:42:49:5a:6e:20:78:c1:0b:39:44:d2:5d:
08:ce:e8:ec:ab:e5:32:22:d0:71:1a:40:ed:80:ff:f3:60:0c:
fb:ce:61:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ65+vJbHdwHrRFouGK+40Y7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYWYwZDIwZjk4ZTNhMjA1NTBjOTk2ZDc0MjkyNjg4ZjBk
MjI3OWQwHhcNMjYwNjEyMDM1ODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTFlNzY4NDNhNmU1NmM4YmE0MTQ0MjIyZGEwMTc3ZWEyYWRjMTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5pyklnxaSrih68N3uOpYXPVZxTq
xwmru3jihwOQ6uSK3mS0Uf60tsO2d7Gdg+q1jO90whZl4S0PRzU/QjcGQzUpj5nM
im0NCNGYwpSNzMTcxTXGXBe64RMjGew6jo5ViaznieEdtRKUqyKWR5UXonuIHqoW
D/8CtFz/e6qEZ3UAbPQsAmzgA2+Is4QnVBL0x4WHDK/kpDUO7scajb31GK1lYSJO
EWi353pSf8tlLUjixALEdVYkj40CoKn5+VHLk0n6UEDVYeBOqDE0oSCuQ86ISD96
6Mff1kgWLfeaK8IreDs28TmOTNI6uqzX4pi42qusc+FKSIglGuWXzY+06QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHkedoQ6blbIukFEIi2gF36ircFTMB8GA1UdIwQY
MBaAFOuvDSD5jjogVQyZbXQpJojw0iedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGJlMDYtZWY1Zi00NDE4LWFmMWMt
MzIwOTM2Mjg4ZTk1LzEvZVI1MmhEcHVWc2k2UVVRaUxhQVhmcUt0d1ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kMGJlMDYtZWY1Zi00NDE4LWFmMWMtMzIwOTM2Mjg4ZTk1
LzEvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLJ0MA0G
CSqGSIb3DQEBCwUAA4IBAQA4z6WoTHDyos46h3SshCiNrZ16eZZJv+Kpm9vXUiOx
JHCsZJjkZYh7xyyy3QB8e7LVlkK4uHmKmLTpNO205CdYM9tMSU8WYNQOzQYaR6cc
+P9EN5BCUodg5BFxFwtspWv1HUrU59rskastO7RaC12v9gcTtPHxyovBfWCP84Z3
0B5vjROii5aKsN5VNQc0OUaVJWEsydsJ8wIVvaYH7mevAeVn4NDRlJmgLfYs1IDQ
pIZZoodmIy8a0WRAxFaLL41N3qAgr0nRlgxMEzJoqKaERpK2+Vs3qgMxVP4rGwtC
SVpuIHjBCzlE0l0Izujsq+UyItBxGkDtgP/zYAz7zmEK
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:21 2026 by rpki-client