Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/EMUs2d_8MShdmJ5F8aoFKzim5Xo.roa
File: EMUs2d_8MShdmJ5F8aoFKzim5Xo.roa (raw, json)
Hash identifier: Kay3d2Qce2xGwxER4td9XQqYPSpp+CJ6ilbU3TUukzg=
Subject key identifier: 10:C5:2C:D9:DF:FC:31:28:5D:98:9E:45:F1:AA:05:2B:38:A6:E5:7A
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 01981D40BD3BEBCAE0CB0E0C4BB29E65F4E6
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/EMUs2d_8MShdmJ5F8aoFKzim5Xo.roa
Signing time: Fri 18 Jul 2025 11:17:18 +0000
ROA not before: Fri 18 Jul 2025 11:17:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44534
IP address blocks: 5.45.209.0/24 maxlen: 24
5.255.232.0/24 maxlen: 24
5.255.234.0/23 maxlen: 23
37.140.168.0/24 maxlen: 24
77.88.42.0/23 maxlen: 23
77.88.61.0/24 maxlen: 24
84.252.160.0/19 maxlen: 20
87.250.232.0/24 maxlen: 24
87.250.238.0/24 maxlen: 24
90.156.176.0/20 maxlen: 24
90.156.176.0/24 maxlen: 24
93.158.155.0/24 maxlen: 24
93.158.184.0/24 maxlen: 24
93.158.185.0/24 maxlen: 24
93.158.186.0/24 maxlen: 24
93.158.187.0/24 maxlen: 24
95.108.168.0/22 maxlen: 22
95.108.170.0/24 maxlen: 24
141.8.130.0/23 maxlen: 23
178.154.152.0/24 maxlen: 24
2a02:6bf:8000::/34 maxlen: 48
2a02:6bf:8005::/48 maxlen: 48
2a02:6bf:8006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:40:bd:3b:eb:ca:e0:cb:0e:0c:4b:b2:9e:65:f4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jul 18 11:17:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10c52cd9dffc31285d989e45f1aa052b38a6e57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:b2:58:eb:87:8a:b6:ed:44:ae:7b:fb:9f:
9d:91:ec:40:33:a4:6c:95:3c:39:15:f1:5e:04:7f:
4b:79:e2:6e:e3:09:02:94:98:a2:c3:cb:0e:e3:41:
69:f3:b3:04:a4:54:10:47:2c:b9:d9:7f:bb:8b:7e:
14:7a:ac:6c:bf:9f:98:52:da:81:82:de:45:c1:e0:
4e:a5:89:20:27:1f:af:92:94:ad:0b:3b:db:0c:cc:
2e:51:80:aa:36:26:a7:cc:d6:e7:ab:40:0d:21:f2:
56:7b:71:54:c7:33:62:87:9f:0b:4f:44:e7:92:a4:
c7:e2:c5:74:0c:b3:53:a9:2f:3c:63:c7:3d:ae:e3:
3b:51:fa:50:01:57:28:67:a6:0b:a3:46:dd:66:7d:
85:58:b3:0c:b3:f1:f6:de:b8:aa:57:d9:5b:e1:d4:
d2:08:80:4b:e7:e3:a9:0d:18:11:81:1a:ca:db:0b:
57:dc:b8:97:f7:d7:d7:76:9d:b4:8f:7f:47:80:5d:
d7:a2:f7:88:ae:72:e2:73:7e:f7:ec:5e:30:b7:c0:
28:12:d4:4f:3d:f8:08:93:dc:80:7c:c6:98:14:a4:
56:39:68:c0:84:a2:f3:1f:6d:28:b3:e1:e2:4a:d3:
5f:9c:a3:80:ed:fe:f9:84:99:61:c8:71:91:14:09:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C5:2C:D9:DF:FC:31:28:5D:98:9E:45:F1:AA:05:2B:38:A6:E5:7A
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/EMUs2d_8MShdmJ5F8aoFKzim5Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.209.0/24
5.255.232.0/24
5.255.234.0/23
37.140.168.0/24
