Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/egRMfjWT4bORy9ZUDeCc-picH3M.roa
File: egRMfjWT4bORy9ZUDeCc-picH3M.roa (raw, json)
Hash identifier: MJivsHN+cDnfID99mCZofcESqSojJuLSLL6F+jiPy8I=
Subject key identifier: 7A:04:4C:7E:35:93:E1:B3:91:CB:D6:54:0D:E0:9C:FA:98:9C:1F:73
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A087C4A93AE4CE49769EEE4328638C3B7B
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/egRMfjWT4bORy9ZUDeCc-picH3M.roa
Signing time: Wed 09 Sep 2026 20:03:27 +0000
ROA not before: Wed 09 Sep 2026 20:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 5.100.230.0/24 maxlen: 24
83.98.198.0/24 maxlen: 24
89.30.138.0/24 maxlen: 24
89.30.140.0/24 maxlen: 24
89.30.141.0/24 maxlen: 24
89.30.143.0/24 maxlen: 24
89.30.160.0/24 maxlen: 24
89.30.161.0/24 maxlen: 24
89.30.162.0/24 maxlen: 24
89.30.163.0/24 maxlen: 24
89.30.164.0/24 maxlen: 24
89.30.178.0/24 maxlen: 24
89.30.179.0/24 maxlen: 24
213.189.16.0/24 maxlen: 24
213.189.18.0/24 maxlen: 24
213.189.22.0/24 maxlen: 24
213.214.100.0/24 maxlen: 24
213.214.105.0/24 maxlen: 24
213.214.109.0/24 maxlen: 24
213.214.110.0/24 maxlen: 24
213.247.45.0/24 maxlen: 24
213.247.47.0/24 maxlen: 24
213.247.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:c4:a9:3a:e4:ce:49:76:9e:ee:43:28:63:8c:3b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 9 20:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a044c7e3593e1b391cbd6540de09cfa989c1f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:e9:23:9f:02:52:23:b1:cf:27:56:ba:4f:
01:a8:06:3b:56:e8:f5:31:cd:03:5d:e8:48:41:19:
4a:96:ce:44:a4:c0:61:fe:a0:0a:40:ae:5a:3c:94:
01:70:f7:a8:d6:b5:9d:da:79:1e:08:9c:e2:b7:e8:
e5:c9:cf:ad:de:ac:f8:5d:6e:00:83:a4:7d:7e:b3:
24:45:17:6d:24:ed:0d:50:57:74:d0:10:40:94:33:
0f:c4:de:31:0d:24:b7:88:27:3b:5e:be:49:e7:51:
a1:2c:c8:44:ee:8a:5e:8f:d5:a7:15:aa:80:c8:52:
7e:c3:66:4a:45:2f:a9:54:11:bf:3c:bf:8f:51:38:
3f:52:a9:0f:5b:73:dd:28:e9:62:7c:21:cd:c6:e0:
37:ba:7a:54:60:26:1a:87:54:9d:44:9c:8e:11:f6:
69:65:04:6c:9b:8e:4e:a0:b9:3d:bb:60:d6:4f:92:
bf:0d:f6:a0:d3:32:a0:96:1a:d5:42:f1:15:2a:e2:
fa:39:46:f6:50:dc:f4:84:3d:a6:b0:70:12:9b:1a:
11:ea:d2:d0:34:7b:d6:a1:50:87:73:a3:82:97:4e:
4f:b3:6c:92:e2:33:9f:12:ae:5a:4d:71:f0:80:ed:
18:4b:4c:4e:84:c6:bf:61:32:37:78:e7:aa:64:6a:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:04:4C:7E:35:93:E1:B3:91:CB:D6:54:0D:E0:9C:FA:98:9C:1F:73
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/egRMfjWT4bORy9ZUDeCc-picH3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.230.0/24
83.98.198.0/24
89.30.138.0/24
89.30.140.0/23
89.30.143.0/24
89.30.160.0-89.30.164.255
89.30.178.0/23
213.189.16.0/24
213.189.18.0/24
213.189.22.0/24
213.214.100.0/24
213.214.105.0/24
213.214.109.0-213.214.110.255
213.247.45.0/24
213.247.47.0/24
213.247.51.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d4:73:f0:f1:de:26:15:f2:b2:58:08:7f:cb:49:30:03:54:
14:a6:5b:54:24:91:ad:84:5b:98:eb:05:f5:24:4d:70:40:81:
0e:73:ac:19:52:08:6c:55:e6:98:9c:2e:90:ce:e3:b2:f2:d2:
1f:7c:fc:0a:30:27:a8:09:42:59:b8:55:48:35:47:1c:64:1f:
ea:5b:16:37:42:10:10:b3:35:84:05:47:92:cc:79:e3:9f:35:
d2:f2:15:da:c3:4d:b4:d6:7e:32:1e:dd:6d:64:e0:55:06:d0:
56:9a:c4:d7:f9:0b:5c:df:7e:61:c5:0c:81:fd:12:53:8e:76:
bb:ec:60:e8:cb:86:ea:ba:df:67:93:99:a1:7b:d0:4f:46:35:
18:41:d7:0f:08:05:b7:de:33:da:2b:17:be:84:e0:25:ca:c1:
a5:21:0c:f0:4e:3b:a4:09:2f:72:db:1f:a8:c2:ae:22:68:7a:
d4:6c:9f:ff:25:5e:fd:1e:52:5c:ee:7a:7c:7f:b1:2a:55:2f:
36:01:dc:cb:03:2d:6d:e2:38:45:c7:2d:3b:9f:dc:63:9c:62:
3e:f6:8c:cb:40:6c:e5:5d:47:d5:d4:02:6d:34:b6:d7:8c:88:
c7:dd:43:4f:58:2b:d0:e7:72:83:33:62:ab:78:9f:ac:f8:16:
38:eb:d6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:52:43 2026 by rpki-client