Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/ePxxIUyzqZK3kEZmDdjcUCuuRvc.roa
File: ePxxIUyzqZK3kEZmDdjcUCuuRvc.roa (raw, json)
Hash identifier: OTMX2RXixuib3GizC9ju7U8a46HfRyOISu+AANDP56w=
Subject key identifier: 78:FC:71:21:4C:B3:A9:92:B7:90:46:66:0D:D8:DC:50:2B:AE:46:F7
Certificate issuer: /CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Certificate serial: 01A08664C2CD77200968F6C6DBC393974375
Authority key identifier: 25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/ePxxIUyzqZK3kEZmDdjcUCuuRvc.roa
Signing time: Wed 09 Sep 2026 13:39:05 +0000
ROA not before: Wed 09 Sep 2026 13:39:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3333
IP address blocks: 193.0.0.0/21 maxlen: 21
193.0.10.0/23 maxlen: 23
193.0.12.0/23 maxlen: 23
193.0.18.0/23 maxlen: 23
193.0.20.0/23 maxlen: 23
193.0.22.0/23 maxlen: 23
2001:67c:2e8::/48 maxlen: 48
2a13:27c0::/29 maxlen: 48
2a13:27c0::/44 maxlen: 44
2a13:27c0:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:64:c2:cd:77:20:09:68:f6:c6:db:c3:93:97:43:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Validity
Not Before: Sep 9 13:39:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78fc71214cb3a992b79046660dd8dc502bae46f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:6c:8d:cf:a6:e2:75:d9:7a:73:ef:92:92:
e0:21:5d:44:4a:66:c5:df:68:8a:22:38:d5:cd:d5:
4c:f0:c7:08:cb:c6:4d:70:e6:b2:27:e2:90:25:8f:
bf:43:d1:0c:7e:0e:cb:77:37:c1:18:a0:fc:d6:5f:
fc:95:b0:d6:62:ed:79:7e:64:22:fa:85:90:bb:eb:
8f:09:03:ab:34:68:5b:90:e7:e4:bf:1a:1d:37:78:
86:48:a3:bd:82:83:fe:b7:fb:e1:ff:d3:9f:9e:e9:
2d:a5:a1:66:fd:b5:8a:11:18:71:93:eb:9a:14:ab:
81:df:05:65:1e:b9:90:e1:69:7c:c9:3d:35:4f:9b:
9c:cc:7f:28:cf:a8:f0:36:7b:ac:0e:0a:81:38:fb:
20:0e:cf:eb:b8:0e:62:19:bc:e8:fc:8f:6d:b9:5c:
0e:3f:5b:bd:17:8e:b3:4f:93:c0:ad:51:bc:97:6c:
36:ac:7d:e5:27:48:a5:d9:f2:f6:0d:d7:98:f1:7f:
9d:15:06:97:f9:e3:df:2e:67:56:7c:d6:e7:80:b5:
c8:54:73:27:0c:78:04:01:10:6d:09:96:64:d8:c7:
9c:15:9c:bd:15:72:6f:d0:44:94:e3:e0:2d:80:ed:
0f:1f:34:87:c9:c3:2b:4a:2a:46:96:f3:de:d4:89:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FC:71:21:4C:B3:A9:92:B7:90:46:66:0D:D8:DC:50:2B:AE:46:F7
X509v3 Authority Key Identifier:
keyid:25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/ePxxIUyzqZK3kEZmDdjcUCuuRvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.0.0/21
193.0.10.0-193.0.13.255
193.0.18.0-193.0.23.255
IPv6:
2001:67c:2e8::/48
2a13:27c0::/29
Signature Algorithm: sha256WithRSAEncryption
