Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ewDaSoQ2WlAQutsw8_R0atBJlE4.roa
File: ewDaSoQ2WlAQutsw8_R0atBJlE4.roa (raw, json)
Hash identifier: LLZV4p0K174Ir8CapZEKn2arpvmHZfi6iVuNQzk0LaU=
Subject key identifier: 7B:00:DA:4A:84:36:5A:50:10:BA:DB:30:F3:F4:74:6A:D0:49:94:4E
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0807587C49DE81B2822AC0937AD6A3E95
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ewDaSoQ2WlAQutsw8_R0atBJlE4.roa
Signing time: Tue 08 Sep 2026 09:59:41 +0000
ROA not before: Tue 08 Sep 2026 09:59:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 134.49.67.0/24 maxlen: 24
134.49.69.0/24 maxlen: 24
134.49.72.0/24 maxlen: 24
134.49.76.0/24 maxlen: 24
134.49.80.0/24 maxlen: 24
134.49.83.0/24 maxlen: 24
134.49.85.0/24 maxlen: 24
134.49.88.0/24 maxlen: 24
136.176.168.0/24 maxlen: 24
136.176.177.0/24 maxlen: 24
136.176.185.0/24 maxlen: 24
145.63.161.0/24 maxlen: 24
145.63.163.0/24 maxlen: 24
145.63.168.0/24 maxlen: 24
145.63.172.0/24 maxlen: 24
145.63.181.0/24 maxlen: 24
145.63.184.0/24 maxlen: 24
145.63.186.0/24 maxlen: 24
145.63.187.0/24 maxlen: 24
145.63.189.0/24 maxlen: 24
147.90.22.0/24 maxlen: 24
147.90.34.0/24 maxlen: 24
147.90.52.0/24 maxlen: 24
147.90.77.0/24 maxlen: 24
147.90.183.0/24 maxlen: 24
147.90.194.0/24 maxlen: 24
147.90.204.0/24 maxlen: 24
147.90.215.0/24 maxlen: 24
147.90.228.0/24 maxlen: 24
147.90.233.0/24 maxlen: 24
158.173.185.0/24 maxlen: 24
158.173.200.0/24 maxlen: 24
158.173.202.0/24 maxlen: 24
158.173.207.0/24 maxlen: 24
158.173.213.0/24 maxlen: 24
158.173.226.0/24 maxlen: 24
173.209.1.0/24 maxlen: 24
173.209.3.0/24 maxlen: 24
173.209.9.0/24 maxlen: 24
173.209.14.0/24 maxlen: 24
173.209.15.0/24 maxlen: 24
173.209.17.0/24 maxlen: 24
173.209.20.0/24 maxlen: 24
173.209.23.0/24 maxlen: 24
173.209.26.0/24 maxlen: 24
173.209.27.0/24 maxlen: 24
173.209.29.0/24 maxlen: 24
185.161.110.0/24 maxlen: 24
203.188.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:75:87:c4:9d:e8:1b:28:22:ac:09:37:ad:6a:3e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 8 09:59:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b00da4a84365a5010badb30f3f4746ad049944e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:a0:51:94:25:6d:93:7f:a8:90:77:23:4f:
1f:bb:eb:4f:93:b2:12:29:28:04:90:12:5b:b7:2e:
3f:0c:2b:9e:00:40:b2:1b:f6:e2:4d:3c:e0:64:d0:
cb:ab:e9:48:65:d5:45:eb:6c:d4:61:cf:7d:be:33:
b8:a0:eb:17:81:6d:77:06:8b:db:2b:cc:11:d2:f8:
