Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/EpTBQMmX_i98nrHenbAZIilledc.roa
File: EpTBQMmX_i98nrHenbAZIilledc.roa (raw, json)
Hash identifier: Mmlh/uw7vdVSt2pl5ZQV5w5RtXcHFW6Nm/2ktZMB/gY=
Subject key identifier: 12:94:C1:40:C9:97:FE:2F:7C:9E:B1:DE:9D:B0:19:22:29:65:79:D7
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 019E8D133C7D73F450689E59730DDF99B1A2
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/EpTBQMmX_i98nrHenbAZIilledc.roa
Signing time: Wed 03 Jun 2026 10:41:48 +0000
ROA not before: Wed 03 Jun 2026 10:41:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3209
IP address blocks: 47.64.0.0/13 maxlen: 13
62.95.128.0/17 maxlen: 17
62.95.128.0/18 maxlen: 18
62.95.192.0/18 maxlen: 18
81.11.0.0/17 maxlen: 17
81.11.0.0/18 maxlen: 18
81.11.0.0/20 maxlen: 20
81.11.16.0/20 maxlen: 20
81.11.32.0/20 maxlen: 20
81.11.48.0/20 maxlen: 20
81.11.64.0/18 maxlen: 18
81.11.64.0/20 maxlen: 20
81.11.80.0/20 maxlen: 20
81.11.96.0/20 maxlen: 20
81.11.112.0/20 maxlen: 20
82.82.0.0/15 maxlen: 24
82.82.0.0/20 maxlen: 20
84.56.0.0/13 maxlen: 24
85.238.224.0/19 maxlen: 19
88.64.0.0/12 maxlen: 24
92.72.0.0/13 maxlen: 24
92.208.0.0/14 maxlen: 24
92.212.0.0/15 maxlen: 24
92.214.0.0/15 maxlen: 24
92.216.0.0/14 maxlen: 24
94.216.0.0/13 maxlen: 24
145.253.0.0/16 maxlen: 16
145.253.0.0/20 maxlen: 20
145.254.0.0/16 maxlen: 24
146.60.0.0/16 maxlen: 24
176.94.0.0/17 maxlen: 24
176.94.128.0/17 maxlen: 24
176.95.0.0/16 maxlen: 24
178.0.0.0/12 maxlen: 24
185.2.132.0/22 maxlen: 24
188.96.0.0/12 maxlen: 24
193.25.240.0/22 maxlen: 22
193.25.244.0/23 maxlen: 23
193.25.247.0/24 maxlen: 24
195.50.128.0/18 maxlen: 18
195.158.128.0/19 maxlen: 19
212.144.0.0/16 maxlen: 24
213.23.0.0/16 maxlen: 24
213.128.96.0/19 maxlen: 19
2a00::/22 maxlen: 22
2a00:10::/32 maxlen: 42
2a00:11::/32 maxlen: 42
2a00:1e::/32 maxlen: 42
2a00:1f::/32 maxlen: 42
2a00:20::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:13:3c:7d:73:f4:50:68:9e:59:73:0d:df:99:b1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Jun 3 10:41:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1294c140c997fe2f7c9eb1de9db01922296579d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b9:24:81:b0:c2:9b:d7:4c:7f:9c:b6:17:be:
6d:d8:98:2f:ae:2e:0d:97:d5:70:ab:fc:be:ab:92:
9d:06:fd:30:84:96:4c:fe:4b:80:c4:52:44:a4:ae:
ea:bf:92:d5:0c:67:a6:3c:cd:65:e1:2d:46:7b:b8:
32:a2:4c:59:5b:3d:7c:d6:1b:67:e6:93:20:1d:bf:
1a:c6:b5:2b:d4:00:ff:cf:d1:89:f7:7f:5a:a5:ce:
c5:d1:ee:4a:22:5a:6a:ef:43:b3:3d:86:a9:f7:38:
05:68:b7:51:98:13:b4:84:fc:39:b6:49:6c:e0:5e:
07:dc:13:35:da:2f:54:79:f9:03:0e:25:cc:db:4a:
08:2e:04:b1:7d:6a:d2:42:f5:ea:8f:70:81:7b:e3:
cb:12:f1:fb:61:a0:b6:59:2c:d4:88:d1:d4:d8:a6:
30:e1:5d:f3:91:9a:5a:c6:e6:11:79:a4:f3:b2:52:
e0:d4:18:03:0f:a7:76:4e:60:ab:70:8f:fb:ff:93:
84:a6:94:8f:7d:a7:3b:fb:be:1c:56:23:7f:1b:80:
fe:67:a4:48:45:a0:4a:1d:12:f0:fe:c4:dc:49:d1:
7f:64:e0:b7:73:75:57:38:fb:01:29:00:6d:89:c2:
d8:cc:14:35:9f:a8:79:6b:65:39:d2:da:79:41:f9:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:94:C1:40:C9:97:FE:2F:7C:9E:B1:DE:9D:B0:19:22:29:65:79:D7
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/EpTBQMmX_i98nrHenbAZIilledc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.64.0.0/13
62.95.128.0/17
81.11.0.0/17
82.82.0.0/15
84.56.0.0/13
85.238.224.0/19
88.64.0.0/12
92.72.0.0/13
92.208.0.0-92.219.255.255
94.216.0.0/13
145.253.0.0-145.254.255.255
146.60.0.0/16
176.94.0.0/15
178.0.0.0/12
185.2.132.0/22
188.96.0.0/12
193.25.240.0-193.25.245.255
193.25.247.0/24
195.50.128.0/18
195.158.128.0/19
212.144.0.0/16
213.23.0.0/16
213.128.96.0/19
IPv6:
2a00::/22
Signature Algorithm: sha256WithRSAEncryption
4c:cc:f6:b9:99:b9:1c:34:28:80:ee:3d:b3:64:04:3f:eb:d0:
fb:38:94:ef:a9:65:90:ed:80:1a:5f:99:10:69:85:e2:d4:6b:
17:1a:f1:bd:46:37:f6:fa:b8:df:b9:45:0a:81:01:23:ce:dd:
df:6a:25:27:a3:71:a1:7c:b1:50:7e:ce:ba:62:85:e2:e6:f7:
45:43:bc:ba:46:7a:8a:d3:4d:30:53:49:bc:f4:5f:9b:a3:c2:
a9:dd:5c:14:f8:78:fb:08:65:40:21:02:2f:38:7c:6c:8d:8a:
33:22:6f:f5:af:c1:6a:b6:30:2d:86:55:24:fb:c8:cd:1b:69:
65:26:cd:51:fc:24:e1:f3:e8:a3:2e:33:96:1f:6d:c9:29:27:
9f:3e:ef:c6:d2:7e:5c:aa:3c:f4:96:e3:b3:69:53:6e:af:9a:
26:3f:d2:e8:e5:75:58:97:1c:d1:88:55:71:98:79:98:c1:d8:
fb:59:41:0c:07:f0:2a:17:88:73:14:f6:b9:c7:35:8d:bb:b1:
3e:d2:87:cb:51:e6:79:99:bd:b1:b2:f0:02:5b:84:87:56:72:
88:fe:ef:bb:d6:74:db:16:af:df:7b:16:db:6a:e3:67:9f:af:
fb:40:f8:4c:4f:94:e8:cc:31:c8:08:af:d3:a5:25:5a:05:0b:
57:d0:07:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:58:56 2026 by rpki-client