Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/E8eVpxCjI3JO3aZBekKKE86GtQY.roa
File: E8eVpxCjI3JO3aZBekKKE86GtQY.roa (raw, json)
Hash identifier: yaK6Legb4P37RrLL5ekv68BKuNP9NpTAMjo4dwCH2Q8=
Subject key identifier: 13:C7:95:A7:10:A3:23:72:4E:DD:A6:41:7A:42:8A:13:CE:86:B5:06
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01994E4430DA7B89DA140C9352DCE6BB169B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/E8eVpxCjI3JO3aZBekKKE86GtQY.roa
Signing time: Mon 15 Sep 2025 16:45:15 +0000
ROA not before: Mon 15 Sep 2025 16:45:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 5.180.4.0/22 maxlen: 22
5.182.28.0/22 maxlen: 22
45.86.16.0/22 maxlen: 22
89.39.242.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.73.0/24 maxlen: 24
91.242.74.0/23 maxlen: 23
91.242.94.0/24 maxlen: 24
91.242.95.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
178.175.176.0/22 maxlen: 22
185.40.105.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
194.50.206.0/23 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/22 maxlen: 22
195.138.105.0/24 maxlen: 24
195.138.106.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.138.122.0/23 maxlen: 23
195.138.124.0/22 maxlen: 22
195.138.124.0/24 maxlen: 24
195.216.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:44:30:da:7b:89:da:14:0c:93:52:dc:e6:bb:16:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 15 16:45:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13c795a710a323724edda6417a428a13ce86b506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:2a:6b:b6:7e:73:67:bd:aa:e8:6f:d4:d5:
f1:3a:12:4e:0e:8a:cb:27:0e:21:2c:77:c7:57:d7:
17:9a:95:d8:ab:4e:48:51:5a:05:4e:06:2e:5c:8b:
23:3e:6b:23:84:17:c5:b7:61:59:dc:1c:25:26:5a:
7f:7f:ff:48:29:e4:7c:15:a8:7e:ee:84:d2:8d:a0:
94:5f:54:ff:a9:be:71:a4:23:93:1c:fa:9c:4c:04:
4b:fb:5b:9a:1c:52:e9:c5:30:ea:5e:52:71:c0:f0:
78:a4:a6:30:d5:2c:22:50:76:92:a2:ee:50:0c:c7:
31:7d:f7:d6:da:b2:fa:23:be:3a:b3:aa:84:c1:15:
db:42:65:c0:aa:35:db:3c:1b:53:71:4e:59:b9:33:
02:d8:b9:b5:4b:77:ee:4d:35:e1:4a:3e:c8:c3:b9:
0b:ab:c7:57:a4:d8:f3:4e:e6:79:e5:c8:ed:00:47:
51:c4:4f:bc:72:95:0e:b0:9a:eb:c5:a6:8c:5c:15:
e5:ad:3d:43:96:c4:0e:54:09:b5:4e:5e:52:d3:9f:
d3:02:0d:8a:cf:21:b0:2f:16:45:5c:90:1d:86:82:
3f:b0:df:c0:1b:71:2d:1c:4f:37:9a:18:ff:e5:b2:
3b:8a:41:6c:2a:16:de:4e:d6:e5:6a:46:2a:c4:a6:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C7:95:A7:10:A3:23:72:4E:DD:A6:41:7A:42:8A:13:CE:86:B5:06
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/E8eVpxCjI3JO3aZBekKKE86GtQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.4.0/22
5.182.28.0/22
45.86.16.0/22
