Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/E-D5pAJ4Oo_sh2wm5hMM24oGPwM.roa
File: E-D5pAJ4Oo_sh2wm5hMM24oGPwM.roa (raw, json)
Hash identifier: njAxZ0narMXtwAEWUSgPekSuTJSQsHM+NxysU3psTiU=
Subject key identifier: 13:E0:F9:A4:02:78:3A:8F:EC:87:6C:26:E6:13:0C:DB:8A:06:3F:03
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 019CBD6C7493E236B0F3EAB28CD4BCF4618E
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/E-D5pAJ4Oo_sh2wm5hMM24oGPwM.roa
Signing time: Thu 05 Mar 2026 09:55:27 +0000
ROA not before: Thu 05 Mar 2026 09:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
5.182.48.0/24 maxlen: 24
45.81.20.0/22 maxlen: 24
45.90.147.0/24 maxlen: 24
45.140.220.0/22 maxlen: 24
77.83.240.0/22 maxlen: 24
77.83.243.0/24 maxlen: 24
78.108.217.0/24 maxlen: 24
83.143.116.0/24 maxlen: 24
85.202.162.0/24 maxlen: 24
89.190.156.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
185.227.71.0/24 maxlen: 24
185.234.72.0/22 maxlen: 24
185.242.224.0/22 maxlen: 24
185.242.225.0/24 maxlen: 24
193.31.29.0/24 maxlen: 24
193.31.30.0/24 maxlen: 24
193.34.76.0/22 maxlen: 24
193.34.77.0/24 maxlen: 24
193.221.192.0/22 maxlen: 24
194.50.16.0/22 maxlen: 24
194.56.224.0/22 maxlen: 24
212.107.12.0/22 maxlen: 24
212.107.14.0/24 maxlen: 24
2a0b:b82::/44 maxlen: 44
2a0b:b84::/32 maxlen: 32
2a0b:b85::/32 maxlen: 32
2a0b:b86::/40 maxlen: 48
2a0b:b86:100::/40 maxlen: 48
2a0b:b86:fff0::/44 maxlen: 44
2a0b:b87:ff12::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b87:ffc0::/44 maxlen: 44
2a0b:b87:ffd2::/48 maxlen: 48
2a0b:b87:ffda::/48 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0b:b87:fff0::/44 maxlen: 44
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:7080:10::/48 maxlen: 48
2a0b:7080:20::/44 maxlen: 48
2a0b:7080:20::/48 maxlen: 48
2a0b:7080:30::/44 maxlen: 48
2a0b:7086:fff0::/44 maxlen: 44
2a0b:7087:fff0::/44 maxlen: 44
2a0d:77c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:6c:74:93:e2:36:b0:f3:ea:b2:8c:d4:bc:f4:61:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Mar 5 09:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13e0f9a402783a8fec876c26e6130cdb8a063f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:5c:2e:c5:73:fb:8a:d5:33:a2:75:e6:40:
e3:c0:b3:54:8e:0f:d4:f1:7e:3b:de:a6:90:d8:7e:
0d:f6:c5:55:43:9b:6d:1e:1d:2c:dd:94:10:0a:cb:
42:49:85:33:69:3b:e2:49:73:8a:4f:5c:47:af:89:
d3:12:b7:ea:fd:28:6c:c4:f5:b5:41:3e:b0:80:ad:
b5:65:29:b9:cc:cf:03:b3:2b:f0:f7:e0:0d:eb:3a:
f7:43:21:ad:6a:da:13:dc:f4:8a:ba:da:bd:32:30:
eb:6d:ae:7a:ec:f6:98:4f:5c:dd:2d:07:3f:4e:a6:
5a:4d:e9:e0:15:7c:fc:e4:c9:d2:ec:28:66:7e:be:
6a:6f:b6:12:3a:50:d8:38:38:89:d0:39:e8:b2:86:
03:f1:42:8f:ff:13:20:fd:1e:45:cc:9b:0a:54:b7:
d4:7c:1b:47:d5:cd:76:7e:2f:30:86:a4:1d:31:a3:
a4:82:6e:2c:f3:62:62:e6:51:5b:4a:5f:cb:c8:65:
a7:36:8f:0b:d8:ec:7f:d6:1a:7d:78:34:9a:bd:50:
cc:c9:52:fa:a1:ac:59:18:2e:33:de:2c:10:c9:55:
40:44:db:25:30:3b:0f:4b:5c:11:ec:e1:a3:c5:35:
54:78:e9:f7:7c:8e:a3:19:1f:22:f9:ae:6e:28:a0:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E0:F9:A4:02:78:3A:8F:EC:87:6C:26:E6:13:0C:DB:8A:06:3F:03
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/E-D5pAJ4Oo_sh2wm5hMM24oGPwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/24
45.81.20.0/22
45.90.147.0/24
45.140.220.0/22
77.83.240.0/22
78.108.217.0/24
83.143.116.0/24
85.202.162.0/24
89.190.156.0/22
178.218.144.0/22
185.186.64.0/22
185.227.71.0/24
185.234.72.0/22
185.242.224.0/22
193.31.29.0-193.31.30.255
193.34.76.0/22
193.221.192.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::-2a0b:b86:1ff:ffff:ffff:ffff:ffff:ffff
2a0b:b86:fff0::/44
2a0b:b87:ff12::/48
2a0b:b87:ffb4::/48
2a0b:b87:ffc0::/44
2a0b:b87:ffd2::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::-2a0b:7080:3f:ffff:ffff:ffff:ffff:ffff
2a0b:7086:fff0::/44
2a0b:7087:fff0::/44
2a0d:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
25:e6:cc:9b:02:67:e4:a3:52:93:f2:c8:53:1c:7d:f2:81:d4:
da:45:4c:93:6d:4c:75:b4:0f:da:25:52:61:e8:fb:27:5d:0d:
0b:81:53:ac:fe:1c:72:e9:33:9b:d2:61:2b:7d:cd:80:88:c1:
25:f2:1c:05:6c:f8:d3:bf:c3:ff:96:4e:f5:08:2a:2c:de:b3:
f6:42:40:d0:dd:ce:46:aa:53:6e:95:de:6b:6d:ad:b3:ea:f9:
73:eb:28:af:92:75:f6:c6:af:83:af:d8:56:0f:5d:15:64:37:
cf:18:68:c2:2f:ec:54:51:a2:9a:33:f9:97:e8:0a:77:c2:6e:
a8:ad:b4:37:27:c9:50:db:55:66:75:2f:5c:7f:45:6a:07:25:
5b:48:5e:d8:d7:bf:3d:d8:b6:3e:2e:ff:2d:80:b6:fc:e1:d1:
19:70:97:f2:84:67:4c:c7:85:af:e8:03:1a:a2:e6:5d:92:d4:
ba:b4:b4:bc:2d:26:c8:dd:02:be:e5:f5:18:44:83:c1:e0:a0:
a5:e9:de:a4:41:c1:22:b9:67:81:49:a8:b1:7f:df:23:d7:b1:
47:35:f0:d4:25:08:24:11:ea:21:98:ae:9c:33:5a:c4:2c:a2:
93:f0:fe:46:f2:1d:b9:0c:04:4f:18:13:83:b9:6a:86:d0:87:
68:24:a6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 07:23:33 2026 by rpki-client