Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EcDyH5umEZ-qQXXLQIpSMw7Xut0.roa
File: EcDyH5umEZ-qQXXLQIpSMw7Xut0.roa (raw, json)
Hash identifier: fs4OaEh5fJGrajM3u0wD52Qdy8xmbvvH0TmX59gdb88=
Subject key identifier: 11:C0:F2:1F:9B:A6:11:9F:AA:41:75:CB:40:8A:52:33:0E:D7:BA:DD
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019C714E276DB7DA92602B9D20DDF3A27E45
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EcDyH5umEZ-qQXXLQIpSMw7Xut0.roa
Signing time: Wed 18 Feb 2026 15:11:13 +0000
ROA not before: Wed 18 Feb 2026 15:11:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210558
IP address blocks: 124.198.131.0/24 maxlen: 24
124.198.132.0/24 maxlen: 24
185.19.40.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:4e:27:6d:b7:da:92:60:2b:9d:20:dd:f3:a2:7e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 18 15:11:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11c0f21f9ba6119faa4175cb408a52330ed7badd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:bf:17:2d:c3:9a:dd:30:95:ee:d3:e7:6f:
1d:9c:6f:c8:93:3b:f6:c9:1f:c9:45:f4:ae:d4:8c:
4b:dd:5a:37:87:a4:91:de:54:4c:6c:c8:dd:4e:53:
2f:8b:71:ed:f5:8f:d4:24:14:33:5b:76:02:34:a4:
a4:b4:a6:5e:3a:83:12:0c:fb:b7:b2:64:7d:2c:99:
c8:74:e7:54:d1:8f:ac:24:fe:a5:6d:09:3f:ed:a1:
51:1e:2a:bd:89:f3:ca:84:7e:2e:c9:91:7b:13:8a:
b0:73:de:fd:a9:55:5d:9d:35:58:5d:e2:02:17:de:
90:64:57:e1:6a:3f:02:60:fa:b7:12:b7:5c:e4:7f:
7c:98:37:47:8f:94:b0:12:54:f9:fd:46:00:fe:50:
a2:19:68:ad:79:c5:7d:73:60:db:7b:5d:37:25:18:
a7:40:9d:54:a1:48:ad:23:c2:da:55:8f:31:dd:d1:
5f:46:b8:09:7b:d9:83:b1:bf:81:ce:37:a5:e0:8b:
85:be:e6:84:7b:38:b6:90:39:6f:02:48:4b:a9:18:
a9:41:5b:6a:09:2a:4d:92:a1:9b:9a:1b:0b:e9:2e:
0f:41:0c:01:e4:c9:c6:59:2f:63:bc:b7:33:55:6b:
7d:90:1b:d9:56:83:d5:aa:77:0a:df:b3:83:dd:ac:
10:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C0:F2:1F:9B:A6:11:9F:AA:41:75:CB:40:8A:52:33:0E:D7:BA:DD
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EcDyH5umEZ-qQXXLQIpSMw7Xut0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.198.131.0-124.198.132.255
185.19.40.0/24
203.188.171.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:f8:16:11:e8:b7:c0:de:8a:88:da:48:22:7e:ba:88:80:e5:
3a:00:d1:41:3e:9c:0a:ec:f7:9c:5f:70:8f:52:cd:7a:62:10:
57:1f:4b:5c:99:e8:40:f4:55:d6:c7:d9:dd:99:28:8b:3c:77:
69:23:f9:4a:e8:d2:f9:34:b1:6b:0b:de:9e:d7:fd:c1:b3:dc:
7a:40:f2:c8:d1:69:37:ea:5a:23:28:c5:29:81:3f:fe:29:19:
1e:34:a7:87:a5:3a:b6:14:c7:44:9e:66:a8:73:c6:ae:42:a4:
0f:68:42:c5:94:0a:54:b8:6c:b7:52:ab:81:b2:4d:89:b7:8d:
2c:9a:88:a3:d9:67:05:d6:c6:d4:01:50:3a:80:4a:3f:ef:4a:
38:83:6f:c2:06:4a:dc:b4:43:1d:aa:60:17:a6:48:65:de:fe:
e0:a8:a2:a3:dd:30:4e:c2:2a:ec:a8:c7:7f:06:e4:3c:96:90:
5f:3c:bc:12:35:76:b8:3e:bf:69:f3:75:df:90:a3:0a:7a:54:
f7:8f:1c:dc:4b:23:9f:c6:f3:4c:57:d6:86:d6:23:93:6a:7d:
a3:58:29:01:6f:b0:17:f2:a6:ab:18:75:cc:78:2f:f6:dd:ed:
5d:27:c5:57:a8:02:e7:aa:f9:be:ae:4e:76:ef:d6:4e:30:02:
ba:87:ab:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:28 2026 by rpki-client