Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/EMYZWM6m9RpWCTQk3MWhN1mZ9-0.roa
File: EMYZWM6m9RpWCTQk3MWhN1mZ9-0.roa (raw, json)
Hash identifier: c9D6HF2YxGeHbf3oxM7nmQWg4IZpAm/i+q7H/DzFs4k=
Subject key identifier: 10:C6:19:58:CE:A6:F5:1A:56:09:34:24:DC:C5:A1:37:59:99:F7:ED
Certificate issuer: /CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Certificate serial: 019B7AC7C36B2F715FF47D85E8139E0012E3
Authority key identifier: DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/EMYZWM6m9RpWCTQk3MWhN1mZ9-0.roa
Signing time: Thu 01 Jan 2026 18:17:50 +0000
ROA not before: Thu 01 Jan 2026 18:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205892
IP address blocks: 62.164.172.0/22 maxlen: 24
95.129.28.0/22 maxlen: 24
185.190.72.0/22 maxlen: 24
195.158.216.0/22 maxlen: 24
2a0a:540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:c3:6b:2f:71:5f:f4:7d:85:e8:13:9e:00:12:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Validity
Not Before: Jan 1 18:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10c61958cea6f51a56093424dcc5a1375999f7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:24:54:a0:97:bc:27:d3:e6:11:5a:bf:5d:
69:ba:a3:ff:2f:2e:8b:b7:7b:b1:fb:ce:43:d4:f0:
46:96:6b:6e:05:c8:95:23:49:df:c1:13:cc:4c:34:
7a:96:b8:ee:9b:b9:90:95:2c:64:1d:c4:93:82:3b:
07:8c:d3:28:ba:cf:74:9a:05:e0:13:eb:72:0a:e8:
f4:66:26:af:04:59:2e:11:1f:18:78:da:07:ba:80:
35:73:cc:00:56:01:c2:c0:5d:d3:70:91:bf:cf:50:
c8:33:a4:5a:0c:3f:c3:e3:43:37:95:34:57:c3:d5:
23:ac:c3:61:87:98:0c:05:e8:d5:b0:d5:70:bf:fc:
9c:f4:1b:7e:d8:7a:b4:03:e7:c1:03:43:4a:d5:89:
87:31:fd:5c:ac:0e:d7:f9:8d:04:2d:f8:45:ed:ae:
0d:9f:82:b2:6d:db:e5:8e:3f:9e:74:56:82:22:45:
6d:e7:80:41:67:12:0c:d9:43:08:3c:9d:0e:95:d6:
12:76:07:70:d2:0f:35:31:94:64:5e:73:8b:1c:6a:
a4:35:3c:c3:c5:44:38:2d:c9:83:95:9c:f2:f6:71:
02:2a:8a:0e:4f:f4:e6:42:c2:eb:83:49:86:81:18:
6c:a2:a2:2e:8d:ca:4f:56:3b:7e:28:0f:94:c9:ac:
46:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C6:19:58:CE:A6:F5:1A:56:09:34:24:DC:C5:A1:37:59:99:F7:ED
X509v3 Authority Key Identifier:
keyid:DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/EMYZWM6m9RpWCTQk3MWhN1mZ9-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.172.0/22
95.129.28.0/22
185.190.72.0/22
195.158.216.0/22
IPv6:
2a0a:540::/29
Signature Algorithm: sha256WithRSAEncryption
7e:07:a0:3a:f5:32:92:13:f1:6d:3f:b8:40:72:b6:74:09:63:
1b:ad:5c:fc:1a:16:26:68:2f:76:b6:44:ad:af:fa:42:84:7c:
ec:da:f0:32:2c:f9:fe:19:af:ff:72:4e:28:01:e0:d6:2e:65:
1b:49:d7:21:48:ec:09:8c:ef:20:8c:f6:a1:ed:f7:0c:f8:84:
d5:22:02:3a:bd:b9:d0:53:37:89:ae:b6:7c:f7:f0:e3:11:53:
a5:b9:1b:a2:66:25:df:c1:4a:3b:d5:23:34:d6:8c:84:f2:d5:
06:20:18:1d:b2:25:51:b8:18:eb:53:9e:32:c7:aa:18:ce:27:
d9:36:68:6b:b3:83:e1:c8:51:c3:4a:23:c1:c0:9c:4f:e0:74:
d4:96:e4:52:77:57:d5:b5:b0:6a:07:75:7b:8c:6f:99:2f:39:
79:b3:c6:e6:7c:db:49:26:9f:40:4b:bc:a5:81:1a:dc:f9:e1:
bf:06:e4:88:f6:a2:79:c6:b0:09:f2:ab:92:18:ac:45:a5:90:
69:d2:f1:cd:57:89:2a:13:fa:69:22:fd:a2:e2:49:3e:8c:9a:
ee:ea:32:51:2b:d4:25:05:4d:e3:24:00:d6:27:b9:3f:0b:fa:
96:02:ea:1f:e4:7e:ed:06:04:15:f7:5c:4a:58:05:66:fa:b6:
f9:fa:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:20 2026 by rpki-client