Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/eKAXqAvEwu9kq7SyHkYqvHt0Oi8.roa
File: eKAXqAvEwu9kq7SyHkYqvHt0Oi8.roa (raw, json)
Hash identifier: mpCj7cTtUR/bbE1krYhHjiD6aLtToq0OXOVqtAOoarI=
Subject key identifier: 78:A0:17:A8:0B:C4:C2:EF:64:AB:B4:B2:1E:46:2A:BC:7B:74:3A:2F
Certificate issuer: /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial: 01A05CC33629FD3FD2FF78EC46BC92F812EC
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/eKAXqAvEwu9kq7SyHkYqvHt0Oi8.roa
Signing time: Tue 01 Sep 2026 11:38:12 +0000
ROA not before: Tue 01 Sep 2026 11:38:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50231
IP address blocks: 80.65.212.0/22 maxlen: 24
81.30.136.0/23 maxlen: 23
81.30.140.0/22 maxlen: 22
89.200.160.0/21 maxlen: 21
91.123.208.0/20 maxlen: 20
91.205.244.0/22 maxlen: 22
91.233.69.0/24 maxlen: 24
91.233.70.0/23 maxlen: 23
91.233.72.0/22 maxlen: 22
94.232.32.0/21 maxlen: 21
109.95.232.0/21 maxlen: 21
109.196.48.0/20 maxlen: 20
193.17.54.0/24 maxlen: 24
193.27.210.0/23 maxlen: 23
193.34.220.0/22 maxlen: 22
193.150.42.0/23 maxlen: 23
193.150.44.0/22 maxlen: 22
195.14.116.0/23 maxlen: 23
195.189.40.0/22 maxlen: 22
213.5.136.0/21 maxlen: 21
2a0d:1d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:c3:36:29:fd:3f:d2:ff:78:ec:46:bc:92:f8:12:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Validity
Not Before: Sep 1 11:38:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78a017a80bc4c2ef64abb4b21e462abc7b743a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bd:fd:ad:6c:b6:e2:92:3e:e2:fa:45:43:32:
c3:f8:e9:b8:de:f3:3b:01:01:7a:f5:3e:65:d2:6c:
0c:ca:25:9d:7e:0d:f6:05:46:fd:1c:c2:30:21:78:
69:fa:c6:a5:a7:63:87:36:0d:b0:81:2e:60:7f:4d:
c3:73:9e:d3:0e:59:cb:9c:f3:9f:2e:08:4a:26:73:
37:71:56:43:a1:0a:40:4b:21:b6:71:ac:7e:29:04:
30:18:28:84:a5:2e:2c:2a:26:04:e3:c8:e4:53:0b:
6e:2e:0c:45:10:66:db:41:e2:f1:71:ee:84:c9:4c:
73:3f:41:a1:39:e3:91:ef:51:8a:a0:d4:3f:7d:db:
b8:07:94:e3:3c:5b:11:2a:37:8f:6e:65:5b:fd:45:
a0:f8:aa:61:76:12:14:53:22:27:f8:3e:3b:58:36:
d2:69:20:cc:d5:5f:fd:db:42:4a:7d:09:1b:14:e1:
7a:17:8b:73:43:13:56:1c:7d:b2:27:9e:fb:35:a2:
0b:79:16:51:a7:6f:2c:c9:27:5a:06:5b:37:4f:f1:
23:a2:8d:5b:ad:be:f8:d8:75:9e:2d:3e:45:39:e7:
26:0b:00:12:63:d5:e2:0e:fb:1d:fe:5b:14:4c:2d:
3f:0a:99:e9:20:65:e4:ad:80:d6:f6:8b:b3:d2:90:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A0:17:A8:0B:C4:C2:EF:64:AB:B4:B2:1E:46:2A:BC:7B:74:3A:2F
X509v3 Authority Key Identifier:
keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/eKAXqAvEwu9kq7SyHkYqvHt0Oi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.212.0/22
81.30.136.0/23
81.30.140.0/22
89.200.160.0/21
91.123.208.0/20
91.205.244.0/22
91.233.69.0-91.233.75.255
94.232.32.0/21
109.95.232.0/21
109.196.48.0/20
193.17.54.0/24
193.27.210.0/23
193.34.220.0/22
193.150.42.0-193.150.47.255
195.14.116.0/23
195.189.40.0/22
213.5.136.0/21
IPv6:
2a0d:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
dc:33:2a:18:3e:4f:5f:12:8c:db:2a:c6:17:dd:d6:ed:7c:be:
46:16:a5:97:17:7c:eb:f0:e4:ad:37:cc:f5:3b:3a:18:77:ee:
de:9b:c9:f0:f0:d7:57:ac:ac:3d:81:a9:20:d0:51:16:6c:89:
8c:73:da:ac:2e:41:7b:72:04:8c:ba:c2:c9:8a:62:dd:f3:36:
ac:eb:f1:2c:9c:73:ce:0c:4e:75:96:ba:a2:79:d9:ef:8b:81:
f8:97:38:86:2a:1a:20:1a:ea:7a:1f:fc:b4:3b:b8:10:05:15:
d2:46:d0:f2:82:c8:38:db:34:e5:1d:8c:ed:76:5f:04:b8:e9:
af:3e:60:9d:5d:59:30:7c:19:de:ef:ef:05:13:b9:8b:f4:35:
c6:eb:16:73:f1:44:ac:96:48:4b:fa:17:1e:11:0a:bd:0d:62:
b0:2b:8e:48:75:16:f9:d7:91:c5:78:56:90:a6:21:da:b7:6b:
0c:3c:39:00:27:b7:ad:cc:6a:3f:b8:9d:f2:36:af:8e:c5:20:
ac:2b:fb:39:ee:ba:c1:f0:9a:4e:4e:b0:92:46:66:af:fe:29:
87:d3:10:23:d5:87:74:44:43:5b:e9:cd:a5:82:ca:66:2c:cc:
62:d4:24:6a:c7:e9:4b:dc:7c:42:aa:57:2c:32:e6:af:99:38:
85:6a:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:55:24 2026 by rpki-client