Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Em4vXP2v9DbHoKjVWlLVUHBwSds.roa
File: Em4vXP2v9DbHoKjVWlLVUHBwSds.roa (raw, json)
Hash identifier: NCc1cJBYDJOvjW0cqxl90XlhtCpD0R+xb6DoDcO2Y2k=
Subject key identifier: 12:6E:2F:5C:FD:AF:F4:36:C7:A0:A8:D5:5A:52:D5:50:70:70:49:DB
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694D2FB9607D16986CB6C952C58643
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Em4vXP2v9DbHoKjVWlLVUHBwSds.roa
Signing time: Thu 02 Jul 2026 15:18:51 +0000
ROA not before: Thu 02 Jul 2026 15:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206150
IP address blocks: 64.43.72.0/24 maxlen: 24
91.200.135.0/24 maxlen: 24
91.224.212.0/24 maxlen: 24
91.232.56.0/24 maxlen: 24
91.232.57.0/24 maxlen: 24
91.234.120.0/24 maxlen: 24
91.234.121.0/24 maxlen: 24
91.238.42.0/23 maxlen: 23
91.238.42.0/24 maxlen: 24
91.238.43.0/24 maxlen: 24
91.245.91.0/24 maxlen: 24
176.103.121.0/24 maxlen: 24
176.115.237.0/24 maxlen: 24
176.115.238.0/24 maxlen: 24
176.115.239.0/24 maxlen: 24
176.116.230.0/24 maxlen: 24
178.213.180.0/24 maxlen: 24
178.213.181.0/24 maxlen: 24
195.80.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:4d:2f:b9:60:7d:16:98:6c:b6:c9:52:c5:86:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=126e2f5cfdaff436c7a0a8d55a52d550707049db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:2b:21:77:22:7c:de:2b:7b:b0:8c:38:76:
54:c6:89:9d:d4:79:b2:ae:b0:cb:be:d3:2f:f8:64:
c7:81:7f:74:d5:ec:0d:33:bd:86:00:35:43:61:51:
af:68:4c:a1:65:d4:4b:f9:1e:14:0a:55:78:3d:89:
16:fe:df:70:4c:9c:31:47:26:f4:26:8f:31:98:a7:
d4:56:f2:fb:5b:b8:cd:82:47:b1:a0:1e:fb:f9:68:
06:b9:23:82:a6:8a:78:18:fb:a8:d0:57:5e:9d:7d:
d1:d2:15:58:75:80:d0:3f:2a:58:bc:16:07:d6:5c:
d7:1f:ca:c6:ac:3c:68:b1:5c:f3:c0:18:10:fc:7a:
55:92:7b:ee:6e:2a:c3:3e:e3:8e:3c:f8:f1:09:3c:
5c:59:a9:54:70:c7:88:d0:6b:4a:fb:d5:b1:c5:9f:
dd:e6:09:f2:a5:12:02:80:2e:c3:86:ea:5d:07:d0:
ad:9b:be:0e:63:4d:12:33:5b:7e:81:25:3d:a7:57:
cf:1f:5c:80:ed:e9:38:61:55:c0:1d:c2:6e:cc:9b:
8f:d7:01:28:1c:0b:5c:42:11:af:b0:c9:fc:46:5a:
a9:d4:0d:91:22:6e:b4:9a:d8:e3:78:2b:0c:77:36:
71:9e:64:10:d9:f8:39:74:54:ca:87:e6:73:09:d4:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6E:2F:5C:FD:AF:F4:36:C7:A0:A8:D5:5A:52:D5:50:70:70:49:DB
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Em4vXP2v9DbHoKjVWlLVUHBwSds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.72.0/24
91.200.135.0/24
91.224.212.0/24
91.232.56.0/23
91.234.120.0/23
91.238.42.0/23
91.245.91.0/24
176.103.121.0/24
176.115.237.0-176.115.239.255
176.116.230.0/24
178.213.180.0/23
195.80.143.0/24
Signature Algorithm: sha256WithRSAEncryption
59:09:c2:11:29:f1:5a:1a:c4:5b:a4:85:58:3f:79:e8:93:d1:
8e:68:51:53:21:78:b9:c5:43:45:c2:ad:09:1e:2a:df:90:d7:
cc:ec:11:e7:0f:c2:b8:10:9b:df:40:55:5a:56:c3:89:f2:d2:
b2:5e:df:55:8a:a4:a6:f3:02:d0:e0:f8:d5:ea:28:d7:af:f3:
7d:c7:b7:ee:a6:2d:27:3c:31:b0:d3:d2:b9:56:31:2d:4d:06:
4a:b7:62:a1:e6:6c:53:05:b9:46:0d:95:62:49:46:47:71:43:
2a:33:d4:7b:52:2c:e6:e0:35:46:f5:e8:d4:14:0c:86:95:16:
59:c8:4a:36:2f:56:2c:d2:11:fc:b7:a5:42:7b:07:a1:ee:69:
39:c4:8d:64:ab:03:af:99:b8:8f:ae:5e:7b:74:3d:09:25:4c:
57:bf:48:c3:1c:7a:b6:aa:2c:57:86:93:cf:06:a3:45:8f:d8:
7b:76:45:d5:54:d8:70:eb:ff:c6:58:67:d9:f4:dc:c4:95:80:
0d:31:66:35:ae:08:63:65:14:01:98:7d:5f:32:90:41:df:e5:
d6:99:a6:97:18:ac:9c:ed:6f:72:4c:d0:ef:de:7d:f4:91:c4:
60:3b:e1:cc:ed:78:fc:26:b0:fb:2f:a0:be:9b:0b:77:a8:89:
f9:e6:ae:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:26 2026 by rpki-client