Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/Ee1i5EyjY_nH5w0v3UaNWN9hXLY.roa
File: Ee1i5EyjY_nH5w0v3UaNWN9hXLY.roa (raw, json)
Hash identifier: uFQHnZ/gBp3s8OtYNU61XLHml7SV6Y051hurWu6FQD8=
Subject key identifier: 11:ED:62:E4:4C:A3:63:F9:C7:E7:0D:2F:DD:46:8D:58:DF:61:5C:B6
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019DF246A52DC8EE7BEEA6F5A9693B607929
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/Ee1i5EyjY_nH5w0v3UaNWN9hXLY.roa
Signing time: Mon 04 May 2026 09:16:49 +0000
ROA not before: Mon 04 May 2026 09:16:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216416
IP address blocks: 145.11.16.0/21 maxlen: 21
157.173.16.0/21 maxlen: 21
157.173.25.0/24 maxlen: 24
157.173.26.0/24 maxlen: 24
157.173.27.0/24 maxlen: 24
157.173.29.0/24 maxlen: 24
185.207.136.0/24 maxlen: 24
185.207.137.0/24 maxlen: 24
185.207.138.0/24 maxlen: 24
185.207.139.0/24 maxlen: 24
188.137.152.0/24 maxlen: 24
188.137.153.0/24 maxlen: 24
188.137.154.0/24 maxlen: 24
188.137.155.0/24 maxlen: 24
188.137.156.0/24 maxlen: 24
188.137.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:46:a5:2d:c8:ee:7b:ee:a6:f5:a9:69:3b:60:79:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: May 4 09:16:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11ed62e44ca363f9c7e70d2fdd468d58df615cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:28:b7:42:84:f3:13:e0:d2:00:e1:16:0a:
2d:8e:06:4e:bd:c9:53:cc:67:6c:d3:28:6b:f6:bf:
85:8e:08:56:95:c9:7c:58:96:2b:d6:e0:e7:8f:d0:
e1:76:b9:aa:eb:77:7d:74:30:b4:98:65:ef:3c:a7:
c0:1d:11:a5:b1:47:d5:52:7a:10:4f:67:37:77:7f:
52:92:92:ea:22:4d:00:8f:23:bf:03:b7:57:1d:4b:
78:9f:0e:bb:f1:66:3b:cf:8b:e8:49:d3:cf:13:a7:
28:54:19:11:55:01:77:88:5f:42:e8:d6:07:40:5e:
5a:e6:34:15:f7:f0:28:53:30:8a:54:fe:42:8a:f8:
d9:9e:83:b8:e9:51:1b:af:cd:f7:19:e0:40:6a:fc:
9f:75:92:0c:92:58:a2:73:73:64:94:5b:fa:86:30:
da:23:9a:55:e3:19:34:b6:91:75:02:6b:47:e1:1a:
4b:0e:27:3b:23:23:08:06:17:46:eb:e7:75:2a:d9:
84:df:f3:df:61:df:c0:28:9a:51:4a:93:ef:cb:af:
fc:11:61:de:06:87:5e:dc:fa:cd:a7:70:7f:55:a5:
67:b1:ba:1b:22:56:0e:ca:a3:f9:a5:7c:bb:8a:77:
ce:20:17:0a:f7:0b:93:ec:50:d2:1a:d1:65:14:ac:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:ED:62:E4:4C:A3:63:F9:C7:E7:0D:2F:DD:46:8D:58:DF:61:5C:B6
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/Ee1i5EyjY_nH5w0v3UaNWN9hXLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.16.0/21
157.173.16.0/21
