Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/EamRThyaDev3_9bXUmMzxvl80L0.roa
File: EamRThyaDev3_9bXUmMzxvl80L0.roa (raw, json)
Hash identifier: P6EOVOACvHlpkTgj0/IBTJAXy98EsCmn/y3p73Pp2d8=
Subject key identifier: 11:A9:91:4E:1C:9A:0D:EB:F7:FF:D6:D7:52:63:33:C6:F9:7C:D0:BD
Certificate issuer: /CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Certificate serial: 01A1594AC2FD7D9A3F5F1188742FE3D6B814
Authority key identifier: 1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/EamRThyaDev3_9bXUmMzxvl80L0.roa
Signing time: Tue 20 Oct 2026 12:30:34 +0000
ROA not before: Tue 20 Oct 2026 12:30:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211848
IP address blocks: 91.239.117.0/24 maxlen: 24
185.192.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.mft
rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:4a:c2:fd:7d:9a:3f:5f:11:88:74:2f:e3:d6:b8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cacb77e20b78147d47f8394294f117b5c84ef5e
Validity
Not Before: Oct 20 12:30:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11a9914e1c9a0debf7ffd6d7526333c6f97cd0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:41:6f:7f:32:a5:85:04:09:f1:8d:f1:e7:
11:c3:b4:8d:e0:aa:46:7d:da:6b:ea:71:15:74:78:
08:74:0d:5f:09:57:ae:a9:09:1f:c5:cd:5c:05:2e:
5c:2f:fa:24:0a:31:11:09:9f:49:fe:c3:85:55:13:
5d:10:9e:55:48:56:12:76:cc:57:09:75:dd:59:e6:
e5:97:6d:f1:ed:14:6e:78:89:13:9e:6c:fb:45:10:
f2:a7:ef:d3:1d:7c:64:2b:ef:63:b5:f9:4e:a3:6f:
83:ab:98:99:19:ee:6e:bf:80:d4:b2:3b:a4:6b:ca:
28:4f:dd:6f:6d:f9:fe:a6:87:6d:71:a7:2a:87:84:
91:45:3b:ac:9f:85:b0:73:c0:88:59:8a:6b:5b:71:
c7:b6:74:d5:dc:30:b3:85:3d:55:67:f1:27:40:43:
6a:9e:b7:73:6f:7e:9a:ad:95:d8:72:8e:05:db:20:
9b:70:1f:06:56:dc:2c:c2:ef:3a:31:61:f0:35:03:
ac:50:4f:6e:60:88:f3:e4:b4:20:7c:c0:b6:0f:13:
e7:5b:eb:b8:38:78:bf:20:78:fd:ed:52:d0:65:cb:
ab:a1:d9:3d:4c:5b:d1:ec:fb:b2:7b:62:ca:e9:bb:
ce:00:d5:f3:eb:79:71:ad:81:34:cc:6c:7a:11:c8:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A9:91:4E:1C:9A:0D:EB:F7:FF:D6:D7:52:63:33:C6:F9:7C:D0:BD
X509v3 Authority Key Identifier:
keyid:1C:AC:B7:7E:20:B7:81:47:D4:7F:83:94:29:4F:11:7B:5C:84:EF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKy3fiC3gUfUf4OUKU8Re1yE714.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/EamRThyaDev3_9bXUmMzxvl80L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/417ab2-fcb3-405d-a0c8-5325a5200ba9/1/HKy3fiC3gUfUf4OUKU8Re1yE714.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.117.0/24
185.192.196.0/22
