Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/EcU0CNE-IiMWy4rJBEYnRcLjWlg.roa
File: EcU0CNE-IiMWy4rJBEYnRcLjWlg.roa (raw, json)
Hash identifier: huHb9cQ28qENRbxt4Jo9X2c4RoM7avLuE+mizVHLkVc=
Subject key identifier: 11:C5:34:08:D1:3E:22:23:16:CB:8A:C9:04:46:27:45:C2:E3:5A:58
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 019C56AB4D2A35A6229F46B2B3A8D615E248
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/EcU0CNE-IiMWy4rJBEYnRcLjWlg.roa
Signing time: Fri 13 Feb 2026 11:03:12 +0000
ROA not before: Fri 13 Feb 2026 11:03:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43431
IP address blocks: 37.156.37.0/24 maxlen: 24
188.241.121.0/24 maxlen: 24
2a0b:1780::/30 maxlen: 30
2a0b:1784::/30 maxlen: 30
2a0e:eb00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:ab:4d:2a:35:a6:22:9f:46:b2:b3:a8:d6:15:e2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Feb 13 11:03:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11c53408d13e222316cb8ac904462745c2e35a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:94:d5:24:d5:08:de:a9:60:75:e4:f3:d2:
37:83:2f:d4:63:48:f8:30:51:9f:d1:0a:0f:26:9c:
2b:da:11:4c:7b:23:fa:b5:18:a4:e7:16:01:bc:25:
77:20:0d:ef:77:e8:d1:e5:a5:b3:b5:60:29:1a:39:
dc:98:7d:a3:64:1e:57:fc:d6:1f:27:28:7e:ff:e2:
bb:89:66:9c:19:63:24:99:e1:23:dd:d4:ab:b2:9f:
5f:1c:d3:21:82:ac:d9:c1:60:54:46:b6:da:30:80:
a7:5e:ea:d2:49:f0:a6:c2:dd:87:7f:f1:c0:d5:65:
6f:aa:20:f6:49:30:8b:d7:00:a4:76:db:0c:4c:4d:
19:0d:8b:7e:d0:26:39:dc:30:c6:94:81:b2:89:a5:
4d:30:11:77:0e:b9:19:f8:60:d6:83:a3:7c:37:67:
1d:08:41:1d:43:4d:c5:4e:da:40:e5:94:4f:5b:00:
90:db:99:3c:c2:aa:ab:3a:86:7c:86:9f:13:64:62:
46:4f:8a:66:30:90:ff:65:94:82:17:f7:e1:08:f8:
74:d9:42:e0:67:39:80:00:4c:f5:92:3f:f0:b1:67:
fe:b9:41:32:4e:ab:d7:72:e0:6b:f7:90:5e:70:21:
a4:7b:f1:5d:a7:7b:61:f8:02:94:b9:c5:89:ec:fa:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:34:08:D1:3E:22:23:16:CB:8A:C9:04:46:27:45:C2:E3:5A:58
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/EcU0CNE-IiMWy4rJBEYnRcLjWlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.37.0/24
188.241.121.0/24
IPv6:
2a0b:1780::/29
2a0e:eb00::/32
Signature Algorithm: sha256WithRSAEncryption
a6:3a:8e:ff:de:23:c8:64:76:58:40:3c:9a:02:e0:62:82:6d:
79:c4:c6:74:db:66:f7:3f:ef:cc:19:34:14:e5:8f:05:c9:9f:
fb:5e:d0:59:0e:3c:83:5f:e5:1a:32:37:36:67:ad:35:4c:c2:
5e:46:8b:0c:5b:7e:9a:16:d8:67:b3:81:55:7a:75:b5:10:a8:
34:dc:31:18:e0:98:bd:2a:96:fa:bd:d4:0c:3c:02:78:d2:e1:
f6:21:05:27:34:e9:a7:62:3d:f6:15:8d:3c:d3:91:97:41:15:
2f:6f:f4:45:a0:1e:a0:cc:54:25:bb:64:8a:01:0b:6c:35:1d:
22:b3:5a:95:e1:14:d5:3f:d4:18:8f:dd:ba:8c:28:4a:01:82:
ff:5d:d5:3c:74:bd:57:8a:b4:39:2b:aa:c6:e1:79:a2:ed:4f:
0e:b1:d4:ca:43:01:08:d5:df:b5:64:d9:00:b0:95:9f:b5:06:
de:41:16:f8:4b:de:66:06:74:91:ba:88:d3:e2:7a:60:aa:07:
bd:a5:0c:46:20:3c:e6:1b:c7:af:fa:eb:51:31:72:61:09:0f:
1b:4b:81:36:49:27:62:ee:aa:e2:9a:26:cc:70:8f:6e:86:6a:
85:b9:cd:9d:bb:dc:48:e6:42:48:f0:52:74:84:63:54:db:ec:
d0:03:c2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:22:06 2026 by rpki-client