Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/EKLPu-_BXps6P12RURAY7iZU_Qk.roa
File: EKLPu-_BXps6P12RURAY7iZU_Qk.roa (raw, json)
Hash identifier: ykX7VmPm8Crpc7Smnx81p8a2FlVCkIIlwpsXdmp3GNI=
Subject key identifier: 10:A2:CF:BB:EF:C1:5E:9B:3A:3F:5D:91:51:10:18:EE:26:54:FD:09
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 019D72134A51C9A0355565DF03F64E93B04B
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/EKLPu-_BXps6P12RURAY7iZU_Qk.roa
Signing time: Thu 09 Apr 2026 11:49:20 +0000
ROA not before: Thu 09 Apr 2026 11:49:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 193.22.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:13:4a:51:c9:a0:35:55:65:df:03:f6:4e:93:b0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Apr 9 11:49:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10a2cfbbefc15e9b3a3f5d91511018ee2654fd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6b:d2:65:29:84:78:b5:f2:a2:f1:85:3e:e1:
f2:82:0d:de:19:42:07:76:38:26:bc:41:9e:e9:7a:
84:8c:b4:fc:af:03:e3:e7:87:4c:e1:14:75:ee:1c:
d5:41:90:58:55:a3:b1:08:79:59:0b:e4:66:fc:69:
6e:e0:41:05:69:7c:c4:5b:2f:ab:98:37:f0:63:60:
e8:2d:7a:99:f0:76:0d:d5:ae:10:c1:0c:a9:fd:10:
6b:a6:96:f8:83:fe:a4:be:60:df:87:17:c4:9a:0f:
f4:f7:2d:5d:9f:42:f3:94:20:ef:2e:b2:ba:c3:61:
09:9d:df:74:77:10:cd:4b:3e:84:05:4d:67:d6:30:
9b:a8:70:60:03:61:34:87:b7:15:2c:44:69:1d:6d:
ad:48:fc:42:1e:d1:da:59:ec:07:14:ca:85:70:f9:
4f:80:a8:31:ba:ac:75:70:9c:46:75:a9:d1:21:ec:
b4:37:16:75:9e:9e:16:32:2e:87:71:c7:3a:62:25:
e3:38:e7:60:9e:75:9d:b4:66:ca:66:6c:70:c3:fe:
24:55:04:15:57:37:39:42:da:df:18:7a:0b:bb:17:
b7:f3:24:e5:e7:f0:34:6a:13:29:8e:ef:53:83:57:
81:18:0f:55:7f:07:42:36:ec:3d:73:28:39:5c:2f:
40:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A2:CF:BB:EF:C1:5E:9B:3A:3F:5D:91:51:10:18:EE:26:54:FD:09
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/EKLPu-_BXps6P12RURAY7iZU_Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.164.0/24
Signature Algorithm: sha256WithRSAEncryption
71:77:e3:a8:01:7c:57:9a:72:1c:d6:a6:36:98:90:94:c8:0a:
9d:b9:69:9f:33:81:73:52:8d:5b:e4:fc:19:d9:d1:9e:5a:be:
b7:f7:aa:dd:9a:d8:3d:4e:36:d2:15:62:71:98:87:c5:59:86:
d7:1c:7f:8d:a3:f6:5f:4b:46:1d:23:39:bd:42:27:cf:56:16:
f2:65:a8:c7:29:04:bf:e4:f6:14:47:1d:5b:65:e6:62:4d:81:
46:cc:0f:f3:2f:92:18:5c:b0:08:df:0f:18:4d:85:66:62:1f:
af:e4:df:8c:6b:e1:f1:79:23:a0:64:bc:66:c8:a2:58:4b:a5:
ef:70:fd:71:94:1c:71:8c:de:92:5a:67:d3:8e:9b:83:9a:d8:
e7:e2:4e:29:6f:ca:93:92:aa:f4:4d:de:fe:7d:4c:5c:72:76:
33:f3:60:00:4e:1c:2b:5b:fa:8e:b5:86:08:f0:fe:3c:9a:0a:
e8:99:87:39:9a:fe:8e:60:63:41:24:32:5e:a4:c7:07:3b:5f:
0e:87:32:9e:89:aa:e3:ee:d9:f8:f7:f9:14:c5:99:c0:7c:cb:
fa:db:3b:64:ba:22:5f:4b:41:11:1d:7a:4e:a0:50:9a:52:c4:
ed:f4:43:7a:ed:c8:f9:93:57:75:d8:97:4a:d9:d0:ea:70:79:
72:53:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:41 2026 by rpki-client