Signature Algorithm: sha256WithRSAEncryption
37:5d:93:6d:28:33:1f:d5:36:95:64:34:b9:57:3d:18:06:81:
45:a1:32:33:2e:9f:f4:64:71:39:2b:bd:40:26:be:db:ee:8e:
87:71:9b:02:e3:7e:11:00:6b:c6:e2:35:fb:50:e7:de:af:1c:
04:28:5a:c3:e4:4d:32:de:75:5c:9a:65:3c:c3:a4:16:fa:9b:
d3:b3:c0:ad:c5:41:99:1d:7d:c6:af:64:d1:fa:b2:b4:c2:12:
3e:b7:ac:d6:90:23:ee:5b:00:29:8f:49:20:1e:90:f7:80:f1:
29:ba:11:56:08:1a:04:9f:8a:54:3c:56:d3:34:33:ef:e2:19:
bc:25:4a:a7:ab:56:94:7d:bf:06:ea:52:d3:5f:a6:00:91:cc:
2b:2e:fe:7b:f3:9a:00:52:59:3d:07:f9:63:5c:ca:29:a5:8a:
28:b0:58:98:87:90:cd:d3:7d:49:2d:bd:1b:ca:46:3d:00:e5:
8e:f0:37:d0:b4:83:cd:63:ee:ae:2d:74:92:75:db:4f:84:4d:
06:d9:e3:70:43:1f:89:18:17:68:0d:fd:07:f5:b8:19:cc:23:
35:c2:87:65:7e:39:a8:c4:25:14:43:30:c2:d7:5f:1c:21:dc:
33:cb:ef:f5:d3:c4:8e:b7:f8:2d:14:be:06:a1:8d:26:6a:69:
d0:f5:23:af
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFZSsL9fZo/XxGIdC/j1rgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYWNiNzdlMjBiNzgxNDdkNDdmODM5NDI5NGYxMTdiNWM4
NGVmNWUwHhcNMjYxMDIwMTIzMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWE5OTE0ZTFjOWEwZGViZjdmZmQ2ZDc1MjYzMzNjNmY5N2NkMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlpBb38ypYUECfGN8ecRw7SN4KpG
fdpr6nEVdHgIdA1fCVeuqQkfxc1cBS5cL/okCjERCZ9J/sOFVRNdEJ5VSFYSdsxX
CXXdWebll23x7RRueIkTnmz7RRDyp+/THXxkK+9jtflOo2+Dq5iZGe5uv4DUsjuk
a8ooT91vbfn+podtcacqh4SRRTusn4Wwc8CIWYprW3HHtnTV3DCzhT1VZ/EnQENq
nrdzb36arZXYco4F2yCbcB8GVtwswu86MWHwNQOsUE9uYIjz5LQgfMC2DxPnW+u4
OHi/IHj97VLQZcurodk9TFvR7Puye2LK6bvOANXz63lxrYE0zGx6EcjK7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBGpkU4cmg3r9//W11JjM8b5fNC9MB8GA1UdIwQY
MBaAFByst34gt4FH1H+DlClPEXtchO9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEt5M2ZpQzNnVWZVZjRPVUtVOFJlMXlFNzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MTdhYjItZmNiMy00MDVkLWEwYzgt
NTMyNWE1MjAwYmE5LzEvRWFtUlRoeWFEZXYzXzliWFVtTXp4dmw4MEwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80MTdhYjItZmNiMy00MDVkLWEwYzgtNTMyNWE1MjAwYmE5
LzEvSEt5M2ZpQzNnVWZVZjRPVUtVOFJlMXlFNzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+91AwQC
ucDEMA0GCSqGSIb3DQEBCwUAA4IBAQA3XZNtKDMf1TaVZDS5Vz0YBoFFoTIzLp/0
ZHE5K71AJr7b7o6HcZsC434RAGvG4jX7UOferxwEKFrD5E0y3nVcmmU8w6QW+pvT
s8CtxUGZHX3Gr2TR+rK0whI+t6zWkCPuWwApj0kgHpD3gPEpuhFWCBoEn4pUPFbT
NDPv4hm8JUqnq1aUfb8G6lLTX6YAkcwrLv5785oAUlk9B/ljXMoppYoosFiYh5DN
031JLb0bykY9AOWO8DfQtIPNY+6uLXSSddtPhE0G2eNwQx+JGBdoDf0H9bgZzCM1
wodlfjmoxCUUQzDC118cIdwzy+/108SOt/gtFL4GoY0mamnQ9SOv
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:22:47 2026 by rpki-client