Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/EEWI8HQQclpSCSgy3wyXurGO_5k.roa
File: EEWI8HQQclpSCSgy3wyXurGO_5k.roa (raw, json)
Hash identifier: mZ85z6VLam30N5egrIsCvv7E64O4rofrkIudewhZKPs=
Subject key identifier: 10:45:88:F0:74:10:72:5A:52:09:28:32:DF:0C:97:BA:B1:8E:FF:99
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019FEBFD906D103FE87B4B1A059EFF114C2A
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/EEWI8HQQclpSCSgy3wyXurGO_5k.roa
Signing time: Mon 10 Aug 2026 14:04:51 +0000
ROA not before: Mon 10 Aug 2026 14:04:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34471
IP address blocks: 2.59.108.0/22 maxlen: 24
2.59.109.0/24 maxlen: 24
2.59.110.0/24 maxlen: 24
2.59.111.0/24 maxlen: 24
5.134.32.0/20 maxlen: 20
31.25.176.0/21 maxlen: 24
37.122.216.0/22 maxlen: 24
37.122.219.0/24 maxlen: 24
45.92.132.0/22 maxlen: 24
46.28.160.0/21 maxlen: 24
46.28.163.0/24 maxlen: 24
46.28.166.0/23 maxlen: 23
89.40.84.0/22 maxlen: 24
89.44.36.0/22 maxlen: 24
91.242.148.0/22 maxlen: 24
109.235.16.0/21 maxlen: 24
176.56.64.0/19 maxlen: 24
176.56.78.0/23 maxlen: 23
176.56.80.0/22 maxlen: 22
176.56.85.0/24 maxlen: 24
176.56.86.0/23 maxlen: 23
176.56.92.0/24 maxlen: 24
185.4.32.0/22 maxlen: 24
185.5.84.0/22 maxlen: 24
185.70.152.0/22 maxlen: 24
185.84.204.0/22 maxlen: 22
185.85.255.0/24 maxlen: 24
185.98.32.0/22 maxlen: 22
185.102.204.0/22 maxlen: 24
185.103.148.0/22 maxlen: 24
185.110.212.0/22 maxlen: 24
185.142.44.0/22 maxlen: 24
185.153.16.0/22 maxlen: 24
185.157.4.0/22 maxlen: 22
185.176.104.0/22 maxlen: 24
185.176.104.0/24 maxlen: 24
185.205.253.0/24 maxlen: 24
185.205.254.0/24 maxlen: 24
185.223.216.0/22 maxlen: 24
185.228.124.0/22 maxlen: 24
185.239.160.0/22 maxlen: 24
185.243.136.0/22 maxlen: 24
193.108.206.0/23 maxlen: 24
193.108.230.0/23 maxlen: 24
193.246.156.0/23 maxlen: 24
194.156.72.0/22 maxlen: 24
2a02:5dc0::/32 maxlen: 32
2a02:5fc0::/32 maxlen: 48
2a03:440::/32 maxlen: 32
2a05:9b00::/29 maxlen: 29
2a05:a800::/29 maxlen: 29
2a06:3c00::/29 maxlen: 29
2a09:eac0::/29 maxlen: 29
2a0a:1280::/29 maxlen: 29
2a0b:c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:fd:90:6d:10:3f:e8:7b:4b:1a:05:9e:ff:11:4c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 10 14:04:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=104588f07410725a52092832df0c97bab18eff99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:d6:99:59:9d:1f:df:99:99:d1:de:95:33:
bb:9f:0a:2f:3a:89:f9:9d:cc:ec:15:5c:dd:9d:4d:
37:3b:67:24:a9:32:0c:a4:9c:2e:33:51:fb:96:ca:
a4:79:6d:36:2d:72:41:6b:cc:73:c8:0c:f5:5a:c3:
69:54:98:ac:03:1f:b3:3d:0c:10:ce:b0:a8:c3:af:
e1:f7:84:a3:57:98:b5:d5:65:86:a0:e8:e4:01:7d:
bf:ac:03:ce:46:77:61:08:ee:23:53:09:a2:eb:d5:
74:31:96:7f:e9:6f:6a:81:b0:30:8f:63:10:bf:17:
3a:70:77:70:39:a1:6f:ce:f5:0e:f0:ca:5e:f1:14:
b9:2c:c0:35:b3:d4:3e:2f:83:49:99:38:ad:42:37:
40:e9:b4:e9:0b:8f:83:00:4e:05:90:fd:00:73:c0:
fb:92:60:50:a9:ad:a7:9e:a8:95:91:d5:84:e0:30:
ce:58:48:b0:53:7f:36:1c:f2:a2:8a:5e:5c:c0:48:
04:7a:ff:e3:d2:2f:23:92:5d:af:3d:0f:02:21:08:
67:fd:17:f3:07:6e:34:6e:e4:62:43:e9:74:47:58:
00:05:43:37:00:e4:50:f2:13:94:7a:4a:b7:a2:e3:
21:49:62:e2:b1:05:c0:a9:a7:2f:84:28:e8:54:90:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:45:88:F0:74:10:72:5A:52:09:28:32:DF:0C:97:BA:B1:8E:FF:99
