Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EFMUMic_8Xdl7bFnCfL0DoSflOM.roa
File: EFMUMic_8Xdl7bFnCfL0DoSflOM.roa (raw, json)
Hash identifier: cEQtBs18YvsbvCXWF/1ubeY4B9SsqgQs6mVzziAV4jU=
Subject key identifier: 10:53:14:32:27:3F:F1:77:65:ED:B1:67:09:F2:F4:0E:84:9F:94:E3
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FDC8FFDEBCA07777590DC3F28B7BAAE8A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EFMUMic_8Xdl7bFnCfL0DoSflOM.roa
Signing time: Fri 07 Aug 2026 14:10:51 +0000
ROA not before: Fri 07 Aug 2026 14:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54004
IP address blocks: 77.67.36.0/22 maxlen: 24
194.77.12.0/22 maxlen: 24
194.77.28.0/22 maxlen: 24
194.77.32.0/22 maxlen: 24
194.77.72.0/22 maxlen: 24
194.77.188.0/22 maxlen: 24
212.168.48.0/20 maxlen: 24
212.168.128.0/19 maxlen: 24
212.168.172.0/22 maxlen: 24
212.168.208.0/20 maxlen: 24
212.168.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:8f:fd:eb:ca:07:77:75:90:dc:3f:28:b7:ba:ae:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 7 14:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10531432273ff17765edb16709f2f40e849f94e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:72:b6:26:7d:31:51:9f:bb:b8:a4:b8:81:
8e:a7:d5:8c:40:76:cc:21:c0:9c:98:5d:fa:7a:c8:
c6:07:15:cd:b7:8f:ca:94:67:2d:87:05:1f:cd:b9:
e3:74:d9:38:76:71:11:8c:b1:23:7a:db:1d:a5:ca:
f8:83:5a:de:ba:3a:f5:d9:d0:f1:98:df:28:97:aa:
54:32:35:64:cf:48:8f:0d:54:75:0e:cf:49:a6:02:
18:7c:b9:89:13:28:bf:07:90:5e:47:49:a5:5d:3f:
11:6f:8a:53:bf:69:85:58:ea:15:7d:0a:be:7c:7b:
62:ec:68:1f:0a:2b:e5:ba:06:bf:1c:0f:f4:85:f6:
e0:63:e5:16:4a:fe:ab:57:69:dd:a6:06:4e:a7:4f:
4b:e0:0d:5d:00:3f:de:00:3b:5b:9e:c8:0f:b9:3f:
94:83:68:a4:cf:14:a7:98:46:cd:96:66:85:a1:66:
25:db:3d:f2:0a:56:1c:b0:b0:2e:5a:a1:62:a8:56:
6c:3e:2f:a9:16:76:63:72:2f:5d:e1:f0:a1:44:66:
9b:42:2c:96:78:66:b9:c0:e5:9a:1e:a2:d6:1a:da:
5e:51:4a:49:37:14:5a:0c:ae:5b:e9:72:a9:07:d8:
38:12:5b:f6:a2:12:51:34:84:6c:1f:6e:20:ee:d5:
db:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:53:14:32:27:3F:F1:77:65:ED:B1:67:09:F2:F4:0E:84:9F:94:E3
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EFMUMic_8Xdl7bFnCfL0DoSflOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.36.0/22
194.77.12.0/22
194.77.28.0-194.77.35.255
194.77.72.0/22
194.77.188.0/22
212.168.48.0/20
212.168.128.0/19
212.168.172.0/22
212.168.208.0-212.168.255.255
Signature Algorithm: sha256WithRSAEncryption
c0:a2:b6:5e:a2:91:e5:4d:fc:a0:d8:c1:83:bc:ee:fc:c0:d3:
db:0b:b6:a2:32:1f:24:30:84:4d:24:0c:7d:bb:c5:ee:10:3b:
36:c3:cb:46:6e:cd:bc:12:14:72:88:37:14:e2:b6:84:1c:85:
49:c5:4f:39:12:ad:20:5c:09:ba:e8:58:47:b7:67:f3:7b:30:
49:e9:23:7f:8e:c0:e8:74:53:42:9d:9a:a9:ac:12:12:e5:03:
7f:81:fe:30:d6:95:47:d6:fe:a6:5a:b7:00:1e:aa:38:86:75:
74:9c:65:44:46:ed:0d:9d:15:87:5e:e4:8c:66:a1:c3:3e:89:
3a:18:13:b3:84:fc:10:e2:5e:ee:25:1a:bf:5a:46:07:cd:d5:
87:93:4d:dd:41:4b:4b:42:48:0f:5d:87:66:ec:30:c0:6e:d9:
c0:02:51:f2:65:91:28:19:4d:a9:57:19:ed:4a:e4:53:47:52:
92:cd:5c:f3:c1:5e:d4:67:50:67:d1:3c:3d:37:28:27:ce:d1:
93:57:97:21:50:4f:39:4f:3d:d1:9b:7f:99:ec:55:d0:bb:1b:
e5:2e:79:3c:01:e6:6d:3c:a1:89:26:2a:9b:0a:a0:e9:24:72:
60:7c:13:2b:6f:20:06:4d:de:71:9a:91:75:f2:b3:1f:a7:3c:
68:ae:04:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:17 2026 by rpki-client