77.88.42.0/23
77.88.61.0/24
84.252.160.0/19
87.250.232.0/24
87.250.238.0/24
90.156.176.0/20
93.158.155.0/24
93.158.184.0/22
95.108.168.0/22
141.8.130.0/23
178.154.152.0/24
IPv6:
2a02:6bf:8000::/34
Signature Algorithm: sha256WithRSAEncryption
78:7a:99:62:b6:87:8c:a2:31:67:e4:d4:b2:ea:35:cb:cb:39:
99:e6:cb:b9:e5:cc:84:79:c1:1d:33:74:8d:78:78:af:2c:51:
c3:38:44:42:d3:f7:80:fd:a2:1f:3b:d8:66:53:05:44:90:da:
14:a0:69:f5:16:71:01:ac:3a:a8:89:70:e6:86:63:7d:fb:7b:
36:4e:b8:4f:c7:93:e2:a7:93:dd:90:f9:cc:06:dc:f5:aa:8d:
7f:38:55:61:39:99:37:12:57:2e:8b:c6:75:bc:fa:48:3c:c2:
c7:4c:72:e9:ae:eb:95:33:e9:e9:38:ed:03:8e:75:f7:0f:74:
f1:ab:54:1c:73:91:66:f7:bb:5b:2e:39:b8:d0:e4:ee:30:a5:
e4:a0:9c:f4:a4:34:2f:79:21:aa:fc:82:1a:03:04:dd:b4:1e:
94:5b:df:e0:06:8b:da:d8:04:be:83:17:7d:ca:40:9e:55:3e:
59:94:db:fa:0a:a4:36:06:e4:f8:ff:7a:09:b5:0b:be:90:32:
b0:5b:63:d7:92:3e:1f:63:ca:8c:b2:19:c8:19:ec:11:65:f2:
90:99:e1:b2:66:84:af:76:f9:0f:ec:61:a5:40:7a:11:d8:df:
82:16:87:5d:5f:49:af:df:fe:07:6f:f8:e8:c6:dc:b2:0e:c1:
e7:65:ec:97
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZgdQL0768rgyw4MS7KeZfTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1
NzgzNDIwHhcNMjUwNzE4MTExNzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGM1MmNkOWRmZmMzMTI4NWQ5ODllNDVmMWFhMDUyYjM4YTZlNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLmyWOuHirbtRK57+5+dkexAM6Rs
lTw5FfFeBH9LeeJu4wkClJiiw8sO40Fp87MEpFQQRyy52X+7i34Ueqxsv5+YUtqB
gt5FweBOpYkgJx+vkpStCzvbDMwuUYCqNianzNbnq0ANIfJWe3FUxzNih58LT0Tn
kqTH4sV0DLNTqS88Y8c9ruM7UfpQAVcoZ6YLo0bdZn2FWLMMs/H23riqV9lb4dTS
CIBL5+OpDRgRgRrK2wtX3LiX99fXdp20j39HgF3XoveIrnLic3737F4wt8AoEtRP
PfgIk9yAfMaYFKRWOWjAhKLzH20os+HiStNfnKOA7f75hJlhyHGRFAlunwIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFBDFLNnf/DEoXZieRfGqBSs4puV6MB8GA1UdIwQY
MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt
MmNkOThlZTUzNTY5LzEvRU1VczJkXzhNU2hkbUo1Rjhhb0ZLemltNVhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5
LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwYAQCAAEwWgMEAAUt0QME
AAX/6AMEAQX/6gMEACWMqAMEAU1YKgMEAE1YPQMEBVT8oAMEAFf66AMEAFf67gME
BFqcsAMEAF2emwMEAl2euAMEAl9sqAMEAY0IggMEALKamDAOBAIAAjAIAwYGKgIG
v4AwDQYJKoZIhvcNAQELBQADggEBAHh6mWK2h4yiMWfk1LLqNcvLOZnmy7nlzIR5
wR0zdI14eK8sUcM4RELT94D9oh872GZTBUSQ2hSgafUWcQGsOqiJcOaGY337ezZO
uE/Hk+Knk92Q+cwG3PWqjX84VWE5mTcSVy6LxnW8+kg8wsdMcumu65Uz6ek47QOO
dfcPdPGrVBxzkWb3u1suObjQ5O4wpeSgnPSkNC95Iar8ghoDBN20HpRb3+AGi9rY
BL6DF33KQJ5VPlmU2/oKpDYG5Pj/egm1C76QMrBbY9eSPh9jyoyyGcgZ7BFl8pCZ
4bJmhK92+Q/sYaVAehHY34IWh11fSa/f/gdv+OjG3LIOwedl7Jc=
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:58 2025 by rpki-client