24:65:1f:c2:10:f1:dc:7f:65:a1:8a:a8:df:25:50:f2:90:93:
3c:16:85:41:9c:d2:a2:15:50:3c:bd:cf:31:70:3e:fe:01:8d:
da:73:dd:77:ec:19:1b:e4:74:6d:7f:ae:aa:c4:3a:e9:07:1a:
d1:86:70:46:67:c8:18:ea:bf:dd:94:44:24:99:d3:7b:10:e2:
8e:0e:08:97:36:24:cc:6d:65:0b:5d:1b:6a:ae:8a:e7:24:3a:
ee:3a:47:f5:54:9c:0a:d4:a0:98:e6:d1:59:d2:d3:c2:2f:0d:
3b:8a:ff:16:ad:0b:cd:e7:42:94:0a:6e:98:c3:ff:03:36:8f:
db:87:6d:58:95:e7:88:08:c2:65:4a:6a:25:15:84:f2:9c:9d:
fe:35:31:c7:3c:e5:44:1d:87:b7:fc:28:70:2f:86:a6:f3:d0:
bd:88:7f:26:5c:f5:60:4a:95:0c:7f:3f:e3:e5:e5:e8:bc:9a:
36:1a:77:b2:e6:79:e2:01:f6:eb:a8:8b:9b:6a:3d:98:f5:cb:
b4:6d:53:ee:17:a0:c2:78:e2:db:17:3f:71:17:e8:c0:03:97:
f8:36:6d:2b:0f:43:39:96:fc:53:5b:71:6c:56:a4:44:f3:f3:
0b:bc:12:75:72:7e:96:7b:8c:7a:56:1c:1b:ff:26:b9:2b:fc:
30:fd:dd:c8
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAaCGZMLNdyAJaPbG28OTl0N1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDkzYTgxMDBkNGIzN2VkM2NkOGJiYzFhNzllOWYyMGQw
NjRhOTkwHhcNMjYwOTA5MTMzOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGZjNzEyMTRjYjNhOTkyYjc5MDQ2NjYwZGQ4ZGM1MDJiYWU0NmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13dsjc+m4nXZenPvkpLgIV1ESmbF
32iKIjjVzdVM8McIy8ZNcOayJ+KQJY+/Q9EMfg7LdzfBGKD81l/8lbDWYu15fmQi
+oWQu+uPCQOrNGhbkOfkvxodN3iGSKO9goP+t/vh/9OfnuktpaFm/bWKERhxk+ua
FKuB3wVlHrmQ4Wl8yT01T5uczH8oz6jwNnusDgqBOPsgDs/ruA5iGbzo/I9tuVwO
P1u9F46zT5PArVG8l2w2rH3lJ0il2fL2DdeY8X+dFQaX+ePfLmdWfNbngLXIVHMn
DHgEARBtCZZk2MecFZy9FXJv0ESU4+AtgO0PHzSHycMrSipGlvPe1ImSvQIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFHj8cSFMs6mSt5BGZg3Y3FArrkb3MB8GA1UdIwQY
MBaAFCXZOoEA1LN+082LvBp56fINBkqZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRrNmdRRFVzMzdUell1OEdubnA4ZzBHU3BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt
ZTY2MzY5NjQ5NDExLzEvZVB4eElVeXpxWksza0VabURkamNVQ3V1UnZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx
LzEvSmRrNmdRRFVzMzdUell1OEdubnA4ZzBHU3BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAoBAIAATAiAwQDwQAAMAwD
BAHBAAoDBAHBAAwwDAMEAcEAEgMEA8EAEDAWBAIAAjAQAwcAIAEGfALoAwUDKhMn
wDANBgkqhkiG9w0BAQsFAAOCAQEAJGUfwhDx3H9loYqo3yVQ8pCTPBaFQZzSohVQ
PL3PMXA+/gGN2nPdd+wZG+R0bX+uqsQ66Qca0YZwRmfIGOq/3ZREJJnTexDijg4I
lzYkzG1lC10baq6K5yQ67jpH9VScCtSgmObRWdLTwi8NO4r/Fq0LzedClApumMP/
AzaP24dtWJXniAjCZUpqJRWE8pyd/jUxxzzlRB2Ht/wocC+GpvPQvYh/Jlz1YEqV
DH8/4+Xl6LyaNhp3suZ54gH266iLm2o9mPXLtG1T7hegwnji2xc/cRfowAOX+DZt
Kw9DOZb8U1txbFakRPPzC7wSdXJ+lnuMelYcG/8muSv8MP3dyA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:37:05 2026 by rpki-client