Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EizvUzRDJucCCm_zs8sXt9cPAek.roa
File: EizvUzRDJucCCm_zs8sXt9cPAek.roa (raw, json)
Hash identifier: 5p6KR9AN/MBjTcHHvFjwg9yxxVRNqzsuYrOKUtI/EeQ=
Subject key identifier: 12:2C:EF:53:34:43:26:E7:02:0A:6F:F3:B3:CB:17:B7:D7:0F:01:E9
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A07BCAF6D49AE6A525CDA3092613D947FF
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EizvUzRDJucCCm_zs8sXt9cPAek.roa
Signing time: Mon 07 Sep 2026 12:14:53 +0000
ROA not before: Mon 07 Sep 2026 12:14:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218965
IP address blocks: 81.5.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:ca:f6:d4:9a:e6:a5:25:cd:a3:09:26:13:d9:47:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 7 12:14:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=122cef53344326e7020a6ff3b3cb17b7d70f01e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:23:08:57:4c:15:4b:8d:89:c6:0e:ca:6f:21:
2e:df:af:25:8c:a5:63:3c:4b:4c:6a:52:27:b8:94:
02:22:b6:2f:c9:75:cb:a9:2a:91:a3:18:01:cb:71:
21:fd:72:72:1a:f9:2c:13:21:aa:43:37:48:9b:f5:
cb:b0:8b:6c:59:c9:a0:d9:f8:ef:67:19:58:48:6b:
96:2a:f1:df:96:9e:8f:e1:3c:6a:f2:67:4f:82:8b:
e8:95:2c:70:03:61:47:7c:91:09:cf:ca:1e:51:3d:
13:a6:00:6b:8d:f4:b6:fa:ad:25:42:f0:16:29:43:
5a:b0:02:f9:59:da:95:ad:a3:49:78:9d:18:97:3b:
0a:fc:99:41:6f:ee:5e:bb:a3:da:d1:fa:97:08:8a:
27:cd:da:c3:91:52:9c:86:0b:d6:9a:04:2c:a2:d0:
92:c3:92:ad:e8:af:b4:80:d4:57:11:13:4b:4e:8b:
d1:f0:7b:8f:b9:d1:02:d3:31:dc:a0:45:03:1e:ed:
78:1c:a1:d4:38:6f:53:af:23:10:e7:cf:a4:e9:f8:
99:05:97:e3:21:81:3d:ed:7b:da:cf:87:3e:08:19:
57:2d:bf:83:d1:cb:18:f0:96:65:02:e3:c4:4f:32:
32:8e:2c:b1:bd:b2:e2:43:7c:c2:91:31:7c:94:b0:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2C:EF:53:34:43:26:E7:02:0A:6F:F3:B3:CB:17:B7:D7:0F:01:E9
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EizvUzRDJucCCm_zs8sXt9cPAek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.161.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:74:7a:96:bc:fb:b5:3c:66:25:22:42:4b:34:61:69:6f:16:
c1:a4:2d:7f:17:e5:2d:e8:f5:3f:5f:cf:cf:d3:5f:e3:a8:db:
a6:a7:5a:d2:6c:28:5c:d0:d5:b6:32:3c:e1:9c:cb:41:53:8a:
d8:b6:15:03:91:a8:12:84:2d:a6:4b:a0:0b:f8:6f:73:72:df:
81:54:35:ab:90:b1:ea:7d:e4:f7:12:8c:68:f8:f3:6b:be:a1:
2e:ef:6d:17:37:39:87:85:94:ef:6e:9a:09:f9:ca:20:89:f1:
4e:11:c2:4f:f4:c7:53:be:2f:82:9e:ae:8b:6f:f5:8e:05:5e:
65:87:31:82:e4:f0:fb:94:70:4e:78:72:b3:e0:a3:ba:f3:7a:
1c:51:ca:1c:58:0f:5e:ff:1c:7b:b3:00:7b:b8:ef:ff:f7:92:
5c:b7:ab:86:8b:ba:fe:1b:a7:5f:e4:33:b2:28:37:7b:cc:4b:
fe:2d:ae:bd:57:d8:a0:78:9f:85:aa:f9:a0:89:43:45:c2:40:
86:7e:04:91:83:21:5b:f4:15:7c:af:b8:42:e2:c7:0a:fc:6d:
e9:ff:1c:bf:be:4d:6a:f3:32:57:05:31:c2:18:d0:85:7e:d6:
7f:5e:3f:9e:dd:aa:f4:fc:52:a5:ea:b7:52:13:56:20:36:cd:
5c:9e:86:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB7yvbUmualJc2jCSYT2Uf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwOTA3MTIxNDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjJjZWY1MzM0NDMyNmU3MDIwYTZmZjNiM2NiMTdiN2Q3MGYwMWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniMIV0wVS42Jxg7KbyEu368ljKVj
PEtMalInuJQCIrYvyXXLqSqRoxgBy3Eh/XJyGvksEyGqQzdIm/XLsItsWcmg2fjv
ZxlYSGuWKvHflp6P4Txq8mdPgovolSxwA2FHfJEJz8oeUT0TpgBrjfS2+q0lQvAW
KUNasAL5WdqVraNJeJ0YlzsK/JlBb+5eu6Pa0fqXCIonzdrDkVKchgvWmgQsotCS
w5Kt6K+0gNRXERNLTovR8HuPudEC0zHcoEUDHu14HKHUOG9TryMQ58+k6fiZBZfj
IYE97Xvaz4c+CBlXLb+D0csY8JZlAuPETzIyjiyxvbLiQ3zCkTF8lLDZpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBIs71M0QybnAgpv87PLF7fXDwHpMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRWl6dlV6UkRKdWNDQ21fenM4c1h0OWNQQWVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQWhMA0G
CSqGSIb3DQEBCwUAA4IBAQAedHqWvPu1PGYlIkJLNGFpbxbBpC1/F+Ut6PU/X8/P
01/jqNump1rSbChc0NW2MjzhnMtBU4rYthUDkagShC2mS6AL+G9zct+BVDWrkLHq
feT3Eoxo+PNrvqEu720XNzmHhZTvbpoJ+cogifFOEcJP9MdTvi+Cnq6Lb/WOBV5l
hzGC5PD7lHBOeHKz4KO683ocUcocWA9e/xx7swB7uO//95Jct6uGi7r+G6df5DOy
KDd7zEv+La69V9igeJ+FqvmgiUNFwkCGfgSRgyFb9BV8r7hC4scK/G3p/xy/vk1q
8zJXBTHCGNCFftZ/Xj+e3ar0/FKl6rdSE1YgNs1cnoYi
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:29:56 2026 by rpki-client