Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/EQLn3HW1S_EC8AUyKNf8y-4dMRc.roa
File: EQLn3HW1S_EC8AUyKNf8y-4dMRc.roa (raw, json)
Hash identifier: 8AWgdnyTdQJ3pPK3imIR1EnV54K6sHT0kGjtuqhN4wc=
Subject key identifier: 11:02:E7:DC:75:B5:4B:F1:02:F0:05:32:28:D7:FC:CB:EE:1D:31:17
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 019D4BA8C86EBB9C115719ACB2FE30E3C79C
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/EQLn3HW1S_EC8AUyKNf8y-4dMRc.roa
Signing time: Thu 02 Apr 2026 00:47:25 +0000
ROA not before: Thu 02 Apr 2026 00:47:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59455
IP address blocks: 194.26.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4b:a8:c8:6e:bb:9c:11:57:19:ac:b2:fe:30:e3:c7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Apr 2 00:47:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1102e7dc75b54bf102f0053228d7fccbee1d3117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:dd:a5:27:5a:2a:8c:fb:89:af:40:23:d5:
68:6e:33:ac:2b:d0:75:e5:f5:ae:f5:9d:dc:f5:4d:
b8:fa:f0:1e:ec:f0:aa:02:7b:2c:79:67:30:c5:8f:
24:50:65:d4:c6:be:69:46:2f:95:ac:c8:7c:56:e6:
d8:f1:12:e4:1d:23:af:8c:d1:95:a4:8d:20:a9:9c:
cf:ac:6c:55:d1:2a:ce:07:e1:60:5c:63:12:77:d8:
81:d1:9a:df:3f:1c:12:74:ea:3d:59:19:cd:95:81:
f4:21:17:27:e5:32:4a:0d:0c:fc:60:e9:66:ed:ef:
77:5c:23:21:82:f1:f6:43:18:d8:5b:1f:88:30:54:
22:22:6f:27:df:8d:74:aa:89:83:49:20:4e:4a:4a:
db:bf:08:e2:1a:da:4e:18:ef:20:31:4f:cd:cb:5e:
29:66:22:6b:01:6b:4b:09:5b:60:0f:d0:1a:30:c7:
29:ea:a7:59:1c:49:e7:be:be:ce:21:4c:70:71:06:
52:22:92:95:66:5b:a4:61:ad:fb:3d:da:dd:c6:ed:
1a:2a:02:27:89:ac:da:39:fe:25:26:74:21:49:86:
19:b4:2d:5a:2f:ea:d8:7d:a8:65:11:6a:5f:5a:44:
ef:0d:41:42:07:ea:43:45:54:7e:28:a8:e0:50:9e:
c1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:02:E7:DC:75:B5:4B:F1:02:F0:05:32:28:D7:FC:CB:EE:1D:31:17
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/EQLn3HW1S_EC8AUyKNf8y-4dMRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.198.0/24
Signature Algorithm: sha256WithRSAEncryption
28:54:c4:3a:3b:be:60:6b:1c:55:61:da:8f:9b:fc:8a:b1:a1:
56:95:23:4e:2e:b5:bf:36:c0:13:de:40:07:99:d3:ea:e6:21:
5a:05:db:ef:84:a3:5c:02:7e:16:62:ee:fb:de:e4:48:3a:8c:
e5:2c:3e:d6:e3:0b:51:6d:c9:41:6c:11:41:fd:73:dd:25:bd:
06:89:42:54:23:0f:64:0b:c8:f2:fc:c7:71:56:25:62:4f:e9:
d6:97:7e:0f:06:1e:6e:8a:78:6d:f9:5f:81:ff:95:89:12:a1:
aa:f5:d9:85:17:15:07:76:6a:ce:46:29:c8:40:61:c7:45:52:
dd:de:af:1c:07:9f:fa:d4:6c:02:45:15:c2:87:e7:a1:29:ab:
63:08:c6:63:26:a8:8f:cc:a9:68:6a:27:70:9c:53:37:da:49:
ad:fc:e7:f7:83:7c:36:4a:9c:d6:36:f6:bf:7c:49:41:eb:76:
81:b6:7b:d5:c2:52:eb:b9:e8:ea:5b:2f:9b:ac:07:60:96:ca:
11:18:a1:64:45:d6:9e:15:0a:0e:78:3f:05:80:ef:1e:46:38:
0a:bf:d1:02:be:76:a9:88:2b:d4:fd:94:9a:b3:9a:5d:f2:7a:
50:a6:ad:fe:3b:2c:26:1a:49:84:af:d8:3d:f4:af:71:7d:ac:
6a:27:ad:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1LqMhuu5wRVxmssv4w48ecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMWQ4ODI0NmFiNTdlMjA0ZGVhNTFlOTI0M2M2NzI1MmRj
YmE1ODUwHhcNMjYwNDAyMDA0NzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTAyZTdkYzc1YjU0YmYxMDJmMDA1MzIyOGQ3ZmNjYmVlMWQzMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryDdpSdaKoz7ia9AI9VobjOsK9B1
5fWu9Z3c9U24+vAe7PCqAnsseWcwxY8kUGXUxr5pRi+VrMh8VubY8RLkHSOvjNGV
pI0gqZzPrGxV0SrOB+FgXGMSd9iB0ZrfPxwSdOo9WRnNlYH0IRcn5TJKDQz8YOlm
7e93XCMhgvH2QxjYWx+IMFQiIm8n3410qomDSSBOSkrbvwjiGtpOGO8gMU/Ny14p
ZiJrAWtLCVtgD9AaMMcp6qdZHEnnvr7OIUxwcQZSIpKVZlukYa37Pdrdxu0aKgIn
iazaOf4lJnQhSYYZtC1aL+rYfahlEWpfWkTvDUFCB+pDRVR+KKjgUJ7BvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEC59x1tUvxAvAFMijX/MvuHTEXMB8GA1UdIwQY
MBaAFAEdiCRqtX4gTepR6SQ8ZyUty6WFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTct
MDA4YTgwZjZmZjExLzEvRVFMbjNIVzFTX0VDOEFVeUtOZjh5LTRkTVJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTctMDA4YTgwZjZmZjEx
LzEvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhrGMA0G
CSqGSIb3DQEBCwUAA4IBAQAoVMQ6O75gaxxVYdqPm/yKsaFWlSNOLrW/NsAT3kAH
mdPq5iFaBdvvhKNcAn4WYu773uRIOozlLD7W4wtRbclBbBFB/XPdJb0GiUJUIw9k
C8jy/MdxViViT+nWl34PBh5uinht+V+B/5WJEqGq9dmFFxUHdmrORinIQGHHRVLd
3q8cB5/61GwCRRXCh+ehKatjCMZjJqiPzKloaidwnFM32kmt/Of3g3w2SpzWNva/
fElB63aBtnvVwlLruejqWy+brAdglsoRGKFkRdaeFQoOeD8FgO8eRjgKv9ECvnap
iCvU/ZSas5pd8npQpq3+OywmGkmEr9g99K9xfaxqJ636
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:55 2026 by rpki-client