Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eNgxFof__aJgFG-fM-WbMgesakE.roa
File: eNgxFof__aJgFG-fM-WbMgesakE.roa (raw, json)
Hash identifier: e+MHRSvAKiQl4NPwsvF2TCAiilK823zLQWoT/MlXItM=
Subject key identifier: 78:D8:31:16:87:FF:FD:A2:60:14:6F:9F:33:E5:9B:32:07:AC:6A:41
Certificate issuer: /CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Certificate serial: 019D2EDB0021EF7805BBDCAB5C12D54C756A
Authority key identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eNgxFof__aJgFG-fM-WbMgesakE.roa
Signing time: Fri 27 Mar 2026 10:33:17 +0000
ROA not before: Fri 27 Mar 2026 10:33:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8528
IP address blocks: 138.21.0.0/16 maxlen: 24
138.21.3.0/24 maxlen: 24
138.21.4.0/24 maxlen: 24
138.21.12.0/24 maxlen: 24
138.21.23.0/24 maxlen: 24
138.21.47.0/24 maxlen: 24
138.21.50.0/24 maxlen: 24
138.21.55.0/24 maxlen: 24
138.21.56.0/24 maxlen: 24
138.21.113.0/24 maxlen: 24
138.21.117.0/24 maxlen: 24
138.21.119.0/24 maxlen: 24
138.21.148.0/24 maxlen: 24
193.8.143.0/24 maxlen: 24
193.194.132.0/22 maxlen: 22
193.194.134.0/24 maxlen: 24
193.194.135.0/24 maxlen: 24
194.41.4.0/22 maxlen: 22
194.146.54.0/24 maxlen: 24
2a00:7ec0::/32 maxlen: 32
2a00:7ec0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:db:00:21:ef:78:05:bb:dc:ab:5c:12:d5:4c:75:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Validity
Not Before: Mar 27 10:33:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78d8311687fffda260146f9f33e59b3207ac6a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:f2:d8:97:3b:9b:11:d5:74:70:fa:34:cf:
cc:ec:a5:00:47:7e:6c:78:32:24:c8:e1:3f:b1:fe:
8f:9c:2c:40:7d:5b:5e:2a:6b:6c:43:a2:16:da:d3:
9e:99:79:1a:6b:1a:f1:c3:bc:61:b2:8a:8a:a4:ff:
a7:19:c0:d8:49:33:a6:80:4d:fa:60:68:9b:90:a6:
70:04:3d:0f:e1:3d:e2:be:05:ed:1f:c6:a2:62:68:
79:65:3d:fd:c7:09:50:2b:82:75:76:2f:91:22:6e:
95:dd:de:58:2d:5c:55:65:79:96:a2:7b:da:7e:b0:
43:81:ed:aa:ae:fc:0a:e2:8f:ea:f3:bf:ad:9c:e7:
de:b3:ca:16:f3:0e:4f:ae:19:80:34:db:3d:78:e3:
b9:38:e8:94:e9:e1:46:e9:a1:79:e9:b7:d5:cc:4b:
35:ff:6e:f4:b0:33:c3:b2:5d:e7:d0:22:68:14:10:
35:7f:e5:a2:aa:99:f3:f7:3f:10:ed:49:70:80:9f:
6a:30:60:ba:eb:13:f7:9a:bd:89:c7:a5:63:4a:64:
eb:12:0b:cc:1f:d8:0d:ff:43:52:28:f9:6e:a4:89:
fc:a2:2d:88:dc:28:a7:8e:d6:b6:1a:b0:96:36:1b:
0d:8d:86:11:bf:ed:5e:b6:6f:60:df:ff:09:26:02:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D8:31:16:87:FF:FD:A2:60:14:6F:9F:33:E5:9B:32:07:AC:6A:41
X509v3 Authority Key Identifier:
keyid:78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eNgxFof__aJgFG-fM-WbMgesakE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.21.0.0/16
193.8.143.0/24
193.194.132.0/22
194.41.4.0/22
194.146.54.0/24
IPv6:
2a00:7ec0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:a3:46:5a:81:e8:0f:4e:d2:e7:07:1b:40:f3:e3:fe:b0:28:
11:18:32:35:7a:37:f4:21:19:38:81:97:c1:06:04:54:bd:3b:
ac:6b:08:4a:02:86:bb:5b:3d:a4:d8:14:47:e4:8b:80:8d:bd:
83:fc:d5:bc:5b:7b:d7:fb:e9:d4:58:3e:a6:33:a1:7a:c6:6d:
7f:c7:69:9e:55:b1:03:b5:3b:b3:81:49:c6:38:da:34:a1:53:
6f:ac:69:a5:f8:b2:dd:2f:90:53:5c:36:51:50:45:6c:12:99:
a0:53:36:bc:72:f8:3c:2e:8a:51:2b:0f:3f:4c:c3:61:f6:b7:
9d:a9:7f:11:e5:d7:48:af:cc:0b:25:ad:9e:05:46:d1:58:c7:
0a:88:87:b9:64:f6:cb:80:c2:d4:f4:5a:1f:d1:9d:0d:1d:ce:
1c:88:70:37:a8:eb:c4:24:c4:17:f8:42:4f:36:99:17:3b:0a:
10:94:24:df:96:55:fb:fa:82:3e:09:68:c5:ee:61:8f:a6:2e:
9e:6a:d9:4a:b7:bf:ae:f4:af:50:4c:84:52:0f:a1:74:1b:57:
55:1b:c6:5d:df:c4:4a:fa:61:b6:75:ac:d6:84:2e:3f:8f:aa:
33:00:28:23:8e:36:f6:b2:30:bb:58:78:f4:32:5d:82:dc:d5:
0d:bf:c3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:44:12 2026 by rpki-client