89.39.242.0/24
91.242.72.0/22
91.242.94.0/23
91.242.103.0/24
94.231.198.0/24
178.175.176.0/22
185.40.105.0/24
185.180.145.0/24
185.212.11.0/24
194.50.206.0/23
195.138.103.0-195.138.107.255
195.138.112.0/24
195.138.120.0/24
195.138.122.0-195.138.127.255
195.216.156.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:7c:ea:b8:d9:0f:ea:2a:0a:8d:cd:46:f6:96:e3:72:e4:68:
88:db:ec:58:03:a4:11:54:a9:02:71:f2:05:00:1c:1c:b1:31:
b3:63:7a:a9:66:43:7b:61:81:0f:4d:54:2c:08:61:16:22:d3:
b6:af:9a:8e:8c:07:9b:70:1b:8f:14:f9:60:fd:f9:95:b8:3f:
d8:59:6f:4a:25:8d:55:f7:14:20:3d:6c:57:b6:d5:a5:df:75:
0e:9e:bf:60:49:75:2d:b7:a7:b4:fd:01:e0:c4:a5:aa:dc:5c:
46:b1:11:c2:5c:46:77:ac:04:d4:3c:af:df:9b:fd:63:7d:05:
3d:3f:fa:c9:a5:e1:c9:8e:58:1a:cd:99:e6:f4:3e:a3:b5:5a:
ac:0a:fe:11:f1:f7:73:4d:93:e0:56:42:8e:63:8c:16:1b:c3:
c0:ac:62:35:db:60:b7:cf:05:d2:fd:e3:c4:b6:f9:13:b2:a1:
7e:83:94:7c:8f:11:6c:ee:16:b1:ed:5d:21:86:13:df:84:84:
f0:7a:b0:b6:1d:0b:f7:fd:08:9c:45:0c:02:99:fe:d3:98:04:
e1:88:b0:c1:3d:a1:05:1b:7a:3a:96:db:e3:7c:0b:b1:f6:60:
6a:28:3c:e1:40:b7:89:bb:33:fb:a2:57:03:b3:3e:6f:d3:4d:
73:e9:fe:e2
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZlORDDae4naFAyTUtzmuxabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjUwOTE1MTY0NTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2M3OTVhNzEwYTMyMzcyNGVkZGE2NDE3YTQyOGExM2NlODZiNTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPcqa7Z+c2e9quhv1NXxOhJODorL
Jw4hLHfHV9cXmpXYq05IUVoFTgYuXIsjPmsjhBfFt2FZ3BwlJlp/f/9IKeR8Fah+
7oTSjaCUX1T/qb5xpCOTHPqcTARL+1uaHFLpxTDqXlJxwPB4pKYw1SwiUHaSou5Q
DMcxfffW2rL6I746s6qEwRXbQmXAqjXbPBtTcU5ZuTMC2Lm1S3fuTTXhSj7Iw7kL
q8dXpNjzTuZ55cjtAEdRxE+8cpUOsJrrxaaMXBXlrT1DlsQOVAm1Tl5S05/TAg2K
zyGwLxZFXJAdhoI/sN/AG3EtHE83mhj/5bI7ikFsKhbeTtblakYqxKZTJQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFBPHlacQoyNyTt2mQXpCihPOhrUGMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvRThlVnB4Q2pJM0pPM2FaQmVrS0tFODZHdFFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfAMEAgW0
BAMEAgW2HAMEAi1WEAMEAFkn8gMEAlvySAMEAVvyXgMEAFvyZwMEAF7nxgMEArKv
sAMEALkoaQMEALm0kQMEALnUCwMEAcIyzjAMAwQAw4pnAwQCw4poAwQAw4pwAwQA
w4p4MAwDBAHDinoDBAfDigADBALD2JwwDQYJKoZIhvcNAQELBQADggEBACt86rjZ
D+oqCo3NRvaW43LkaIjb7FgDpBFUqQJx8gUAHByxMbNjeqlmQ3thgQ9NVCwIYRYi
07avmo6MB5twG48U+WD9+ZW4P9hZb0oljVX3FCA9bFe21aXfdQ6ev2BJdS23p7T9
AeDEparcXEaxEcJcRnesBNQ8r9+b/WN9BT0/+sml4cmOWBrNmeb0PqO1WqwK/hHx
93NNk+BWQo5jjBYbw8CsYjXbYLfPBdL948S2+ROyoX6DlHyPEWzuFrHtXSGGE9+E
hPB6sLYdC/f9CJxFDAKZ/tOYBOGIsME9oQUbejqW2+N8C7H2YGooPOFAt4m7M/ui
VwOzPm/TTXPp/uI=
-----END CERTIFICATE-----
Generated at Tue Sep 16 05:11:36 2025 by rpki-client