Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/Eczgp2EFr8e_XSlXUgSdJTrIAak.roa
File: Eczgp2EFr8e_XSlXUgSdJTrIAak.roa (raw, json)
Hash identifier: FsSSezhMi82MyPxKqmo1dtY5pOhu7CRckdx69CzRJss=
Subject key identifier: 11:CC:E0:A7:61:05:AF:C7:BF:5D:29:57:52:04:9D:25:3A:C8:01:A9
Certificate issuer: /CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Certificate serial: 019C8A2DDC70CBE3ED7D3AA0C6295813DB0A
Authority key identifier: DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/Eczgp2EFr8e_XSlXUgSdJTrIAak.roa
Signing time: Mon 23 Feb 2026 11:06:27 +0000
ROA not before: Mon 23 Feb 2026 11:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202685
IP address blocks: 178.210.166.0/24 maxlen: 24
212.47.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:2d:dc:70:cb:e3:ed:7d:3a:a0:c6:29:58:13:db:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Validity
Not Before: Feb 23 11:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11cce0a76105afc7bf5d295752049d253ac801a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:5a:0e:58:26:46:2b:d6:3a:42:9d:b8:a3:
9e:f0:c2:da:a2:92:4e:22:b9:35:55:3a:6f:a0:3a:
0b:1b:1c:72:ea:fa:4c:4e:98:23:34:f4:45:0a:26:
20:d1:22:14:da:97:02:1a:0c:69:7c:99:81:68:af:
60:49:9a:39:1e:5b:7a:9c:15:38:1a:0d:aa:5d:39:
7b:bd:be:aa:21:cd:c1:08:cc:f7:ea:b5:e5:96:c2:
c0:79:57:4f:48:4c:45:30:cf:8b:a1:70:03:ab:79:
4c:92:ac:1a:65:19:df:dc:94:d6:fc:04:bf:f3:d4:
00:e0:67:e1:21:bd:19:7b:ea:df:00:a1:8f:d9:29:
69:0f:f7:70:cc:90:e6:3f:cc:d9:56:00:b8:a3:fb:
13:61:fe:af:03:8b:f5:d3:bc:1a:bb:db:2d:25:f6:
95:05:f5:a2:ad:d9:e5:38:1f:35:fb:26:b4:11:6e:
26:d2:05:2d:64:40:2c:45:86:17:1a:9b:7f:9d:23:
6b:48:b7:72:18:cb:0d:62:e0:1b:c4:f4:ba:cc:95:
cc:f1:92:5a:0e:f7:21:46:3b:cc:ab:fd:56:e0:b1:
16:76:98:da:0a:71:ea:31:5c:aa:8b:1f:87:02:c9:
aa:04:7f:3e:28:7c:51:81:e9:8b:63:be:f9:98:17:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CC:E0:A7:61:05:AF:C7:BF:5D:29:57:52:04:9D:25:3A:C8:01:A9
X509v3 Authority Key Identifier:
keyid:DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/Eczgp2EFr8e_XSlXUgSdJTrIAak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.166.0/24
212.47.50.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f7:f9:81:46:a4:a0:9f:df:74:8c:a4:97:bb:b3:e2:3f:8e:
ad:f8:63:18:a7:29:24:02:0e:46:30:35:53:2d:0c:e6:cf:0d:
6f:0b:68:32:73:cd:5a:62:6a:a8:4c:c3:21:9c:1b:bc:72:7f:
a1:be:98:a4:7a:e3:3b:34:fe:1a:78:4f:00:89:69:c6:d6:8d:
f2:dc:ca:a6:e3:7d:9b:fe:9d:83:83:9f:46:06:a2:29:eb:2f:
45:10:61:31:af:23:97:19:0d:d4:38:f1:72:00:cb:88:8b:df:
e5:bc:80:bf:40:ed:66:8d:ef:8f:31:32:4e:5e:55:5c:dd:de:
ea:cf:ee:f2:62:a3:3c:d8:b7:18:15:3b:37:11:b9:f1:52:10:
98:6e:ec:b3:8c:67:25:ee:ee:2a:51:84:b2:56:0d:ab:ae:b5:
43:e6:08:73:6e:2a:27:62:55:34:3b:4d:44:2e:7e:22:30:82:
1c:bb:b8:45:a8:2d:98:94:49:bb:60:e8:84:73:8b:65:d2:7d:
57:f3:ba:86:e7:26:2f:cf:d1:a9:df:94:15:d6:92:14:c0:64:
54:e9:d4:9d:7d:7f:96:7e:77:9f:82:31:2f:9f:5a:c2:7f:34:
99:23:c9:a1:f3:4b:a2:66:46:33:ed:d6:05:95:32:fa:e0:e5:
b3:50:d2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:36:18 2026 by rpki-client