Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/euy-jk1gO1wrAYZN4p50UuYsEPs.roa
File: euy-jk1gO1wrAYZN4p50UuYsEPs.roa (raw, json)
Hash identifier: KSckesEUkDLC/vCF7oLNqmhTklvyJBTosAv+lpvioKk=
Subject key identifier: 7A:EC:BE:8E:4D:60:3B:5C:2B:01:86:4D:E2:9E:74:52:E6:2C:10:FB
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 019FB7E5247FC8466069CB7320F78006FC5E
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/euy-jk1gO1wrAYZN4p50UuYsEPs.roa
Signing time: Fri 31 Jul 2026 11:17:55 +0000
ROA not before: Fri 31 Jul 2026 11:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57908
IP address blocks: 46.243.16.0/24 maxlen: 24
46.243.17.0/24 maxlen: 24
46.243.18.0/24 maxlen: 24
46.243.19.0/24 maxlen: 24
46.243.20.0/24 maxlen: 24
46.243.21.0/24 maxlen: 24
46.243.22.0/24 maxlen: 24
46.243.23.0/24 maxlen: 24
2a03:6dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:e5:24:7f:c8:46:60:69:cb:73:20:f7:80:06:fc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Jul 31 11:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7aecbe8e4d603b5c2b01864de29e7452e62c10fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:b2:a2:14:c2:01:5a:80:08:93:92:25:91:
12:41:f5:9a:7b:2a:3d:c7:43:5f:3f:8f:c6:f2:99:
fb:5f:47:26:4d:af:5e:63:6f:1b:e4:66:8b:0d:01:
9e:9d:51:c8:e4:1a:b1:9e:d8:6e:7e:42:92:df:e8:
41:20:1a:a2:eb:c3:4e:53:21:93:2e:a2:e8:a3:d2:
6f:a5:6e:9a:74:6f:93:7b:aa:09:21:a9:0f:b1:3d:
ce:dc:f0:1f:ae:48:c0:2f:52:7e:69:a9:52:5a:f8:
2b:7f:05:25:3f:c6:ce:b1:29:63:78:70:66:a9:0b:
c9:4f:cc:ff:2f:8c:c4:4d:b7:2d:04:51:30:58:09:
79:13:8c:51:c0:0b:fb:ed:56:01:5c:4f:3d:25:b6:
dc:ce:51:d5:ff:ec:e3:17:60:f2:b8:10:21:0d:7f:
0c:ad:42:80:f4:b7:9b:5f:44:a7:d8:2b:68:d6:87:
6c:b6:01:c4:f9:9e:34:e0:37:a8:86:2f:27:1e:e5:
71:bf:22:32:1e:b2:fc:ee:b9:43:7d:e0:20:62:be:
60:5a:18:35:78:a6:7f:05:9f:48:68:32:51:95:c2:
12:f9:14:18:c7:20:b6:d6:78:11:0d:bf:15:01:4c:
81:bb:6a:1c:f3:85:8f:ef:98:fa:78:bd:e6:2d:4f:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EC:BE:8E:4D:60:3B:5C:2B:01:86:4D:E2:9E:74:52:E6:2C:10:FB
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/euy-jk1gO1wrAYZN4p50UuYsEPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.16.0/21
IPv6:
2a03:6dc0::/32
Signature Algorithm: sha256WithRSAEncryption
3a:35:5a:9f:d0:c6:02:8d:bc:f1:05:c4:17:6b:b9:06:96:08:
dc:12:b9:9f:c9:02:fd:29:c8:1d:9d:20:91:a2:7b:71:ad:e6:
e3:23:2f:ef:9b:97:b3:a9:46:5a:4b:6d:3c:18:2e:66:01:2e:
3b:cb:f0:50:4e:c1:8e:b5:83:da:06:00:2a:e5:40:f1:e6:35:
58:05:36:fc:d4:6e:dd:74:6c:cc:13:31:7e:5a:63:50:d9:bd:
02:45:39:f4:0f:39:8a:bb:48:10:94:ec:e9:9a:70:40:31:3e:
53:d1:91:a4:a4:d1:87:b1:e9:97:f8:89:89:0c:75:47:78:80:
eb:1b:c1:20:32:ae:99:5c:ba:b7:e2:d0:67:c7:48:4f:95:b8:
93:65:17:1a:bf:4f:63:80:ac:72:53:f0:28:15:b4:6d:aa:6a:
e6:0b:de:da:0f:33:49:ca:b4:e0:17:39:59:2a:d5:a9:e1:40:
25:32:7e:12:c4:70:70:f7:8c:66:28:4d:c0:92:7f:7d:a2:e4:
1e:58:f0:e5:e4:4a:c1:d4:4e:78:a0:f5:84:5e:c2:9d:c2:4d:
4d:d8:3a:e4:e9:32:c4:06:f1:81:b4:e3:47:cb:e7:5f:06:7c:
33:5a:07:1b:56:9d:1c:80:ae:f7:b0:50:cf:1c:5b:c9:09:86:
b9:09:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:24:40 2026 by rpki-client