Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/eUbHTyUSavH8iggt7_qSKew38qc.roa
File: eUbHTyUSavH8iggt7_qSKew38qc.roa (raw, json)
Hash identifier: DkFbowlItExQYC/lsxmajYQ2K4RpBXLaJENP+PgEu2I=
Subject key identifier: 79:46:C7:4F:25:12:6A:F1:FC:8A:08:2D:EF:FA:92:29:EC:37:F2:A7
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019C6710FEBE063524ACBAB93EA97E71CA5C
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/eUbHTyUSavH8iggt7_qSKew38qc.roa
Signing time: Mon 16 Feb 2026 15:28:12 +0000
ROA not before: Mon 16 Feb 2026 15:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211421
IP address blocks: 213.109.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:67:10:fe:be:06:35:24:ac:ba:b9:3e:a9:7e:71:ca:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Feb 16 15:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7946c74f25126af1fc8a082deffa9229ec37f2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:2d:0d:d5:76:92:2c:4f:fa:e3:7b:2a:4b:
6b:06:8f:83:b6:88:77:c8:7c:a7:e1:97:76:d4:6b:
d1:f2:a0:91:34:8b:5c:39:47:cc:7b:7d:0e:9a:b2:
fe:c5:43:0e:08:b9:71:c8:27:b9:62:84:d6:c4:8a:
10:56:95:c5:54:35:10:2a:24:6b:be:18:57:39:7e:
dd:38:c3:2b:63:e9:bc:09:f7:4e:2a:c1:1b:53:0d:
6c:93:15:c1:59:43:13:2d:e7:88:59:32:27:64:b5:
4c:e3:85:04:fc:f8:69:25:0f:23:2b:fc:07:24:19:
14:6c:f9:1b:91:5a:78:d2:76:5e:b9:74:df:b0:15:
ef:e2:49:5b:13:fb:9b:f7:c4:ef:51:72:a5:2b:92:
5b:94:b2:28:9a:a7:fe:56:0d:d5:e1:9e:72:13:05:
ca:d6:89:43:c6:70:2b:ac:81:20:8d:b4:ee:8e:9f:
25:5b:7a:0a:aa:51:4a:c0:ed:52:1b:21:41:ae:f9:
f3:68:fd:f0:61:dc:37:77:71:bd:e9:ff:1b:3d:f9:
45:40:a6:1d:61:f4:35:1e:d4:e8:a6:cb:8c:ab:18:
9a:c5:7d:2f:10:a6:06:45:ec:45:9c:dc:c2:12:cc:
59:11:e9:0b:ca:ce:6e:e7:a5:98:ed:48:73:a5:9d:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:46:C7:4F:25:12:6A:F1:FC:8A:08:2D:EF:FA:92:29:EC:37:F2:A7
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/eUbHTyUSavH8iggt7_qSKew38qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.199.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:7f:d5:74:6b:01:03:19:d8:9a:4c:57:b9:0c:4c:d3:79:3d:
f8:76:42:53:cc:86:6f:7e:c3:1f:84:50:ff:e4:0c:6b:b4:1a:
c3:0d:a2:40:03:83:33:5a:2e:03:97:de:f2:07:ff:ce:70:48:
ff:e9:ca:29:df:c1:48:d7:f1:47:5f:f8:e7:1e:da:f3:a2:46:
60:3f:bd:23:9d:5d:39:4b:e1:6c:51:89:51:99:8e:5e:31:db:
57:e6:49:63:62:2a:22:32:ec:42:a9:7d:ff:da:d8:95:00:a0:
59:63:30:e8:fa:f7:89:9f:d0:68:98:3f:0e:e1:e0:46:87:6f:
d7:0d:ea:61:71:35:76:f3:fa:a5:4d:51:28:72:19:a1:e6:ab:
06:be:d3:42:4f:7b:67:4a:bb:0f:b2:88:e3:08:69:e3:de:ed:
5d:5c:0b:6b:8e:92:a7:9d:5e:8d:c8:d1:b4:28:6c:5f:a5:29:
e8:5c:d5:d6:35:29:e9:5f:b2:f5:a4:b2:13:9f:98:f1:6a:a7:
c8:5b:44:60:59:54:ab:ae:87:5d:04:a4:7c:ed:ea:fc:ab:cb:
7f:34:67:0d:cb:05:89:45:a5:96:e9:87:39:b9:e7:dc:51:3d:
5f:ed:ed:b1:29:ec:7b:1f:a3:5e:cd:29:02:47:81:cb:db:dc:
8a:24:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:39 2026 by rpki-client