83:6d:dd:98:17:64:44:42:0a:e2:5c:58:8a:fe:c7:
11:65:1d:71:e0:10:fd:ba:d8:69:26:2a:68:b1:52:
92:00:e6:3b:ca:76:d4:5f:b9:e5:24:2b:5a:85:42:
13:5a:48:65:d6:55:1b:b9:a9:c8:62:68:2d:cf:47:
31:a8:db:c4:68:03:6c:19:8f:13:48:00:09:de:d0:
f7:92:de:08:46:de:a1:15:ec:19:83:e1:1f:e0:ac:
d4:1b:74:66:eb:dc:0d:b1:b5:ae:e4:75:0d:85:97:
ca:4c:44:fe:8f:f9:71:00:64:92:04:30:28:cc:ee:
90:ca:93:ce:3e:f9:b2:92:98:2b:64:72:23:4b:b9:
72:14:43:93:80:9a:0a:8c:f7:1e:bd:fd:04:1e:70:
9a:0c:92:71:80:e3:7e:3c:bd:b5:87:84:61:3b:fd:
5a:54:79:b6:bb:a1:6c:c2:b5:f6:02:4f:fd:a3:84:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:00:DA:4A:84:36:5A:50:10:BA:DB:30:F3:F4:74:6A:D0:49:94:4E
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ewDaSoQ2WlAQutsw8_R0atBJlE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.49.67.0/24
134.49.69.0/24
134.49.72.0/24
134.49.76.0/24
134.49.80.0/24
134.49.83.0/24
134.49.85.0/24
134.49.88.0/24
136.176.168.0/24
136.176.177.0/24
136.176.185.0/24
145.63.161.0/24
145.63.163.0/24
145.63.168.0/24
145.63.172.0/24
145.63.181.0/24
145.63.184.0/24
145.63.186.0/23
145.63.189.0/24
147.90.22.0/24
147.90.34.0/24
147.90.52.0/24
147.90.77.0/24
147.90.183.0/24
147.90.194.0/24
147.90.204.0/24
147.90.215.0/24
147.90.228.0/24
147.90.233.0/24
158.173.185.0/24
158.173.200.0/24
158.173.202.0/24
158.173.207.0/24
158.173.213.0/24
158.173.226.0/24
173.209.1.0/24
173.209.3.0/24
173.209.9.0/24
173.209.14.0/23
173.209.17.0/24
173.209.20.0/24
173.209.23.0/24
173.209.26.0/23
173.209.29.0/24
185.161.110.0/24
203.188.168.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:35:d9:46:8d:60:bc:4d:d9:9e:f3:6d:ab:29:44:36:31:eb:
33:52:f8:1b:f4:f9:61:78:fe:9d:a3:48:d7:e4:cf:8b:a6:b5:
c6:04:f1:28:9c:c4:ba:42:eb:dd:46:81:eb:4a:5d:6d:f9:10:
10:e6:2f:64:97:dd:3f:c3:d5:70:95:77:69:bf:a8:81:43:bc:
e3:2b:56:0e:d0:28:d3:bd:21:73:95:19:1f:dd:87:d6:f8:38:
26:b2:81:0e:c0:4a:75:bc:7b:2a:02:76:4c:71:4b:24:aa:23:
a5:f4:be:a3:c7:30:03:30:9c:d2:6b:5c:c6:24:3a:bd:19:82:
5c:bb:70:6f:40:2f:e4:9b:d7:c4:43:be:2c:fc:0a:44:19:d9:
c8:f8:8d:7f:47:df:69:10:22:db:c4:ae:9f:bd:c8:7c:8d:6f:
01:7a:7f:0f:f6:d7:a2:e8:e4:d8:2e:3b:06:c0:38:71:bd:69:
62:22:22:74:5c:e1:60:db:7a:c2:4f:a4:91:e6:0c:4d:3b:4e:
9e:f4:cf:aa:67:13:ca:b2:0c:ce:88:6f:7d:f8:52:ae:b3:f2:
26:9f:8e:70:39:aa:86:25:68:53:46:a0:7b:77:12:46:39:f4:
01:e7:d0:a6:c1:e2:90:36:4a:4a:80:93:82:57:a3:32:ee:59:
06:14:2a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:14:10 2026 by rpki-client