Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eSR15PP6MCM0OJgXQ_xmEXiJdQg.roa
File: eSR15PP6MCM0OJgXQ_xmEXiJdQg.roa (raw, json)
Hash identifier: GWk9zZVyixtk7tW+te++5VEwEbbtrZyrJY09giVogqA=
Subject key identifier: 79:24:75:E4:F3:FA:30:23:34:38:98:17:43:FC:66:11:78:89:75:08
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A0307E24811BEE4D04C84D82F699F3E2CF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eSR15PP6MCM0OJgXQ_xmEXiJdQg.roa
Signing time: Sun 23 Aug 2026 21:19:28 +0000
ROA not before: Sun 23 Aug 2026 21:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.183.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:30:7e:24:81:1b:ee:4d:04:c8:4d:82:f6:99:f3:e2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 23 21:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=792475e4f3fa30233438981743fc661178897508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ad:63:fb:19:da:e3:34:14:22:7f:1d:78:27:
4e:5d:d0:11:df:a7:64:3c:bb:88:66:60:1d:09:28:
12:f4:ee:99:7b:41:29:5e:0a:ea:c9:f5:82:fa:52:
7f:fc:e5:ad:53:8c:76:d8:cf:11:f9:09:ca:19:bf:
93:2f:fc:6d:77:df:02:f4:18:d3:83:58:95:48:4d:
cc:e9:89:e1:7d:6f:c1:a4:4c:d0:40:77:69:dd:4a:
7a:ca:52:86:7b:f4:c4:af:68:cf:60:31:5e:c4:22:
aa:fb:8b:5c:ff:02:05:9a:3c:d7:45:cd:5a:62:f8:
07:a2:0c:b9:dc:51:8c:55:2e:61:c6:54:28:56:ec:
9f:31:67:c9:bf:99:c2:25:99:7c:1f:ff:3b:f3:08:
dd:e0:f0:40:87:3f:93:89:d8:fa:96:8a:cc:c3:a6:
10:f6:79:38:dc:ff:87:1f:43:5e:eb:23:1a:b5:df:
cc:f5:01:f4:d5:8a:09:57:b0:c1:3b:1d:46:d3:6c:
6c:6a:30:cb:2c:7a:9a:ae:f9:c8:c4:20:7f:3d:45:
ff:0f:59:2a:90:0e:d7:77:5f:9d:2c:08:50:62:ab:
64:51:8d:40:0e:87:f9:0f:ac:43:ee:4f:01:cf:8d:
47:4c:05:6e:e2:6e:91:0d:b9:1f:1d:2e:73:c7:df:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:24:75:E4:F3:FA:30:23:34:38:98:17:43:FC:66:11:78:89:75:08
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eSR15PP6MCM0OJgXQ_xmEXiJdQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/23
5.181.85.0/24
5.181.87.0/24
45.13.190.0/24
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.132.181.0/24
45.132.183.0/24
77.83.37.0/24
85.209.120.0/24
193.57.41.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ce:5e:70:e8:ee:d3:17:4b:7a:29:e5:c3:73:12:5b:8b:77:
2b:30:c5:27:e8:08:d2:b4:ce:32:72:0c:e9:27:58:ee:e5:0b:
23:92:ef:fa:48:43:bb:9f:c6:de:78:8c:31:b0:7a:d3:79:d3:
55:8b:05:87:9f:2b:45:c0:2c:66:41:26:7c:44:65:e8:de:fb:
17:b5:e7:1a:c5:7c:23:f6:dc:1b:3c:6a:70:a6:48:8a:4c:c7:
2f:2e:e6:58:cc:a3:97:a5:7a:2c:a8:0a:a5:df:6b:c8:ae:c3:
4b:1b:14:e7:da:d2:69:56:aa:6c:48:e0:83:10:ee:d3:53:d1:
47:59:dd:20:ac:48:57:42:ed:21:32:ab:21:9c:3c:3c:1a:56:
1e:98:74:5c:12:22:13:79:58:d9:c7:88:11:54:6e:34:77:6a:
4e:b5:77:d5:b2:eb:00:28:20:9b:1e:6b:5d:b7:86:69:68:c0:
ca:ad:5b:55:84:c3:21:af:10:08:9f:45:c7:2e:41:03:b2:3c:
7a:c9:85:5a:1f:70:a7:45:1e:79:a7:de:b5:58:91:ad:61:ef:
a5:c2:0d:a7:b0:bd:f2:48:76:87:33:63:a0:70:a2:f7:58:33:
91:b1:a4:87:8e:c1:84:d1:52:be:e1:31:4f:e7:01:90:46:a5:
fb:cc:c6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:57:12 2026 by rpki-client