Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EMdPw-TXGTIEpr5qN8R7Vx6L1jo.roa
File: EMdPw-TXGTIEpr5qN8R7Vx6L1jo.roa (raw, json)
Hash identifier: 3nlQZDWvAZ9I0y/rmm6QuIcfEDHGy3u+cXc9YhRMAkM=
Subject key identifier: 10:C7:4F:C3:E4:D7:19:32:04:A6:BE:6A:37:C4:7B:57:1E:8B:D6:3A
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01A047D3B7AE58364C2F78AD3D63EB8C734F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EMdPw-TXGTIEpr5qN8R7Vx6L1jo.roa
Signing time: Fri 28 Aug 2026 10:04:12 +0000
ROA not before: Fri 28 Aug 2026 10:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.152.0/22 maxlen: 24
77.47.210.0/24 maxlen: 24
77.47.211.0/24 maxlen: 24
77.47.242.0/24 maxlen: 24
77.47.249.0/24 maxlen: 24
77.47.252.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
185.143.57.0/24 maxlen: 24
195.178.128.0/22 maxlen: 24
195.178.128.0/24 maxlen: 24
195.178.129.0/24 maxlen: 24
195.178.130.0/24 maxlen: 24
195.178.132.0/22 maxlen: 24
195.178.136.0/24 maxlen: 24
195.178.139.0/24 maxlen: 24
195.178.143.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.148.0/24 maxlen: 24
195.178.149.0/24 maxlen: 24
195.178.154.0/24 maxlen: 24
195.178.156.0/24 maxlen: 24
212.111.194.0/24 maxlen: 24
212.111.200.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 18:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:d3:b7:ae:58:36:4c:2f:78:ad:3d:63:eb:8c:73:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 28 10:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10c74fc3e4d7193204a6be6a37c47b571e8bd63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4e:7e:81:9e:9a:1d:d9:56:14:3f:6b:41:a7:
8f:cc:3b:50:b4:88:d9:94:8d:19:c3:07:00:64:cf:
f7:2a:16:0c:7a:72:80:02:66:34:1f:a2:50:60:c2:
b4:c1:72:3b:10:28:89:75:91:10:d0:83:2a:fb:da:
78:d7:c5:03:81:07:41:4b:25:59:2d:71:64:0b:6a:
20:13:47:53:91:69:ca:4a:ee:9b:c2:70:c6:2e:1b:
7c:89:e5:a7:ef:14:e3:c3:43:e8:6c:f5:4c:10:f7:
6d:92:4b:37:8e:a1:3f:5c:dc:41:e3:dd:e2:ab:03:
69:87:6c:6e:1b:c9:b7:75:19:74:60:b9:20:3f:a9:
72:1e:75:cd:47:ac:ff:ec:66:73:b4:23:d2:1b:32:
71:87:4f:c8:9d:44:12:5d:a0:40:b3:6c:6f:3a:6d:
3c:d7:92:0b:1d:c4:87:29:55:5a:79:e2:ea:c8:bf:
64:cf:50:f4:b5:0e:d1:2e:2c:20:1e:60:80:36:d8:
13:73:f0:2a:f7:ec:e0:e3:a6:a5:3d:12:1c:b1:f8:
5f:e9:1a:2e:93:e5:47:9a:2d:43:44:27:e0:89:ac:
ef:38:88:13:c3:b5:9e:ea:18:bc:91:b7:32:57:5b:
89:4d:20:ad:c9:1b:21:e1:0e:c5:3b:42:21:28:30:
9f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C7:4F:C3:E4:D7:19:32:04:A6:BE:6A:37:C4:7B:57:1E:8B:D6:3A
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EMdPw-TXGTIEpr5qN8R7Vx6L1jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.152.0/22
77.47.210.0/23
77.47.242.0/24
77.47.249.0/24
77.47.252.0/22
185.143.56.0/22
195.178.128.0-195.178.136.255
195.178.139.0/24
195.178.143.0-195.178.149.255
195.178.154.0/24
195.178.156.0/24
212.111.194.0/24
212.111.200.0/24
212.111.207.0/24
212.111.216.0/23
Signature Algorithm: sha256WithRSAEncryption
03:1c:bf:e0:46:03:64:99:33:90:4c:46:43:df:ab:d9:ca:c5:
ec:50:c5:77:68:03:1a:1d:56:59:d1:8f:79:73:a5:26:c7:a8:
34:1c:56:c7:bd:e7:16:78:0e:5d:18:72:d4:00:ee:86:28:d9:
9d:1a:68:1a:79:5c:23:d4:03:7d:55:56:52:52:5e:a9:82:d6:
d0:67:26:98:01:32:5b:68:7d:78:18:cc:e0:c1:ec:67:2e:f4:
dc:73:d7:44:cf:e0:72:c0:05:e6:9e:ae:e1:64:a0:59:f3:93:
c8:e8:f0:c2:bf:f6:09:2b:f0:fa:ce:90:af:15:99:df:5f:d0:
ee:0f:d4:40:86:12:9c:e6:fc:cc:8e:be:e3:37:b1:74:ad:eb:
39:20:65:7c:7e:44:be:22:26:78:cf:4c:6f:93:55:ef:7d:a6:
61:a5:7c:2c:61:02:7f:84:e3:f0:f6:a0:98:b1:73:2f:07:98:
13:82:b0:09:82:90:3e:ca:a8:5d:2d:78:5d:7b:c8:7f:2f:d5:
94:a9:4a:3e:24:f7:0c:4d:91:69:c2:53:f0:13:a7:7f:a3:21:
68:ff:b5:1e:00:96:70:d4:0b:32:8c:91:9b:53:e7:cb:93:e6:
34:c8:fe:07:30:e5:2e:4b:9b:23:0d:fd:22:f0:63:76:73:f8:
c3:77:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 03:01:16 2026 by rpki-client