157.173.25.0-157.173.27.255
157.173.29.0/24
185.207.136.0/22
188.137.152.0-188.137.157.255
Signature Algorithm: sha256WithRSAEncryption
11:73:d2:52:da:41:5a:17:47:de:5c:7f:da:ba:65:3b:60:3a:
59:4e:88:fb:7e:bd:38:40:7a:8c:f4:dd:f4:ba:b3:d2:03:bc:
b5:e0:dc:dd:79:f9:a5:d8:00:a4:af:41:63:89:50:0a:72:68:
b3:0c:04:2e:c7:91:fd:b1:b7:79:df:fa:ac:7e:0d:c7:06:48:
ee:f0:da:11:64:d7:fe:b0:82:5f:81:d7:6b:8e:c8:61:b2:05:
69:0a:9c:50:22:af:37:41:51:d5:e1:62:3b:9b:ca:64:a3:92:
b9:05:fd:96:48:8e:f2:0b:02:67:56:ce:d4:80:01:e9:af:f1:
7e:fa:e5:de:07:60:a9:74:12:38:30:94:9c:c5:0f:22:35:5e:
af:d4:3a:30:eb:70:90:cf:22:60:2d:f5:77:0a:ef:f8:94:3e:
d4:60:6b:93:3c:65:aa:ff:04:64:04:1f:6d:9b:05:8f:d9:61:
96:9f:58:b8:e3:05:8a:f1:9b:ea:1d:54:6e:bf:c0:51:27:d9:
69:5a:ea:a0:bd:e1:0e:43:ce:bd:cd:74:89:11:bf:fa:11:c0:
41:e3:f4:f3:83:53:f0:59:5a:2d:12:ec:69:5e:14:46:99:9e:
f7:4c:6d:c6:ab:eb:1f:bb:07:58:19:e9:bb:98:49:e5:df:12:
c2:73:ed:93
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZ3yRqUtyO577qb1qWk7YHkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4
NjFmYjIwHhcNMjYwNTA0MDkxNjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWVkNjJlNDRjYTM2M2Y5YzdlNzBkMmZkZDQ2OGQ1OGRmNjE1Y2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogAot0KE8xPg0gDhFgotjgZOvclT
zGds0yhr9r+FjghWlcl8WJYr1uDnj9Dhdrmq63d9dDC0mGXvPKfAHRGlsUfVUnoQ
T2c3d39SkpLqIk0AjyO/A7dXHUt4nw678WY7z4voSdPPE6coVBkRVQF3iF9C6NYH
QF5a5jQV9/AoUzCKVP5CivjZnoO46VEbr833GeBAavyfdZIMkliic3NklFv6hjDa
I5pV4xk0tpF1AmtH4RpLDic7IyMIBhdG6+d1KtmE3/PfYd/AKJpRSpPvy6/8EWHe
Bode3PrNp3B/VaVnsbobIlYOyqP5pXy7infOIBcK9wuT7FDSGtFlFKyVCwIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFBHtYuRMo2P5x+cNL91GjVjfYVy2MB8GA1UdIwQY
MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt
MDEzZDJhMTFjMGE1LzEvRWUxaTVFeWpZX25INXcwdjNVYU5XTjloWExZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1
LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQDkQsQAwQD
na0QMAwDBACdrRkDBAKdrRgDBACdrR0DBAK5z4gwDAMEA7yJmAMEAbyJnDANBgkq
hkiG9w0BAQsFAAOCAQEAEXPSUtpBWhdH3lx/2rplO2A6WU6I+369OEB6jPTd9Lqz
0gO8teDc3Xn5pdgApK9BY4lQCnJoswwELseR/bG3ed/6rH4NxwZI7vDaEWTX/rCC
X4HXa47IYbIFaQqcUCKvN0FR1eFiO5vKZKOSuQX9lkiO8gsCZ1bO1IAB6a/xfvrl
3gdgqXQSODCUnMUPIjVer9Q6MOtwkM8iYC31dwrv+JQ+1GBrkzxlqv8EZAQfbZsF
j9lhlp9YuOMFivGb6h1Ubr/AUSfZaVrqoL3hDkPOvc10iRG/+hHAQeP084NT8Fla
LRLsaV4URpme90xtxqvrH7sHWBnpu5hJ5d8SwnPtkw==
-----END CERTIFICATE-----
Generated at Fri May 8 17:18:41 2026 by rpki-client