Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/eSz723ezaxIYo-uzqA3kR-jVkvo.roa
File: eSz723ezaxIYo-uzqA3kR-jVkvo.roa (raw, json)
Hash identifier: bDcJJgvstmEVW/P8EgI47LEodkbTX9A+80ZJtwW9/9U=
Subject key identifier: 79:2C:FB:DB:77:B3:6B:12:18:A3:EB:B3:A8:0D:E4:47:E8:D5:92:FA
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 019DBAFFE9140FFB74FEBEC4B5731E0829F9
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/eSz723ezaxIYo-uzqA3kR-jVkvo.roa
Signing time: Thu 23 Apr 2026 15:40:26 +0000
ROA not before: Thu 23 Apr 2026 15:40:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5539
IP address blocks: 82.118.32.0/19 maxlen: 19
82.118.35.0/24 maxlen: 24
82.118.36.0/24 maxlen: 24
185.54.120.0/22 maxlen: 22
185.54.188.0/22 maxlen: 22
185.54.190.0/24 maxlen: 24
185.54.191.0/24 maxlen: 24
193.149.32.0/19 maxlen: 19
194.97.64.0/19 maxlen: 19
194.97.128.0/19 maxlen: 19
194.97.137.0/24 maxlen: 24
195.24.96.0/19 maxlen: 19
195.30.0.0/16 maxlen: 16
195.30.21.0/24 maxlen: 24
195.30.64.0/24 maxlen: 24
195.30.84.0/24 maxlen: 24
195.30.121.0/24 maxlen: 24
195.30.131.0/24 maxlen: 24
2001:608::/32 maxlen: 32
2001:608:804::/48 maxlen: 48
2001:608:e03::/48 maxlen: 48
2001:67c:158c::/48 maxlen: 48
2001:4150::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:ff:e9:14:0f:fb:74:fe:be:c4:b5:73:1e:08:29:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Apr 23 15:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=792cfbdb77b36b1218a3ebb3a80de447e8d592fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:c9:b6:a4:ac:39:16:cc:1d:2b:f9:73:62:
d4:84:2a:17:98:89:da:a8:e2:c3:d2:b4:62:86:2a:
8e:7c:b1:4e:6e:ab:e4:fd:e4:ad:62:42:ce:eb:da:
25:56:63:83:34:25:db:63:43:f5:70:6b:6d:0a:1b:
c6:16:43:ef:0d:c8:49:29:0f:29:47:81:f9:bc:d8:
cb:73:ee:f4:11:e8:e6:95:c6:7d:ef:57:d3:89:c9:
02:76:29:62:82:2a:76:c8:e5:12:8c:f6:a5:84:fa:
6e:57:3f:a4:a0:d6:fc:10:4e:67:0e:36:04:d9:81:
c2:f8:b1:7f:9f:8a:d7:cd:36:fe:7b:eb:6e:af:0e:
fb:2e:9b:21:aa:01:b5:53:da:5d:0c:1c:76:d4:a7:
74:77:5d:16:c6:d9:34:9b:b4:4b:ae:d5:8b:a1:04:
79:e5:76:60:df:5c:ba:64:ab:aa:42:f9:93:57:19:
4c:0d:0a:8d:a6:e9:84:be:e3:8c:6f:38:61:46:f8:
aa:fe:b7:ce:9a:2f:49:93:8b:49:d3:cf:f8:5a:89:
ef:ce:91:da:b4:37:07:70:62:c0:f7:a0:44:ec:df:
27:5f:28:6b:92:0b:0a:89:a6:8e:c7:e2:6a:e9:a5:
8d:c8:bf:4b:75:1c:e2:88:e0:c1:f2:91:56:64:d7:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2C:FB:DB:77:B3:6B:12:18:A3:EB:B3:A8:0D:E4:47:E8:D5:92:FA
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/eSz723ezaxIYo-uzqA3kR-jVkvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.32.0/19
185.54.120.0/22
185.54.188.0/22
193.149.32.0/19
194.97.64.0/19
194.97.128.0/19
195.24.96.0/19
195.30.0.0/16
IPv6:
2001:608::/32
2001:67c:158c::/48
2001:4150::/32
Signature Algorithm: sha256WithRSAEncryption
96:90:8c:39:7a:5b:bf:15:d6:83:c8:6b:da:02:f4:4d:3b:f2:
b0:df:38:59:39:2e:a9:62:5e:6b:88:a7:64:cf:06:42:b6:9b:
e8:a8:c2:78:f4:3a:8a:37:bd:99:eb:e3:f2:62:24:68:92:74:
80:29:6b:ed:d6:11:4d:f7:7e:39:a0:57:bd:98:93:73:a3:6a:
cb:72:09:cb:9c:02:90:76:a5:92:41:34:a8:1a:de:d7:14:48:
80:f3:f3:ba:b7:d9:83:11:8e:8e:38:22:3d:b0:3e:c1:59:d5:
19:86:19:ee:4e:93:2f:db:81:03:55:1c:a0:a8:83:b6:7f:91:
4e:b1:8e:d2:76:ae:b3:20:93:a0:95:78:eb:8c:24:a9:98:8d:
3d:c3:98:ff:b4:bd:f8:4f:5f:22:69:af:7c:a4:2c:ea:06:e3:
ff:4d:50:20:ad:b3:58:17:20:79:0e:cb:04:8a:b9:dc:22:4b:
ce:c1:48:fb:30:05:33:1c:12:7e:57:65:86:a3:d8:fe:19:0f:
b8:3d:55:74:94:5e:06:da:7e:36:cf:39:70:71:f6:d1:d6:48:
aa:e2:d5:11:96:78:e0:e2:f1:83:37:4b:a9:18:f3:56:96:bb:
29:7c:b6:00:f7:0a:6d:e9:1f:ba:16:90:98:5e:cd:4b:23:56:
2e:56:ee:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:48:32 2026 by rpki-client