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/EEWI8HQQclpSCSgy3wyXurGO_5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.108.0/22
5.134.32.0/20
31.25.176.0/21
37.122.216.0/22
45.92.132.0/22
46.28.160.0/21
89.40.84.0/22
89.44.36.0/22
91.242.148.0/22
109.235.16.0/21
176.56.64.0/19
185.4.32.0/22
185.5.84.0/22
185.70.152.0/22
185.84.204.0/22
185.85.255.0/24
185.98.32.0/22
185.102.204.0/22
185.103.148.0/22
185.110.212.0/22
185.142.44.0/22
185.153.16.0/22
185.157.4.0/22
185.176.104.0/22
185.205.253.0-185.205.254.255
185.223.216.0/22
185.228.124.0/22
185.239.160.0/22
185.243.136.0/22
193.108.206.0/23
193.108.230.0/23
193.246.156.0/23
194.156.72.0/22
IPv6:
2a02:5dc0::/32
2a02:5fc0::/32
2a03:440::/32
2a05:9b00::/29
2a05:a800::/29
2a06:3c00::/29
2a09:eac0::/29
2a0a:1280::/29
2a0b:c40::/29
Signature Algorithm: sha256WithRSAEncryption
7e:21:97:84:05:1c:59:c3:41:d1:39:f6:7b:66:d2:44:56:50:
ef:31:5f:3b:03:2b:e9:9a:94:34:a6:bf:68:7e:76:97:60:ff:
07:9d:48:24:a1:27:b8:81:8b:c7:c5:dd:dd:3e:b7:50:77:8c:
72:2f:63:3c:f0:a8:f1:05:95:e2:d1:88:3c:1f:0b:bc:1a:6d:
62:ff:8d:54:27:27:8d:86:ec:ff:fd:fc:35:4b:6e:fb:a3:49:
f7:8a:a7:c9:93:33:7a:e0:c7:57:c9:2d:fd:cb:16:36:3a:dd:
2f:fc:2d:e5:61:c0:8a:f2:68:55:1b:4b:c6:1d:3b:81:f2:37:
5e:5f:8c:cb:24:42:4e:c5:b6:8a:0a:92:93:dc:da:99:e3:8c:
0b:ea:9b:4d:fc:d9:61:d7:89:19:54:cd:cc:ee:d2:e5:05:78:
27:a3:20:df:2d:69:e3:77:f6:cd:c0:15:df:af:15:03:d9:f1:
c8:10:40:6b:09:57:06:cb:b7:1a:cf:9d:57:0a:77:d1:8d:81:
1e:5b:9b:40:a5:9b:59:10:de:03:00:d3:a6:b7:17:d8:4c:9d:
f5:28:8d:b8:f4:6d:f7:e8:62:18:22:25:59:8a:99:15:67:1c:
b8:67:58:27:11:b8:9a:07:96:b1:8b:0f:8f:e3:5a:37:f7:53:
eb:29:13:d7
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgISAZ/r/ZBtED/oe0saBZ7/EUwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjYwODEwMTQwNDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDQ1ODhmMDc0MTA3MjVhNTIwOTI4MzJkZjBjOTdiYWIxOGVmZjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1PWmVmdH9+ZmdHelTO7nwovOon5
nczsFVzdnU03O2ckqTIMpJwuM1H7lsqkeW02LXJBa8xzyAz1WsNpVJisAx+zPQwQ
zrCow6/h94SjV5i11WWGoOjkAX2/rAPORndhCO4jUwmi69V0MZZ/6W9qgbAwj2MQ
vxc6cHdwOaFvzvUO8Mpe8RS5LMA1s9Q+L4NJmTitQjdA6bTpC4+DAE4FkP0Ac8D7
kmBQqa2nnqiVkdWE4DDOWEiwU382HPKiil5cwEgEev/j0i8jkl2vPQ8CIQhn/Rfz
B240buRiQ+l0R1gABUM3AORQ8hOUekq3ouMhSWLisQXAqacvhCjoVJAvuQIDAQAB
o4IDIDCCAxwwHQYDVR0OBBYEFBBFiPB0EHJaUgkoMt8Ml7qxjv+ZMB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEvRUVXSThIUVFjbHBTQ1NneTN3eVh1ckdPXzVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNAYIKwYBBQUHAQcBAf8EggEjMIIBHzCB1QQCAAEwgc4D
BAICO2wDBAQFhiADBAMfGbADBAIletgDBAItXIQDBAMuHKADBAJZKFQDBAJZLCQD
BAJb8pQDBANt6xADBAWwOEADBAK5BCADBAK5BVQDBAK5RpgDBAK5VMwDBAC5Vf8D
BAK5YiADBAK5ZswDBAK5Z5QDBAK5btQDBAK5jiwDBAK5mRADBAK5nQQDBAK5sGgw
DAMEALnN/QMEALnN/gMEArnf2AMEArnkfAMEArnvoAMEArnziAMEAcFszgMEAcFs
5gMEAcH2nAMEAsKcSDBFBAIAAjA/AwUAKgJdwAMFACoCX8ADBQAqAwRAAwUDKgWb
AAMFAyoFqAADBQMqBjwAAwUDKgnqwAMFAyoKEoADBQMqCwxAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+IZeEBRxZw0HROfZ7ZtJEVlDvMV87AyvpmpQ0pr9ofnaXYP8HnUgk
oSe4gYvHxd3dPrdQd4xyL2M88KjxBZXi0Yg8Hwu8Gm1i/41UJyeNhuz//fw1S277
o0n3iqfJkzN64MdXyS39yxY2Ot0v/C3lYcCK8mhVG0vGHTuB8jdeX4zLJEJOxbaK
CpKT3NqZ44wL6ptN/Nlh14kZVM3M7tLlBXgnoyDfLWnjd/bNwBXfrxUD2fHIEEBr
CVcGy7caz51XCnfRjYEeW5tApZtZEN4DANOmtxfYTJ31KI249G336GIYIiVZipkV
Zxy4Z1gnEbiaB5axiw+P41o391PrKRPX
-----END CERTIFICATE-----
Generated at Sat Aug 15 14:43:10 2026 by rpki-client