Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/eEPIcxGMIK98z5RNMWaEf15DWbY.roa
File: eEPIcxGMIK98z5RNMWaEf15DWbY.roa (raw, json)
Hash identifier: D4Gm5v5Ym5VHzBGs6c7mjteLFkQRZI4kWnMhpDkX8aU=
Subject key identifier: 78:43:C8:73:11:8C:20:AF:7C:CF:94:4D:31:66:84:7F:5E:43:59:B6
Certificate issuer: /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial: 01A0346D36858856BB3EC3B52B3B31A7FF64
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/eEPIcxGMIK98z5RNMWaEf15DWbY.roa
Signing time: Mon 24 Aug 2026 15:39:27 +0000
ROA not before: Mon 24 Aug 2026 15:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39588
IP address blocks: 51.163.158.0/24 maxlen: 24
51.163.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:6d:36:85:88:56:bb:3e:c3:b5:2b:3b:31:a7:ff:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
Validity
Not Before: Aug 24 15:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7843c873118c20af7ccf944d3166847f5e4359b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:33:a3:af:08:d8:af:05:79:7f:7c:bf:9e:0a:
83:4f:3a:50:88:b7:2a:1f:e1:e0:c8:fe:f6:3b:3b:
db:fa:df:02:55:36:c1:77:0f:e5:cc:a1:56:4c:aa:
b5:d8:12:62:bb:26:91:de:fe:87:8d:33:9e:29:cb:
04:42:70:09:2f:2f:88:67:c1:85:9d:9e:8a:69:bb:
9a:e6:e4:60:65:ed:03:99:4d:aa:5d:a6:df:fd:f6:
e2:8e:92:07:4a:33:bc:db:12:99:30:6f:01:25:d5:
19:6e:f6:f8:9a:c8:f4:c3:00:9a:76:3c:ce:66:97:
4b:e1:6c:9a:a4:c0:da:66:a1:c1:6e:37:aa:f9:78:
62:48:45:d7:aa:45:ab:09:ae:30:fe:cf:3e:3a:d8:
48:9d:81:6a:1b:63:92:d8:47:31:32:1e:9a:9f:06:
25:68:e9:83:83:dd:e7:5f:7a:82:da:60:a7:9b:8e:
78:24:70:bf:a8:17:49:c4:c7:34:7a:c8:2f:57:ea:
03:04:8a:c6:13:50:1d:7b:1f:de:dd:55:47:13:7e:
3e:fa:9a:8a:aa:73:22:0d:a4:ae:04:4f:46:94:dd:
5d:1b:33:21:d9:0c:92:70:72:7d:41:66:40:7b:df:
91:78:fc:50:38:f3:76:56:8b:95:5e:12:c3:de:ad:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:43:C8:73:11:8C:20:AF:7C:CF:94:4D:31:66:84:7F:5E:43:59:B6
X509v3 Authority Key Identifier:
keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/eEPIcxGMIK98z5RNMWaEf15DWbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.163.158.0/23
Signature Algorithm: sha256WithRSAEncryption
83:9e:b5:47:58:f5:58:ad:0a:06:2c:b0:76:21:0d:84:da:e1:
56:bd:03:48:9a:2f:ed:e7:c8:54:34:99:14:e2:b3:56:0b:46:
ad:d2:e2:f7:d1:97:71:70:73:1d:b6:ee:e8:67:72:45:6e:e7:
c0:e5:c7:52:35:e4:84:45:8b:60:d9:6b:d6:ed:fe:5b:cc:ad:
80:da:a0:c6:78:6c:ea:ec:67:0a:bc:26:e6:de:d5:bf:7d:14:
96:1c:bb:3d:32:49:af:ee:c2:ef:55:67:61:85:76:53:64:07:
77:03:ac:ae:50:37:dc:8e:bb:dc:83:c5:bd:3d:68:fb:45:d7:
f0:67:68:7c:da:7c:50:f4:8f:8b:30:1b:e4:15:6f:9f:9a:13:
f3:6d:67:b3:77:6d:cb:93:04:90:41:bb:dc:85:66:c2:e4:bc:
f9:cb:28:32:92:1e:12:c2:c1:b7:0f:37:42:83:fd:32:2f:2a:
62:f3:d0:49:17:b9:7c:30:bd:06:2d:68:c4:7b:cb:e8:97:5b:
69:12:d4:04:ed:f3:70:6a:18:16:b1:05:49:88:0e:02:5f:ff:
77:1f:be:56:66:61:28:2a:13:f1:33:3f:e2:8a:21:5c:d1:37:
a6:92:32:9e:7d:5e:c4:15:90:6c:2e:fb:21:d5:80:dd:60:8c:
fc:68:ec:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA0bTaFiFa7PsO1Kzsxp/9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzRhMzVhYmZhODJkNTQ5ZTQ5MDcwNGQ2OGJiZTY1ODAw
NWQ2M2MwHhcNMjYwODI0MTUzOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODQzYzg3MzExOGMyMGFmN2NjZjk0NGQzMTY2ODQ3ZjVlNDM1OWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DOjrwjYrwV5f3y/ngqDTzpQiLcq
H+HgyP72Ozvb+t8CVTbBdw/lzKFWTKq12BJiuyaR3v6HjTOeKcsEQnAJLy+IZ8GF
nZ6Kabua5uRgZe0DmU2qXabf/fbijpIHSjO82xKZMG8BJdUZbvb4msj0wwCadjzO
ZpdL4WyapMDaZqHBbjeq+XhiSEXXqkWrCa4w/s8+OthInYFqG2OS2EcxMh6anwYl
aOmDg93nX3qC2mCnm454JHC/qBdJxMc0esgvV+oDBIrGE1Adex/e3VVHE34++pqK
qnMiDaSuBE9GlN1dGzMh2QyScHJ9QWZAe9+RePxQOPN2VouVXhLD3q3UMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHhDyHMRjCCvfM+UTTFmhH9eQ1m2MB8GA1UdIwQY
MBaAFMM0o1q/qC1UnkkHBNaLvmWABdY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pTaldyLW9MVlNlU1FjRTFvdS1aWUFGMWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zOWIwOGQtZWIwMS00M2IwLWI1NmMt
MjczODg0YjUzYzZlLzEvZUVQSWN4R01JSzk4ejVSTk1XYUVmMTVEV2JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zOWIwOGQtZWIwMS00M2IwLWI1NmMtMjczODg0YjUzYzZl
LzEvd3pTaldyLW9MVlNlU1FjRTFvdS1aWUFGMWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBM6OeMA0G
CSqGSIb3DQEBCwUAA4IBAQCDnrVHWPVYrQoGLLB2IQ2E2uFWvQNImi/t58hUNJkU
4rNWC0at0uL30ZdxcHMdtu7oZ3JFbufA5cdSNeSERYtg2WvW7f5bzK2A2qDGeGzq
7GcKvCbm3tW/fRSWHLs9Mkmv7sLvVWdhhXZTZAd3A6yuUDfcjrvcg8W9PWj7Rdfw
Z2h82nxQ9I+LMBvkFW+fmhPzbWezd23LkwSQQbvchWbC5Lz5yygykh4SwsG3DzdC
g/0yLypi89BJF7l8ML0GLWjEe8vol1tpEtQE7fNwahgWsQVJiA4CX/93H75WZmEo
KhPxMz/iiiFc0TemkjKefV7EFZBsLvsh1YDdYIz8aOyA
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:12:45 2026 by rpki-client