Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/e2wYsPl0c2v5jvUrMJ-FcsncdaQ.roa
File: e2wYsPl0c2v5jvUrMJ-FcsncdaQ.roa (raw, json)
Hash identifier: N1xgKMxZ6JNLp0L0Qd+l/YBBESUI4Q2awE17GKoo6Lc=
Subject key identifier: 7B:6C:18:B0:F9:74:73:6B:F9:8E:F5:2B:30:9F:85:72:C9:DC:75:A4
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019E3CE98279980A52C70CCF71330A10013A
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/e2wYsPl0c2v5jvUrMJ-FcsncdaQ.roa
Signing time: Mon 18 May 2026 21:06:36 +0000
ROA not before: Mon 18 May 2026 21:06:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25693
IP address blocks: 59.152.124.0/22 maxlen: 24
62.3.10.0/24 maxlen: 24
62.106.64.0/24 maxlen: 24
85.8.149.0/24 maxlen: 24
85.8.151.0/24 maxlen: 24
91.242.232.0/24 maxlen: 24
146.19.197.0/24 maxlen: 24
185.118.133.0/24 maxlen: 24
185.118.134.0/24 maxlen: 24
185.147.156.0/24 maxlen: 24
185.147.158.0/24 maxlen: 24
185.213.17.0/24 maxlen: 24
185.214.143.0/24 maxlen: 24
185.214.241.0/24 maxlen: 24
185.214.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3c:e9:82:79:98:0a:52:c7:0c:cf:71:33:0a:10:01:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: May 18 21:06:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b6c18b0f974736bf98ef52b309f8572c9dc75a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:ec:2d:b3:93:16:c2:03:41:0b:fc:d4:71:
69:80:c8:ab:50:1e:c8:e6:13:87:6e:2f:d4:3d:80:
a9:a5:61:a3:43:c6:4a:3a:11:12:c7:12:26:7f:e6:
42:d0:e3:6d:20:7a:f5:5e:c0:19:34:c1:a9:53:bb:
22:69:c9:d4:35:ac:7c:a0:d0:4c:65:c1:d8:b0:74:
e6:23:ca:17:53:00:5a:61:25:73:35:a7:59:ad:5d:
74:9d:52:6a:6c:26:36:2f:49:d4:61:62:8e:fd:3e:
af:9c:a4:eb:e6:50:f6:4f:fe:12:6d:ab:13:f1:09:
ce:ef:7d:c4:94:9e:15:cd:59:10:5c:66:84:7c:ee:
17:97:44:89:a9:d6:67:f4:57:c5:e1:9a:10:f3:ed:
06:16:62:e6:e7:f1:8a:f7:5d:7f:5e:8b:de:d2:0e:
5f:8d:82:79:c5:64:7f:f3:9c:6d:c8:34:68:95:f6:
f5:43:32:08:78:9a:c6:13:41:ed:42:b5:92:d2:c7:
ac:b2:72:fc:64:a6:96:15:b7:37:e7:55:12:0a:c6:
c3:3c:2a:b4:23:12:5e:8d:68:9e:a3:71:ce:ba:85:
b6:93:df:db:bd:92:6f:16:4d:e5:b1:19:f1:8a:be:
f5:9c:8c:ab:92:ae:bc:e2:c5:dd:39:69:d3:d9:f8:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6C:18:B0:F9:74:73:6B:F9:8E:F5:2B:30:9F:85:72:C9:DC:75:A4
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/e2wYsPl0c2v5jvUrMJ-FcsncdaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.152.124.0/22
62.3.10.0/24
62.106.64.0/24
85.8.149.0/24
85.8.151.0/24
91.242.232.0/24
