Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/EjfV30vv6k_ohHepxeq2PCDx45Q.roa
File: EjfV30vv6k_ohHepxeq2PCDx45Q.roa (raw, json)
Hash identifier: EhZPyvdI5Ap5e29e1ot9AXyXgHh2jd9aeESzqEBO/AQ=
Subject key identifier: 12:37:D5:DF:4B:EF:EA:4F:E8:84:77:A9:C5:EA:B6:3C:20:F1:E3:94
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A0B467F71AF8714B1A89EB279D876E9681
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/EjfV30vv6k_ohHepxeq2PCDx45Q.roa
Signing time: Fri 18 Sep 2026 12:05:07 +0000
ROA not before: Fri 18 Sep 2026 12:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 213.220.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:67:f7:1a:f8:71:4b:1a:89:eb:27:9d:87:6e:96:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Sep 18 12:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1237d5df4befea4fe88477a9c5eab63c20f1e394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:e0:5e:8f:33:fe:6c:01:76:ba:aa:50:d9:
10:c1:3c:78:bb:ab:36:5e:04:b6:d9:d5:00:91:c3:
6f:32:f0:94:4c:3a:b6:67:0b:96:b5:29:a7:ba:3a:
3c:03:77:7b:09:07:b3:13:cb:71:61:4d:7a:e0:ee:
be:6d:c6:f4:63:68:04:47:5e:3e:1b:9b:cf:c7:74:
06:65:03:d1:31:c8:1c:45:e0:a1:93:5e:36:e2:31:
c5:df:09:67:ff:34:62:f4:32:15:4b:48:80:e5:a2:
df:c6:21:c5:d3:cf:1d:a3:83:a5:4c:72:e8:ca:9f:
bd:55:f6:b3:7a:b5:84:4b:0d:9b:3c:b9:e9:41:7e:
96:62:cb:9c:aa:41:24:7a:e6:39:98:82:a4:78:f5:
e8:4f:d0:32:e0:16:ce:66:8a:ee:d5:46:a0:8e:d5:
13:71:b7:5f:f8:3b:46:b2:01:50:10:c2:11:e9:57:
08:90:4b:32:30:cf:29:c6:20:25:14:35:c2:a6:ac:
61:f3:f8:57:01:6e:45:f8:a4:1a:ef:15:8c:e3:0d:
39:88:3f:14:e0:51:c9:38:67:d2:00:1b:82:76:b3:
13:d6:26:ed:f5:50:53:f8:50:42:1f:ea:ab:de:47:
81:0b:07:c2:b4:40:3c:7f:26:e3:86:1e:72:77:65:
bd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:37:D5:DF:4B:EF:EA:4F:E8:84:77:A9:C5:EA:B6:3C:20:F1:E3:94
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/EjfV30vv6k_ohHepxeq2PCDx45Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:06:90:81:ed:1b:50:0c:d9:42:44:50:4f:d2:26:de:01:e6:
cf:41:3a:cb:6d:08:f9:b1:0b:e1:93:f6:bd:a1:19:f2:03:09:
41:59:9a:45:36:2a:29:9b:94:b5:7c:40:14:88:a1:8e:7a:35:
d7:f7:72:c2:19:7c:3b:ee:d3:04:e5:a9:86:7e:3d:e6:67:83:
6e:a7:83:01:e0:20:ba:99:e2:c3:e0:68:f1:f0:0e:b5:aa:09:
08:f6:48:e4:13:5d:6c:76:8b:41:0d:94:af:a3:bf:83:1b:cd:
5a:e7:00:93:b9:11:ad:90:41:c3:5e:6d:74:62:2b:6a:5b:ca:
c5:27:d3:cb:5c:b7:ea:b3:8d:53:da:21:9e:78:d2:bd:d2:20:
02:e4:ab:34:f4:34:13:ab:c4:b0:eb:0f:d2:3a:8d:36:0e:aa:
37:af:31:ae:0a:bb:3d:ea:09:77:14:45:4c:a4:85:12:e4:36:
0d:c5:b8:61:4e:57:24:dc:f9:bd:8c:e7:a7:bb:0e:8a:f7:75:
9a:be:da:cf:e0:5d:71:82:79:ae:14:1c:3e:f1:62:b3:25:66:
2b:21:3c:07:aa:03:e5:9a:b3:89:26:fb:f3:b6:ef:e2:a2:0f:
60:cb:6b:d9:30:b1:dc:ff:5b:7a:0e:b1:fb:6a:82:1f:6c:30:
41:6b:aa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:28 2026 by rpki-client