Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Eg2fwvWztBB3pkGk28je7M83HcM.roa
File: Eg2fwvWztBB3pkGk28je7M83HcM.roa (raw, json)
Hash identifier: 7fGqXLwQ626r2BVCpCP+c77rOZyDqnahVWdGq7TedZY=
Subject key identifier: 12:0D:9F:C2:F5:B3:B4:10:77:A6:41:A4:DB:C8:DE:EC:CF:37:1D:C3
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019EBF3BDC462A719B6D808E0B7D0C45A995
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Eg2fwvWztBB3pkGk28je7M83HcM.roa
Signing time: Sat 13 Jun 2026 04:27:11 +0000
ROA not before: Sat 13 Jun 2026 04:27:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213727
IP address blocks: 178.239.156.0/24 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.34.0/24 maxlen: 24
185.26.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:3b:dc:46:2a:71:9b:6d:80:8e:0b:7d:0c:45:a9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 13 04:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=120d9fc2f5b3b41077a641a4dbc8deeccf371dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:51:df:68:72:fd:2b:8c:a8:eb:46:06:f5:
a8:ec:ca:f1:20:f6:f3:60:c6:8b:a9:7b:55:7e:a1:
3d:ca:30:e9:10:0b:45:db:9f:e8:98:c5:51:d0:39:
e6:7d:cd:96:1e:e4:a1:90:71:a4:37:c6:7a:d6:bd:
cb:cf:68:8c:ed:95:fb:58:c9:1c:7a:75:6b:7b:e6:
e8:1d:5f:0b:b2:4d:c0:a2:4a:76:69:66:22:7a:51:
1f:07:28:6e:20:c7:f4:bd:47:d0:66:10:98:29:6f:
2d:f7:47:b3:b3:00:77:95:c8:1b:c7:5b:5f:7e:49:
89:58:45:0c:93:39:45:14:84:2c:fd:84:59:4b:32:
5e:73:94:0a:4b:63:8c:fe:ad:24:c8:f8:04:aa:04:
45:b9:21:73:24:0e:6d:57:11:ec:c8:4e:83:65:06:
08:0c:9b:6d:a4:91:71:10:44:86:28:54:86:ac:54:
4c:26:16:74:b9:3b:72:b8:96:91:c4:b3:e9:d8:a7:
37:9c:7b:1c:b9:b7:41:37:d3:7f:71:5e:8e:f5:a3:
9f:ac:b3:8a:b1:54:04:89:e2:03:ba:54:8e:ba:5c:
52:d2:81:eb:21:57:5a:74:94:97:21:9d:f6:da:1f:
ef:09:74:76:1d:5e:44:b5:ef:01:48:82:5b:1a:15:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0D:9F:C2:F5:B3:B4:10:77:A6:41:A4:DB:C8:DE:EC:CF:37:1D:C3
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Eg2fwvWztBB3pkGk28je7M83HcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.156.0/24
178.239.159.0/24
185.26.34.0/23
Signature Algorithm: sha256WithRSAEncryption
64:81:29:a4:49:25:70:4d:c2:92:76:bc:07:4c:b9:80:06:83:
4d:02:9a:24:25:11:36:ec:16:b6:63:f2:6e:35:25:84:e5:84:
81:77:c1:4c:95:e2:1c:13:56:62:95:4f:fb:74:63:89:fc:3b:
8a:1d:78:f8:32:af:23:e3:89:a9:d0:17:87:41:50:fe:a1:05:
f1:7d:48:eb:80:08:2b:df:af:08:4a:06:83:ac:5e:4d:85:d9:
28:dd:3f:51:35:a6:05:57:97:5a:6d:70:94:02:69:a4:13:3c:
53:b5:1d:f5:3b:54:0c:0a:9c:43:90:4b:b1:5d:95:1b:65:25:
5d:16:5f:95:52:d9:20:a7:5e:cc:1d:41:1b:bf:4f:22:e1:f6:
52:9d:fc:18:a2:fb:54:08:13:21:1c:0b:ad:60:73:10:cf:a6:
0d:fe:eb:b5:c8:6c:c0:33:93:c3:ee:2a:cf:7c:d6:c0:5a:e7:
cd:76:17:23:3c:f8:95:89:56:26:1c:b2:7c:bf:e4:1b:54:e0:
6a:d8:8d:32:95:27:17:54:16:44:a9:c8:5b:62:b7:d0:c7:e6:
6f:51:ae:aa:52:95:6b:98:30:26:72:31:ff:b2:60:2e:0a:c6:
5b:71:d3:a1:40:97:88:79:da:d1:df:b8:45:f0:c0:60:28:6d:
01:04:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:04:13 2026 by rpki-client