Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EuR-dzj8pe2UcFlFrzNBVAlNVZU.roa
File: EuR-dzj8pe2UcFlFrzNBVAlNVZU.roa (raw, json)
Hash identifier: uE+UG8/hoQWYgWmR1QiZ2fSUdA62FNzWV0+8SqmD9xc=
Subject key identifier: 12:E4:7E:77:38:FC:A5:ED:94:70:59:45:AF:33:41:54:09:4D:55:95
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EBC05BF1140AEDF03165F4FB8263A4BA6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EuR-dzj8pe2UcFlFrzNBVAlNVZU.roa
Signing time: Fri 12 Jun 2026 13:29:13 +0000
ROA not before: Fri 12 Jun 2026 13:29:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154612
IP address blocks: 151.240.110.0/24 maxlen: 24
151.247.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:05:bf:11:40:ae:df:03:16:5f:4f:b8:26:3a:4b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 12 13:29:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12e47e7738fca5ed94705945af334154094d5595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:31:0f:f5:95:20:cf:75:e8:8f:22:d1:73:6b:
c4:b0:ea:06:41:ec:a7:c1:2d:a1:88:0e:68:36:ed:
ac:ca:6c:b0:f3:27:de:ed:27:e6:17:b9:3e:bf:b0:
8b:ff:6a:1a:94:8a:1a:48:c9:b9:f9:55:fc:89:df:
6d:6b:a9:fe:56:fb:db:7e:1a:a5:e2:de:2d:8e:1c:
68:bd:11:8a:55:eb:72:ff:87:d4:f8:33:09:f5:75:
50:28:b4:58:2c:98:26:77:b9:6a:62:8c:99:c2:7e:
28:1c:c0:fb:25:32:19:74:3b:82:a0:fc:c1:71:88:
ff:ce:b9:1f:aa:c6:67:75:b2:08:a2:c2:12:77:4f:
b0:04:2a:8d:63:90:4a:da:b9:34:8f:51:43:b6:98:
1d:6b:66:54:7f:1f:91:53:5b:90:c2:8d:ed:38:51:
1b:9e:48:55:b7:3c:d5:4a:be:1d:ff:72:dc:a8:c2:
d3:30:e8:0f:5e:88:44:6c:1c:31:66:4b:a2:b3:d1:
e5:63:5f:e4:2d:c7:41:4b:2c:26:10:94:1f:c7:0d:
49:7e:95:c4:0c:70:40:52:a7:e3:5c:05:36:b2:8c:
1a:17:b1:1e:88:94:ff:eb:9a:1f:6f:03:bd:1e:5d:
a8:ef:e2:ea:ea:e8:34:01:71:d2:f1:cc:67:f4:44:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E4:7E:77:38:FC:A5:ED:94:70:59:45:AF:33:41:54:09:4D:55:95
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EuR-dzj8pe2UcFlFrzNBVAlNVZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.110.0/24
151.247.117.0/24
Signature Algorithm: sha256WithRSAEncryption
70:28:17:7c:41:b8:67:3f:98:ee:99:97:9c:6b:21:0f:b3:f1:
75:07:5f:46:1c:1f:85:6e:3c:c0:72:53:f7:ea:0c:c9:62:2a:
21:f5:b5:d7:cd:e0:a0:a8:b8:c7:0e:80:5a:4d:e2:01:61:6b:
19:1a:c1:24:df:cb:c8:e3:d0:64:ad:36:32:e5:48:99:48:58:
cf:36:02:7e:20:b5:0d:3b:c1:04:ea:f7:9f:47:93:d8:e9:14:
22:b6:53:ab:b3:1e:07:d7:93:c6:98:ea:1d:db:33:43:82:9a:
cb:2c:61:4a:f5:de:24:b1:86:7c:0d:d8:d0:c8:fd:a4:ab:cd:
03:ed:f1:4e:f9:f1:68:0b:8b:65:17:47:af:0f:11:8b:81:0c:
c6:7f:47:c8:06:5c:61:6b:5c:56:25:ff:a4:e6:64:98:47:ed:
a3:50:10:b7:d8:4a:11:4d:f3:06:b5:39:20:0b:7e:22:51:3e:
f1:a9:15:81:e8:82:da:5b:a6:a2:f4:6a:db:c7:4a:ce:46:c2:
ca:25:ea:cd:7b:39:2b:3c:b6:f2:0c:de:23:eb:b8:73:18:73:
52:27:23:0e:75:83:47:83:e0:12:2c:e9:d4:4f:af:4f:6c:2e:
bb:ef:f7:03:bd:6e:33:ad:a6:3e:1f:05:a9:14:ce:22:92:f6:
cf:47:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:45 2026 by rpki-client