Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EIlUot-POus86QxUL7xC47CEgA0.roa
File: EIlUot-POus86QxUL7xC47CEgA0.roa (raw, json)
Hash identifier: fGvFxEuJQZrOhf41jYSYuT3rCT2fv3AUTCj1Ro27Idg=
Subject key identifier: 10:89:54:A2:DF:8F:3A:EB:3C:E9:0C:54:2F:BC:42:E3:B0:84:80:0D
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 019FA95910EBAEB28A55498A66F28A7096FE
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EIlUot-POus86QxUL7xC47CEgA0.roa
Signing time: Tue 28 Jul 2026 15:30:14 +0000
ROA not before: Tue 28 Jul 2026 15:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49043
IP address blocks: 86.117.18.0/23 maxlen: 23
86.117.21.0/24 maxlen: 24
86.117.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:59:10:eb:ae:b2:8a:55:49:8a:66:f2:8a:70:96:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: Jul 28 15:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=108954a2df8f3aeb3ce90c542fbc42e3b084800d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:b7:24:e9:29:14:fb:f2:a1:87:3c:ae:aa:
9d:db:b7:9c:59:df:aa:36:62:d7:b9:5c:da:8c:07:
db:6c:8b:cc:9d:cb:4b:9e:ae:6e:c9:7c:51:77:6c:
4c:79:9b:7f:62:8d:36:42:e3:79:a2:42:0e:18:5b:
d7:a7:f9:2d:44:02:f9:6f:9e:7e:f5:4a:7f:f8:c3:
0c:cb:78:49:f2:ed:26:27:a0:43:47:86:0a:b1:23:
9f:e8:cf:26:05:be:a3:6e:20:56:cb:17:6e:a4:33:
de:b8:0f:f3:11:ef:d2:5a:9c:20:66:03:7a:17:75:
56:aa:14:9c:70:71:d3:0b:e2:66:0c:9b:25:98:b0:
a4:68:3a:e9:28:21:85:18:cc:e4:4a:8e:c5:82:c8:
c7:52:61:fb:2d:d0:4f:ea:a4:94:44:e5:d3:93:8d:
ca:76:25:ec:fb:87:70:e7:59:df:7c:1e:62:16:7b:
16:0b:45:77:63:02:06:2b:bf:22:b2:f2:eb:ed:cc:
cb:af:45:cb:b3:a5:fd:f3:73:6e:d8:89:8e:1c:26:
f0:24:82:ea:27:ce:39:d4:f4:77:17:aa:83:48:c8:
f2:55:80:0f:cf:83:8e:53:c0:67:b1:1a:80:9a:30:
cb:10:3f:93:bd:fd:3b:6c:4b:ec:79:91:b7:2a:67:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:54:A2:DF:8F:3A:EB:3C:E9:0C:54:2F:BC:42:E3:B0:84:80:0D
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EIlUot-POus86QxUL7xC47CEgA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.117.18.0/23
86.117.21.0-86.117.22.255
Signature Algorithm: sha256WithRSAEncryption
21:07:09:63:b5:f2:ed:87:70:ce:3f:45:7e:80:11:de:15:4e:
a7:83:53:12:ce:51:76:ee:ff:bf:c4:fa:9b:33:7b:09:85:da:
fd:d5:66:9c:d4:61:93:ad:54:61:95:9e:08:89:d1:de:4c:d2:
cd:22:0d:5d:8d:09:d6:ef:74:b1:c8:75:49:fb:83:41:a0:5e:
8e:75:34:77:13:66:17:90:fa:84:34:0a:6a:4e:43:e9:ac:33:
e7:64:81:de:65:16:35:7a:3d:ee:02:a1:dd:59:c8:06:43:46:
e2:84:96:61:24:be:74:98:b2:6d:69:1f:a4:ae:86:9a:db:8f:
9b:65:ea:b2:21:e0:df:52:5d:85:e8:98:a1:ff:c8:69:9c:aa:
24:8d:24:cc:0a:c6:9d:ee:95:7e:17:32:6d:3e:35:73:92:5a:
7d:bb:a0:13:8e:35:18:80:76:09:c3:54:16:4e:46:13:6b:ef:
69:50:b0:aa:88:08:16:91:f4:04:15:56:b8:03:ad:d5:1c:1e:
0d:62:43:a1:e0:85:73:91:e5:d7:51:2e:5a:8e:92:06:72:5d:
1a:bc:0d:10:b0:24:42:84:76:ff:39:c3:2e:40:db:f7:18:95:
54:79:72:23:f8:55:ef:2f:03:eb:8a:88:f1:15:e4:96:62:26:
5b:c5:f1:dc
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ+pWRDrrrKKVUmKZvKKcJb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjRlNWVmZjFhYmMwZTZkOGJmMDI5ZTRmNzMyZTBhYjcx
YmMxNmEwHhcNMjYwNzI4MTUzMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDg5NTRhMmRmOGYzYWViM2NlOTBjNTQyZmJjNDJlM2IwODQ4MDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi963JOkpFPvyoYc8rqqd27ecWd+q
NmLXuVzajAfbbIvMnctLnq5uyXxRd2xMeZt/Yo02QuN5okIOGFvXp/ktRAL5b55+
9Up/+MMMy3hJ8u0mJ6BDR4YKsSOf6M8mBb6jbiBWyxdupDPeuA/zEe/SWpwgZgN6
F3VWqhSccHHTC+JmDJslmLCkaDrpKCGFGMzkSo7FgsjHUmH7LdBP6qSUROXTk43K
diXs+4dw51nffB5iFnsWC0V3YwIGK78isvLr7czLr0XLs6X983Nu2ImOHCbwJILq
J8451PR3F6qDSMjyVYAPz4OOU8BnsRqAmjDLED+Tvf07bEvseZG3Kme1LQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBCJVKLfjzrrPOkMVC+8QuOwhIANMB8GA1UdIwQY
MBaAFBIk5e/xq8Dm2L8Cnk9zLgq3G8FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEt
NTM4NmIxZDk2M2JjLzEvRUlsVW90LVBPdXM4NlF4VUw3eEM0N0NFZ0EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEtNTM4NmIxZDk2M2Jj
LzEvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBVnUSMAwD
BABWdRUDBABWdRYwDQYJKoZIhvcNAQELBQADggEBACEHCWO18u2HcM4/RX6AEd4V
TqeDUxLOUXbu/7/E+pszewmF2v3VZpzUYZOtVGGVngiJ0d5M0s0iDV2NCdbvdLHI
dUn7g0GgXo51NHcTZheQ+oQ0CmpOQ+msM+dkgd5lFjV6Pe4Cod1ZyAZDRuKElmEk
vnSYsm1pH6Suhprbj5tl6rIh4N9SXYXomKH/yGmcqiSNJMwKxp3ulX4XMm0+NXOS
Wn27oBOONRiAdgnDVBZORhNr72lQsKqICBaR9AQVVrgDrdUcHg1iQ6HghXOR5ddR
LlqOkgZyXRq8DRCwJEKEdv85wy5A2/cYlVR5ciP4Ve8vA+uKiPEV5JZiJlvF8dw=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:54:34 2026 by rpki-client