Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/eHEhXfplHp5OWnkRVZyfYq66uqg.roa
File: eHEhXfplHp5OWnkRVZyfYq66uqg.roa (raw, json)
Hash identifier: yobtOiqegleIgApr90dqG2ZHzBAz77KAG53eGTL4ACI=
Subject key identifier: 78:71:21:5D:FA:65:1E:9E:4E:5A:79:11:55:9C:9F:62:AE:BA:BA:A8
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A081FE472AE84BC175BD55C896FAC1CD4F
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/eHEhXfplHp5OWnkRVZyfYq66uqg.roa
Signing time: Tue 08 Sep 2026 17:08:40 +0000
ROA not before: Tue 08 Sep 2026 17:08:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 45.6.44.0/22 maxlen: 22
45.120.220.0/22 maxlen: 22
62.106.67.0/24 maxlen: 24
80.174.2.0/23 maxlen: 23
80.174.4.0/22 maxlen: 22
80.174.128.0/17 maxlen: 17
80.174.128.0/21 maxlen: 21
80.174.135.0/24 maxlen: 24
80.174.144.0/22 maxlen: 22
80.174.146.0/24 maxlen: 24
80.174.147.0/24 maxlen: 24
80.174.148.0/22 maxlen: 22
80.174.152.0/21 maxlen: 21
80.174.160.0/22 maxlen: 22
80.174.165.0/24 maxlen: 24
80.174.166.0/24 maxlen: 24
80.174.167.0/24 maxlen: 24
80.174.168.0/21 maxlen: 21
80.174.174.0/24 maxlen: 24
80.174.176.0/20 maxlen: 20
80.174.200.0/23 maxlen: 23
80.174.202.0/23 maxlen: 23
80.174.204.0/22 maxlen: 22
80.174.244.0/23 maxlen: 23
80.174.246.0/24 maxlen: 24
83.143.168.0/21 maxlen: 21
83.143.171.0/24 maxlen: 24
83.143.174.0/23 maxlen: 23
93.95.16.0/23 maxlen: 23
93.95.18.0/24 maxlen: 24
93.95.20.0/22 maxlen: 22
128.0.40.0/24 maxlen: 24
181.201.0.0/17 maxlen: 24
202.58.108.0/22 maxlen: 22
212.86.98.0/24 maxlen: 24
212.118.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:fe:47:2a:e8:4b:c1:75:bd:55:c8:96:fa:c1:cd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Sep 8 17:08:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7871215dfa651e9e4e5a7911559c9f62aebabaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:de:bd:91:1d:b4:15:c2:7a:b9:8e:07:e3:46:
b5:d5:ff:96:0b:fc:d9:dd:d5:0f:53:20:99:bc:15:
dc:23:47:05:02:2e:65:3b:12:a4:ad:18:09:c7:c8:
73:10:d5:93:d6:68:3f:77:99:50:5b:3e:6a:cd:f5:
b6:29:de:3b:d5:1f:09:ee:6c:6b:d3:d2:90:b7:e6:
b4:85:3a:57:56:d2:4a:10:e2:e2:bf:36:59:1f:f8:
15:b1:21:4e:3d:f4:ce:f8:63:eb:1e:b4:9a:3a:51:
78:42:92:77:ca:6e:59:7a:72:47:4e:c6:a8:de:b1:
a4:4e:35:ef:17:47:c8:c4:6d:5a:2e:f7:34:e9:47:
4f:6d:04:e8:cb:75:ba:40:e8:ed:d3:e4:5d:9f:12:
b1:d4:4f:51:b3:05:2e:3d:24:d7:1a:49:34:07:a8:
a3:2a:70:a7:dc:d5:73:8b:37:af:31:f7:22:55:aa:
31:82:8e:bb:3e:3e:5e:24:ac:e9:19:2d:73:e4:21:
0b:03:01:53:06:43:f9:3f:ef:4e:8b:21:59:1d:da:
4f:1b:65:be:ee:48:45:b3:05:0d:2c:00:16:3c:de:
b8:bd:48:47:25:e6:b1:c5:06:eb:ef:1f:06:70:b6:
7b:b8:4e:10:94:5c:fa:c6:d7:96:cd:f5:af:cd:fd:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:71:21:5D:FA:65:1E:9E:4E:5A:79:11:55:9C:9F:62:AE:BA:BA:A8
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/eHEhXfplHp5OWnkRVZyfYq66uqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.44.0/22
45.120.220.0/22
62.106.67.0/24
80.174.2.0-80.174.7.255
80.174.128.0/17
83.143.168.0/21
93.95.16.0-93.95.18.255
93.95.20.0/22
128.0.40.0/24
181.201.0.0/17
202.58.108.0/22
212.86.98.0/24
212.118.61.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8c:52:92:94:49:4a:ec:c7:6b:a5:5c:59:70:c9:4b:a9:e4:
1c:66:ee:8c:cd:7c:f7:8c:c1:c9:c8:9b:01:2a:81:51:da:09:
0e:50:33:8d:cc:01:e9:75:aa:6d:34:37:02:72:27:45:2c:aa:
e9:81:0f:00:27:cc:df:22:9e:6a:00:9e:54:fd:48:da:86:5a:
a0:b5:1a:81:2e:b7:dd:c2:e1:f8:75:a5:47:a4:ec:7c:7a:f6:
ea:21:a3:e4:57:55:36:5c:b1:13:e4:d4:e3:53:36:2f:92:07:
16:3f:2c:b8:6b:88:38:e0:93:94:b1:95:59:bb:8e:26:9f:88:
bc:b7:5f:fe:36:38:9b:14:e0:ca:eb:93:49:84:84:af:6f:04:
62:a5:f1:78:7b:47:75:d6:d5:34:81:db:08:52:d9:98:8e:65:
e1:94:fd:bb:85:db:54:8b:dd:16:1b:80:1c:cb:fb:9d:0a:c9:
d6:70:d3:2a:a5:71:1c:88:63:5e:9d:b5:f6:9b:2f:b5:03:27:
63:d2:29:c2:33:02:d3:1c:df:40:3c:cd:dd:c1:a6:f3:90:df:
26:a9:9c:59:bf:51:06:90:21:64:9c:24:85:44:e9:9b:b0:c8:
f9:32:88:5d:b3:a2:dd:a7:10:b1:95:2e:02:b1:98:de:39:ee:
c8:9c:f5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 16:37:11 2026 by rpki-client