Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/DEEfM-Du0Af5LNPDE_sXFjKtEhw.roa
File: DEEfM-Du0Af5LNPDE_sXFjKtEhw.roa (raw, json)
Hash identifier: vsz9RkZyZVieO16dBrHtOLWqStYKPLSumgbafIXIzR0=
Subject key identifier: 0C:41:1F:33:E0:EE:D0:07:F9:2C:D3:C3:13:FB:17:16:32:AD:12:1C
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 01A04EC201B907D252CBE69A32E8A7C2ABA8
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/DEEfM-Du0Af5LNPDE_sXFjKtEhw.roa
Signing time: Sat 29 Aug 2026 18:22:12 +0000
ROA not before: Sat 29 Aug 2026 18:22:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42241
IP address blocks: 5.182.160.0/22 maxlen: 24
2a0b:dc40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4e:c2:01:b9:07:d2:52:cb:e6:9a:32:e8:a7:c2:ab:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Aug 29 18:22:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c411f33e0eed007f92cd3c313fb171632ad121c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:a5:0c:00:aa:ec:21:09:24:d2:0a:f0:3d:
6f:0a:93:9d:13:87:af:42:db:d2:b6:25:d1:5b:ca:
1c:92:4f:46:0d:08:92:b3:5e:b7:93:9e:7e:a2:70:
22:f9:19:f1:16:6f:55:b9:5b:7c:03:94:05:6e:3f:
32:d5:f3:19:d8:c8:8f:02:37:8e:d2:80:23:0e:6a:
ae:53:42:d0:c9:cd:f7:e6:7d:d8:2d:4a:3e:47:16:
57:26:39:16:22:4c:5c:ee:68:b3:a8:7a:1e:6d:5e:
62:6f:77:6c:17:eb:fe:fe:c5:ef:84:e3:30:79:3b:
1f:c0:5a:fe:9f:ac:fb:c5:ee:11:e6:37:4b:ba:98:
a4:67:c4:82:e7:59:8a:bb:e1:f5:d6:c5:c4:69:c4:
65:1e:d2:df:f6:06:2d:c7:d2:86:b7:34:ad:4e:09:
d7:82:5a:97:49:54:8e:73:5d:2f:5c:7f:ff:3e:85:
c8:b0:58:88:22:77:ef:14:f8:ed:76:2b:6b:c3:01:
33:4e:ea:1b:62:05:45:12:ee:d6:56:c9:96:9f:9a:
33:3a:28:f1:1a:de:4b:ce:81:f3:aa:d4:1b:24:5e:
23:d1:9e:3f:5f:51:0a:51:14:b4:e6:5c:44:d7:68:
25:e4:58:5a:d8:97:ae:74:e2:2f:bf:0d:8f:06:f1:
45:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:41:1F:33:E0:EE:D0:07:F9:2C:D3:C3:13:FB:17:16:32:AD:12:1C
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/DEEfM-Du0Af5LNPDE_sXFjKtEhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.160.0/22
IPv6:
2a0b:dc40::/32
Signature Algorithm: sha256WithRSAEncryption
6b:52:31:90:8b:9e:5e:44:14:84:88:cc:84:3b:38:64:36:90:
d5:58:75:e5:98:b3:6a:37:19:36:24:bf:52:32:99:96:76:f3:
e2:a6:a7:a2:97:ea:ca:a1:85:ec:ee:6d:42:71:94:61:b7:52:
c5:70:41:2c:36:bc:7c:84:cb:95:de:5d:61:e2:3f:25:eb:ad:
73:32:a6:dc:a4:db:df:8a:73:df:38:1c:54:7f:6f:21:df:14:
a0:3f:bd:a8:97:19:0c:12:5b:a8:60:64:bd:a4:ca:de:ac:da:
4f:94:27:50:ad:96:f4:83:d7:ac:f5:ee:60:88:2b:d1:ac:5c:
3b:db:2c:94:55:da:67:b2:56:19:5d:61:a8:cb:07:e0:0d:bd:
8c:e9:59:22:6c:fe:87:fc:15:74:76:d3:92:6e:fb:51:99:47:
54:7a:e9:df:07:d3:05:e1:5d:72:f1:7c:8d:86:e8:b3:35:fe:
0c:7f:c5:e8:68:25:77:da:d3:62:26:91:cf:64:b6:02:c6:ad:
b6:c0:98:02:38:b2:02:17:85:c3:ef:d9:e1:5f:ed:42:b6:6b:
e8:87:79:4f:be:c5:ad:4c:d8:85:fc:f7:c5:71:a7:24:48:67:
6b:41:61:b0:9e:cb:33:27:ab:07:9a:ce:a8:4f:f8:7d:7c:05:
cb:f8:85:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:17 2026 by rpki-client