146.19.197.0/24
185.118.133.0-185.118.134.255
185.147.156.0/24
185.147.158.0/24
185.213.17.0/24
185.214.143.0/24
185.214.241.0-185.214.242.255
Signature Algorithm: sha256WithRSAEncryption
17:5c:58:f0:63:14:30:83:e0:6a:69:84:b2:6e:45:33:5c:f4:
6e:72:cc:16:80:b8:d4:f0:08:47:aa:44:1c:05:f2:59:45:f2:
e0:23:93:92:17:c5:ec:ec:17:44:49:c2:2f:37:be:d9:d9:13:
09:0e:a8:47:5b:7f:77:95:81:4e:b8:7e:90:4a:b8:14:b3:e4:
73:4b:1f:fb:c0:54:fb:bd:df:a9:86:b9:86:ce:81:4d:f9:92:
22:cd:18:a2:8c:a1:0e:65:59:1e:98:fe:d0:d9:bc:e5:06:2a:
91:e5:6b:46:1d:0e:67:f0:f2:99:ba:6f:51:db:b1:6c:86:c3:
28:f6:db:f9:2e:48:18:f3:e0:50:fe:e5:57:12:ea:19:fc:15:
37:f2:ec:a2:47:ba:ca:f7:88:35:7a:03:3f:04:23:56:82:bf:
fa:7c:8c:38:13:dc:83:ce:84:bf:c3:21:fb:ed:12:7f:a0:90:
e5:b0:8f:f2:57:f4:26:f6:89:50:c9:e4:4f:ca:19:fc:f9:8e:
09:c0:e0:d8:45:9e:39:9e:d4:f3:13:42:2f:ea:8b:a9:6b:9c:
5b:1e:40:5b:4e:44:02:eb:1d:c9:e2:17:0a:b6:98:b6:26:95:
8d:3d:ca:05:6b:08:1e:5d:c5:08:64:ef:7c:2c:9f:e2:95:64:
38:a6:af:66
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAZ486YJ5mApSxwzPcTMKEAE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwNTE4MjEwNjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjZjMThiMGY5NzQ3MzZiZjk4ZWY1MmIzMDlmODU3MmM5ZGM3NWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy7sLbOTFsIDQQv81HFpgMirUB7I
5hOHbi/UPYCppWGjQ8ZKOhESxxImf+ZC0ONtIHr1XsAZNMGpU7siacnUNax8oNBM
ZcHYsHTmI8oXUwBaYSVzNadZrV10nVJqbCY2L0nUYWKO/T6vnKTr5lD2T/4SbasT
8QnO733ElJ4VzVkQXGaEfO4Xl0SJqdZn9FfF4ZoQ8+0GFmLm5/GK911/Xove0g5f
jYJ5xWR/85xtyDRolfb1QzIIeJrGE0HtQrWS0sessnL8ZKaWFbc351USCsbDPCq0
IxJejWieo3HOuoW2k9/bvZJvFk3lsRnxir71nIyrkq684sXdOWnT2fiM4QIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFHtsGLD5dHNr+Y71KzCfhXLJ3HWkMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvZTJ3WXNQbDBjMnY1anZVck1KLUZjc25jZGFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQCO5h8AwQA
PgMKAwQAPmpAAwQAVQiVAwQAVQiXAwQAW/LoAwQAkhPFMAwDBAC5doUDBAC5doYD
BAC5k5wDBAC5k54DBAC51REDBAC51o8wDAMEALnW8QMEALnW8jANBgkqhkiG9w0B
AQsFAAOCAQEAF1xY8GMUMIPgammEsm5FM1z0bnLMFoC41PAIR6pEHAXyWUXy4COT
khfF7OwXREnCLze+2dkTCQ6oR1t/d5WBTrh+kEq4FLPkc0sf+8BU+73fqYa5hs6B
TfmSIs0YooyhDmVZHpj+0Nm85QYqkeVrRh0OZ/DymbpvUduxbIbDKPbb+S5IGPPg
UP7lVxLqGfwVN/Lsoke6yveINXoDPwQjVoK/+nyMOBPcg86Ev8Mh++0Sf6CQ5bCP
8lf0JvaJUMnkT8oZ/PmOCcDg2EWeOZ7U8xNCL+qLqWucWx5AW05EAusdyeIXCraY
tiaVjT3KBWsIHl3FCGTvfCyf4pVkOKavZg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:32 2026 by rpki-client