Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/EAnpvo09NSF6t1G_SVjbZwdeL60.roa
File: EAnpvo09NSF6t1G_SVjbZwdeL60.roa (raw, json)
Hash identifier: PaoptPZhPtr0OZ8ai/p45UHnirVPoN5XFkEZ2OZThSQ=
Subject key identifier: 10:09:E9:BE:8D:3D:35:21:7A:B7:51:BF:49:58:DB:67:07:5E:2F:AD
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 019C57C71D781E01494ED31310EF23229442
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/EAnpvo09NSF6t1G_SVjbZwdeL60.roa
Signing time: Fri 13 Feb 2026 16:13:12 +0000
ROA not before: Fri 13 Feb 2026 16:13:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207279
IP address blocks: 131.222.130.0/24 maxlen: 24
193.38.34.0/24 maxlen: 24
2a12:aac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:57:c7:1d:78:1e:01:49:4e:d3:13:10:ef:23:22:94:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Feb 13 16:13:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1009e9be8d3d35217ab751bf4958db67075e2fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:bb:21:ad:a0:55:57:43:3a:73:2c:ab:ef:
02:4a:b9:fc:23:2a:42:2c:8d:b6:d6:87:37:c5:e7:
17:58:1b:68:b7:18:d3:8b:51:33:63:2e:86:64:01:
89:82:65:a7:14:31:c1:74:82:d4:43:ea:3e:a9:48:
fa:73:f4:67:f6:97:b0:ea:f0:e6:60:2a:f1:71:bf:
45:fe:ce:4b:4b:c3:b7:c7:c9:c4:b5:c6:37:3c:9b:
73:81:69:1b:c5:a6:b3:6b:6d:2a:60:d8:37:47:c0:
4c:91:18:ee:5e:dc:38:4b:84:1d:bc:c8:ba:58:9a:
df:83:1a:e7:fb:fb:a4:0e:af:ac:b0:6b:a8:3a:21:
7c:b8:12:be:37:68:08:69:8a:d5:bb:fc:12:af:2c:
30:78:2c:d0:16:06:f4:89:5e:09:98:a4:3f:1c:b5:
97:70:fa:63:ca:c3:5d:b0:54:39:25:f7:64:21:6c:
cf:9a:c1:e2:ee:ea:69:56:4a:ad:2c:8d:88:5b:84:
f8:49:19:fc:c1:6b:f8:1b:81:c7:df:3e:aa:44:7a:
50:48:86:7d:e2:3b:90:8b:44:db:8f:42:46:8c:50:
95:42:3e:f1:38:0c:73:10:91:5c:ba:cb:08:4a:57:
df:87:27:57:b7:74:dd:52:0d:51:da:4a:85:ac:37:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:09:E9:BE:8D:3D:35:21:7A:B7:51:BF:49:58:DB:67:07:5E:2F:AD
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/EAnpvo09NSF6t1G_SVjbZwdeL60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.130.0/24
193.38.34.0/24
IPv6:
2a12:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:43:0f:b7:28:16:3c:11:7b:be:c8:04:a2:5b:5c:d9:a6:fc:
39:32:5b:be:6a:31:11:90:4a:ea:6d:a5:2c:10:c2:2f:3a:70:
cd:11:1a:2c:a7:08:38:e5:98:df:80:c3:a3:3a:f8:47:c1:8c:
d4:a4:c8:b7:3d:5b:1e:ed:2c:99:a7:0a:ec:c0:39:cb:9e:14:
f8:97:d7:07:af:8f:c3:42:6a:58:32:3d:35:74:51:fd:ce:a6:
84:af:ce:2d:3d:55:22:ba:40:d3:4e:47:d8:72:f6:e9:d3:1b:
11:0b:84:e8:98:d2:91:91:fd:07:ab:6a:35:45:ac:6d:b2:6f:
08:dc:b4:7d:ac:62:a5:83:25:60:dd:4b:27:4e:c8:48:45:31:
cf:21:cd:db:68:a9:1e:7c:da:17:ab:22:4a:4f:70:1c:f6:0e:
1e:b4:c3:53:64:31:06:ca:c3:dc:96:ba:1a:1c:77:bb:c4:05:
99:90:bb:73:41:8b:30:2e:24:02:d4:1a:15:92:79:37:e5:be:
fe:a1:08:59:e6:87:d3:c7:9b:bd:cb:56:1b:27:3d:9b:c5:fb:
c6:26:14:db:87:62:ec:de:6e:eb:57:cb:cd:b0:74:0f:b7:9c:
d3:51:88:85:55:ee:c7:29:fc:4b:4b:38:9e:61:d7:c4:44:e4:
5f:f2:d5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:46 2026 by rpki-client