Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/eYPHruODAUHn5NL9pH8AAoWQXZk.roa
File: eYPHruODAUHn5NL9pH8AAoWQXZk.roa (raw, json)
Hash identifier: eY/IxVvV/xxSRLpT7rlNJCigMZ+7lyDwjM5BIjySykQ=
Subject key identifier: 79:83:C7:AE:E3:83:01:41:E7:E4:D2:FD:A4:7F:00:02:85:90:5D:99
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 01A14DE51B1C38EF930EE5FA4BC41A03773B
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/eYPHruODAUHn5NL9pH8AAoWQXZk.roa
Signing time: Sun 18 Oct 2026 07:23:42 +0000
ROA not before: Sun 18 Oct 2026 07:23:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203462
IP address blocks: 2.57.84.0/22 maxlen: 22
2.57.84.0/24 maxlen: 24
2.57.85.0/24 maxlen: 24
2.57.86.0/24 maxlen: 24
2.57.87.0/24 maxlen: 24
185.134.68.0/22 maxlen: 22
185.134.68.0/24 maxlen: 24
185.134.69.0/24 maxlen: 24
185.134.70.0/24 maxlen: 24
185.134.71.0/24 maxlen: 24
185.139.181.0/24 maxlen: 24
185.139.182.0/24 maxlen: 24
2a06:eb00::/29 maxlen: 29
2a06:eb00::/32 maxlen: 32
2a06:eb01::/32 maxlen: 32
2a06:eb02::/32 maxlen: 32
2a06:eb03::/32 maxlen: 32
2a06:eb04::/32 maxlen: 32
2a06:eb05::/32 maxlen: 32
2a06:eb06::/32 maxlen: 32
2a06:eb07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:e5:1b:1c:38:ef:93:0e:e5:fa:4b:c4:1a:03:77:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Oct 18 07:23:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7983c7aee3830141e7e4d2fda47f000285905d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:26:87:18:96:a6:17:e5:5e:f9:04:c5:77:
31:46:3f:53:01:c7:ef:ea:4a:5a:13:c1:8a:2d:02:
36:29:58:10:e6:9f:de:29:cd:05:b3:27:42:ad:72:
a3:d6:da:b0:e9:ff:cd:67:0e:cb:e3:06:62:76:87:
a9:69:54:24:b4:23:63:20:9b:6a:c5:d4:4a:d4:ce:
1a:94:dc:68:1d:c7:e8:d1:46:3e:a9:0a:78:8c:fa:
c4:df:30:3a:8a:8b:4e:14:e0:94:21:1e:32:7a:fa:
6e:b8:27:81:95:9a:df:72:3c:fe:9d:61:c1:89:5a:
52:f1:ac:1c:0c:3e:28:d8:bd:45:30:8d:93:2c:27:
4a:3e:58:81:4b:fe:2e:e3:ff:bc:c1:69:fb:88:e3:
4f:b4:ca:31:aa:8e:44:b6:8d:fe:ec:16:92:11:1a:
f1:70:8d:08:4e:4e:f0:ce:36:38:6f:1e:15:fc:c5:
a7:90:72:c2:21:7d:1d:dd:8f:53:b5:1f:64:6a:2f:
b5:53:eb:dc:60:88:d3:c9:c1:1a:2d:a1:93:f7:a9:
1f:f7:b1:e9:e5:7d:a7:e1:6c:da:59:79:76:69:3f:
7e:8d:e8:15:bc:85:8e:cc:36:e4:da:04:58:9b:ae:
d3:34:07:e5:03:78:e0:35:41:db:98:38:ad:05:4a:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:83:C7:AE:E3:83:01:41:E7:E4:D2:FD:A4:7F:00:02:85:90:5D:99
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/eYPHruODAUHn5NL9pH8AAoWQXZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.84.0/22
185.134.68.0/22
185.139.181.0-185.139.182.255
IPv6:
2a06:eb00::/29
Signature Algorithm: sha256WithRSAEncryption
55:ea:f7:d8:8a:16:0a:1d:78:89:95:28:a8:db:10:f6:54:1e:
68:a0:82:76:0a:63:1a:10:b3:be:bd:6f:0d:5c:e1:de:87:01:
7f:42:2a:43:9f:03:89:95:72:16:b4:03:8b:c0:35:91:eb:91:
e1:4f:ce:65:c4:5f:17:4f:8f:3c:6d:49:4f:b2:3f:7a:30:58:
c2:26:3a:9f:7a:1f:5b:e7:20:3c:73:7d:7c:12:80:5f:55:18:
23:23:8e:19:44:37:18:50:37:72:5b:e0:e4:fc:1f:cf:9e:61:
e7:9d:cf:3b:8d:37:43:c3:b1:d6:46:53:0c:0e:68:52:af:fa:
0d:c3:d1:a5:9c:d5:63:45:d4:44:05:1f:10:62:bb:62:ab:c2:
b9:c5:80:27:fd:5d:67:6d:da:92:a4:cb:08:dd:0b:59:bb:43:
2a:8a:b2:16:17:bc:c4:b7:b2:40:2f:06:7a:86:f2:8d:d6:bc:
47:99:ac:c4:33:18:47:f1:61:e0:ed:42:9d:10:2f:84:b0:9c:
f2:e4:42:3a:15:42:c5:0c:ca:cb:c7:4d:c8:17:5f:cb:cd:56:
f0:59:44:0a:a8:f5:2d:1d:26:d9:f1:c2:54:ad:09:69:c4:5c:
73:b0:9c:82:9d:93:8f:a6:5f:c9:f8:32:49:15:07:f5:a8:02:
8a:85:88:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:20:25 2026 by rpki-client