Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eyYtGGCccHPtVGNQhph1BOKjM-8.roa
File: eyYtGGCccHPtVGNQhph1BOKjM-8.roa (raw, json)
Hash identifier: +UcZNJtLfkamaPbiVvv4FVLCdRmPb09iEXzPkXTqYZI=
Subject key identifier: 7B:26:2D:18:60:9C:70:73:ED:54:63:50:86:98:75:04:E2:A3:33:EF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A04C03D1584DBC70059B31BC9B3EF294D6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eyYtGGCccHPtVGNQhph1BOKjM-8.roa
Signing time: Sat 29 Aug 2026 05:35:13 +0000
ROA not before: Sat 29 Aug 2026 05:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 81.161.229.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
87.120.158.0/24 maxlen: 24
87.120.159.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.146.0/24 maxlen: 24
87.121.147.0/24 maxlen: 24
87.121.161.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
91.92.26.0/24 maxlen: 24
93.123.81.0/24 maxlen: 24
185.252.162.0/24 maxlen: 24
185.252.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:03:d1:58:4d:bc:70:05:9b:31:bc:9b:3e:f2:94:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 29 05:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b262d18609c7073ed54635086987504e2a333ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d0:1b:46:ae:5c:ca:9f:d8:08:52:0d:b9:51:
0b:a5:96:ce:aa:5f:74:44:82:f4:6d:74:53:a5:dd:
b9:94:7d:a1:09:44:92:52:37:55:c4:dc:9c:f6:2e:
f7:97:70:1a:9c:47:59:e0:1d:3b:e9:cc:97:a6:2b:
e8:81:b8:8e:32:fe:05:08:06:e2:a6:cf:85:9d:8f:
e3:4b:a5:d9:73:d1:ba:47:bf:69:4a:af:63:eb:68:
a9:73:6d:3f:96:ca:ac:cb:75:5e:7c:0f:38:d0:26:
dc:fd:f4:0d:ec:30:48:70:32:25:f1:25:94:e0:ca:
f9:36:88:7d:4f:e0:14:3e:a1:ea:f4:a6:a3:40:7c:
34:2f:2e:78:38:25:c5:f3:1b:99:1d:23:c2:75:41:
0a:d9:7b:37:a6:a9:36:b4:24:ea:8b:71:b6:47:c1:
6d:73:74:67:85:d1:c8:e2:43:a2:85:9e:5b:6b:e7:
7d:73:76:d7:10:6c:cb:5e:9e:4a:0a:37:df:d1:26:
31:77:81:0c:09:6a:e1:06:f2:92:9d:85:8e:b9:3c:
b1:2a:8a:03:03:a2:2e:26:00:40:00:5b:a7:c4:4d:
02:61:e5:23:f3:5d:f7:a0:bb:77:46:2c:ec:23:a2:
1f:89:94:88:de:e1:0a:d7:b6:11:33:88:a9:79:3c:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:26:2D:18:60:9C:70:73:ED:54:63:50:86:98:75:04:E2:A3:33:EF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eyYtGGCccHPtVGNQhph1BOKjM-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.229.0/24
83.219.96.0/24
87.120.158.0/23
87.121.115.0/24
87.121.146.0/23
87.121.161.0/24
87.121.163.0/24
91.92.26.0/24
93.123.81.0/24
185.252.162.0/23
Signature Algorithm: sha256WithRSAEncryption
69:9f:6f:06:47:ee:9a:93:14:ed:ff:2d:4a:37:0b:b5:8d:51:
72:e1:14:ec:3f:9c:07:69:9b:85:82:af:9f:1e:a2:bd:3f:63:
03:93:99:f0:4f:0e:d5:96:6a:91:aa:15:27:52:37:04:99:4d:
07:ad:50:42:03:1f:b1:13:0f:13:1e:8d:76:5f:30:28:13:e8:
92:e2:58:37:a8:c6:57:11:49:fe:7a:97:ea:b1:33:7e:2d:47:
6b:a7:b2:c0:3c:d0:f2:b0:37:c1:d1:fd:a0:fa:9a:20:e7:e8:
44:15:1e:74:ed:83:42:62:e9:83:40:89:bb:e8:cd:a1:21:05:
47:ba:17:d1:a2:87:1d:9e:f2:d0:98:48:40:e0:34:88:ae:13:
33:90:52:91:77:6f:d3:fb:f0:4c:b4:c3:a4:98:6c:03:aa:6c:
6f:00:56:4b:2e:d3:a7:7e:36:2b:30:85:98:c9:7b:6b:af:ce:
f8:aa:92:68:29:e9:a0:15:81:44:7d:4c:91:0d:98:d8:4a:e1:
c3:c5:8a:c2:07:50:93:ca:65:ca:d7:f3:20:df:b5:94:50:4f:
ce:ac:ff:24:53:b8:4e:d3:f7:92:f4:59:90:d5:43:b4:f1:5a:
13:ca:e1:fa:2c:51:de:a9:4a:1c:98:39:31:16:4f:ef:bf:0a:
11:b2:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 12:10:13 2026 by rpki-client