Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/eP5PyKE_-x6TT40a7GDlcGqsOiA.roa
File: eP5PyKE_-x6TT40a7GDlcGqsOiA.roa (raw, json)
Hash identifier: Ux1XyDwFFeWFB0hBYgfGJmaYREPqJbs6hAMb2HTKJNM=
Subject key identifier: 78:FE:4F:C8:A1:3F:FB:1E:93:4F:8D:1A:EC:60:E5:70:6A:AC:3A:20
Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial: 019E742F11D478079274BC5AEB6D982858AA
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/eP5PyKE_-x6TT40a7GDlcGqsOiA.roa
Signing time: Fri 29 May 2026 14:41:42 +0000
ROA not before: Fri 29 May 2026 14:41:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396253
IP address blocks: 2a03:b8c0:15::/48 maxlen: 48
2a03:b8c0:19::/48 maxlen: 48
2a03:b8c0:1a::/48 maxlen: 48
2a03:b8c0:1b::/48 maxlen: 48
2a03:b8c0:1c::/48 maxlen: 48
2a03:b8c0:1d::/48 maxlen: 48
2a03:b8c0:1e::/48 maxlen: 48
2a03:b8c0:20::/48 maxlen: 48
2a03:b8c0:21::/48 maxlen: 48
2a03:b8c0:23::/48 maxlen: 48
2a03:b8c0:24::/48 maxlen: 48
2a03:b8c0:25::/48 maxlen: 48
2a03:b8c0:28::/48 maxlen: 48
2a03:b8c0:29::/48 maxlen: 48
2a03:b8c0:2a::/48 maxlen: 48
2a03:b8c0:2b::/48 maxlen: 48
2a03:b8c0:2c::/48 maxlen: 48
2a03:b8c0:2d::/48 maxlen: 48
2a03:b8c0:2e::/48 maxlen: 48
2a03:b8c0:2f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:74:2f:11:d4:78:07:92:74:bc:5a:eb:6d:98:28:58:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
Validity
Not Before: May 29 14:41:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78fe4fc8a13ffb1e934f8d1aec60e5706aac3a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:3d:90:41:6e:c9:53:e2:95:1c:ad:c8:ef:
d2:e5:ab:c8:37:86:36:64:c3:73:56:8e:ab:2e:23:
66:d0:af:58:08:3b:67:a0:95:35:49:50:cd:21:5f:
d9:75:5b:14:49:73:0d:69:3f:3a:9b:71:2c:0e:79:
f7:dc:42:3b:83:08:51:b1:7b:58:eb:23:ff:33:40:
0e:57:5c:79:a9:e8:7f:8d:74:4f:3e:e0:54:30:c2:
c4:9e:1d:bf:e6:3a:93:60:39:38:bd:fb:72:4b:5c:
8b:9b:8d:82:12:f5:0a:80:ac:aa:a9:b4:00:44:55:
76:33:61:2f:68:47:4e:81:73:e8:bc:83:f4:10:63:
2a:87:1a:c2:c1:d0:12:ee:03:ae:46:64:85:cc:31:
03:36:73:62:85:2a:26:2d:de:b4:8d:6e:b3:b7:d8:
26:a8:f0:e4:c2:e3:3e:0a:fd:b1:8d:ea:5e:0f:5d:
52:c5:e8:72:86:46:6f:cf:1e:f0:eb:6f:26:77:bc:
8f:71:84:70:e9:0f:a2:18:f3:ca:ac:e9:2a:e7:25:
7a:c4:f8:8a:e0:62:d8:99:44:53:28:23:6d:2d:82:
d7:9b:b5:51:98:ef:cc:93:dc:7c:ec:80:6f:ee:a3:
d3:c2:c2:9f:a8:14:3e:e6:08:34:c2:f2:0c:d8:51:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FE:4F:C8:A1:3F:FB:1E:93:4F:8D:1A:EC:60:E5:70:6A:AC:3A:20
X509v3 Authority Key Identifier:
keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/eP5PyKE_-x6TT40a7GDlcGqsOiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:b8c0:15::/48
2a03:b8c0:19::-2a03:b8c0:1e:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:20::/47
2a03:b8c0:23::-2a03:b8c0:25:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:28::/45
Signature Algorithm: sha256WithRSAEncryption
68:e9:cd:44:36:2b:39:2e:3b:ec:b9:b6:52:b5:cb:ad:35:8e:
9e:ca:68:7b:a6:d7:a7:1b:c4:97:8e:c9:14:aa:11:1b:47:5a:
9a:a6:3c:78:f1:be:90:59:02:5c:6a:22:34:15:6f:a9:1f:a5:
16:32:6d:a3:f6:c5:6b:c4:3d:39:14:f4:e2:63:32:e8:59:7a:
5f:07:99:66:8a:3f:f0:67:09:ea:5d:e7:4c:0d:ac:7f:a6:24:
77:2a:5d:68:16:91:db:00:a0:a2:36:24:10:1c:16:be:bf:8e:
5b:af:f3:af:b8:5f:33:a6:41:bf:ba:65:f1:b4:05:b7:6d:e4:
aa:ab:7f:9c:e8:7e:08:3d:b5:84:0e:02:4b:8c:b1:3b:11:1d:
95:05:85:b0:b1:c1:34:97:87:4f:df:ea:e2:64:16:22:cc:0a:
b9:c8:48:a5:97:bf:2f:54:71:cd:63:04:88:53:56:60:c8:dd:
bb:b4:d8:29:d8:da:50:29:1e:93:1e:0d:59:3c:6b:6a:28:5c:
c8:c3:0b:e2:28:d7:f3:00:3e:c3:2b:72:e9:44:cd:18:75:ef:
0b:b2:d4:bb:fd:7d:b3:ff:a3:8a:8f:01:cb:19:31:10:07:94:
d7:81:80:93:da:c6:97:16:2a:20:3b:af:0c:85:56:21:10:20:
e6:dd:ac:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:27:43 2026 by rpki-client