Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/EI7CwvWnDzGoyUcQkEgispb35mE.roa
File: EI7CwvWnDzGoyUcQkEgispb35mE.roa (raw, json)
Hash identifier: t9+WU2EdfrtjbLHdXRpNBIukhT3LimVMvmcXGL3pKdk=
Subject key identifier: 10:8E:C2:C2:F5:A7:0F:31:A8:C9:47:10:90:48:22:B2:96:F7:E6:61
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 019E415E41EA45591D063037603371FD902D
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/EI7CwvWnDzGoyUcQkEgispb35mE.roa
Signing time: Tue 19 May 2026 17:52:36 +0000
ROA not before: Tue 19 May 2026 17:52:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213533
IP address blocks: 93.92.81.0/24 maxlen: 24
194.113.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:41:5e:41:ea:45:59:1d:06:30:37:60:33:71:fd:90:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: May 19 17:52:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=108ec2c2f5a70f31a8c94710904822b296f7e661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7e:9c:b5:05:dc:55:9a:a0:3b:01:3a:ed:31:
a6:a6:d1:62:ae:db:9e:82:92:47:e8:e2:84:06:0b:
a4:17:9e:a9:aa:2c:de:01:a0:42:20:75:2f:14:9d:
77:c3:2d:cd:d2:64:7f:bd:d0:24:be:1d:88:a0:6d:
f5:29:8e:be:62:cf:7e:0f:43:f1:c1:73:18:d6:be:
b8:20:4c:a2:d3:a0:6f:fd:8d:34:00:52:62:15:10:
4c:5e:73:d3:fe:ac:67:05:98:d4:dc:a5:6b:8c:9f:
7b:70:e7:62:54:ec:e3:66:34:30:c5:07:59:a6:40:
52:25:47:0f:d3:1c:86:22:9c:cf:a0:22:e7:87:df:
3c:61:52:b6:1d:60:05:cb:cb:c3:61:0e:7a:12:cb:
c4:d1:9f:49:4f:42:2b:13:83:32:a5:4b:c2:b9:69:
bf:df:0f:e7:4d:df:2e:9b:52:46:43:c3:6e:23:f1:
d0:d1:82:39:8e:cf:62:07:96:89:90:e6:a1:86:37:
7a:ad:32:eb:a0:f7:39:65:0d:c8:89:8d:de:96:98:
35:2d:6d:c4:36:d5:33:f2:fe:57:c8:75:9c:48:c4:
11:81:97:8e:b6:86:a4:80:6e:a0:ea:bf:75:02:5a:
66:b8:2b:76:db:79:9a:d9:1a:a2:7e:88:18:fa:76:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8E:C2:C2:F5:A7:0F:31:A8:C9:47:10:90:48:22:B2:96:F7:E6:61
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/EI7CwvWnDzGoyUcQkEgispb35mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.81.0/24
194.113.245.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6c:65:05:1e:93:cf:88:92:2a:7b:4c:99:97:29:e9:d4:ec:
5e:44:b9:eb:61:43:ae:af:8e:7e:30:a3:02:bc:25:b1:de:78:
16:2a:76:a1:f1:43:2d:4e:18:29:1a:24:b9:e1:dc:94:a5:8c:
ac:6d:bf:40:4b:eb:5d:f2:2e:7d:d1:1f:fb:25:b0:da:36:2f:
b6:93:4c:02:7d:39:be:be:df:d2:b2:e1:d0:ee:31:d4:74:a8:
84:e3:35:93:75:f7:a2:3c:be:97:c0:d8:d7:3d:fc:31:b3:86:
85:dd:af:97:0f:b7:21:f3:04:1f:1a:47:a5:49:e8:57:b5:7c:
7d:f3:4e:8f:5c:be:5f:1c:52:ac:79:b3:89:55:dc:3c:cf:b0:
9d:13:38:ca:a6:23:15:2c:f2:d2:47:6c:d3:44:b7:41:35:3a:
ba:12:7f:5c:ab:b9:17:0a:55:e2:6e:15:1c:81:23:ba:91:f1:
49:40:a2:b5:07:62:4d:73:22:a3:8b:3f:d1:81:b3:66:d0:b7:
18:b4:05:30:99:25:76:d6:f9:bb:5e:42:0a:5d:2a:3d:ed:98:
ab:fd:01:70:23:73:e3:ed:71:a3:19:b0:ad:dd:40:90:44:5d:
fb:4e:e6:88:93:24:21:28:96:80:8c:ac:11:3e:b7:11:a8:e9:
19:68:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:19:33 2026 by rpki-client