Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/OM0HzHsrMZ29JyaGfdBe1f1AmqU.roa
File: OM0HzHsrMZ29JyaGfdBe1f1AmqU.roa (raw, json)
Hash identifier: q96qYiUtNKDfInNeYYE/bDuvgA7MdaU6WyzLOvLJMS8=
Subject key identifier: 38:CD:07:CC:7B:2B:31:9D:BD:27:26:86:7D:D0:5E:D5:FD:40:9A:A5
Certificate issuer: /CN=ce02b14622c3ee03950ae7123f57f4e6de48275a
Certificate serial: 019F2368EF0FC8A3FD8B56F7F2EC70425930
Authority key identifier: CE:02:B1:46:22:C3:EE:03:95:0A:E7:12:3F:57:F4:E6:DE:48:27:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgKxRiLD7gOVCucSP1f05t5IJ1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/OM0HzHsrMZ29JyaGfdBe1f1AmqU.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44692
IP address blocks: 78.31.144.0/23 maxlen: 23
78.31.146.0/23 maxlen: 23
78.31.148.0/23 maxlen: 23
78.31.150.0/23 maxlen: 23
85.202.96.0/20 maxlen: 24
85.202.107.0/24 maxlen: 24
109.125.192.0/19 maxlen: 19
109.125.218.0/23 maxlen: 23
109.125.220.0/22 maxlen: 22
109.125.224.0/23 maxlen: 23
109.125.226.0/23 maxlen: 23
109.125.228.0/23 maxlen: 23
109.125.230.0/23 maxlen: 23
109.125.232.0/22 maxlen: 22
109.125.236.0/22 maxlen: 22
109.125.240.0/22 maxlen: 22
109.125.244.0/22 maxlen: 22
109.125.248.0/22 maxlen: 22
109.125.253.0/24 maxlen: 24
109.125.254.0/24 maxlen: 24
109.125.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgKxRiLD7gOVCucSP1f05t5IJ1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ef:0f:c8:a3:fd:8b:56:f7:f2:ec:70:42:59:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce02b14622c3ee03950ae7123f57f4e6de48275a
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38cd07cc7b2b319dbd2726867dd05ed5fd409aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:7b:1f:93:87:6c:a3:31:04:6e:95:07:e1:
87:8a:4c:39:4e:8b:8a:d8:02:f9:41:d2:49:26:ce:
be:50:b9:5a:0d:e6:30:17:4f:d0:ef:06:f6:e7:14:
1f:18:df:9b:1f:d3:87:f3:d0:29:97:0d:ca:e6:cb:
b2:b1:f3:49:b4:50:92:fc:77:d7:6e:f8:66:9b:8c:
77:67:9b:f4:f4:a8:d2:ec:ee:49:64:e6:5f:63:35:
6d:03:04:47:c3:8d:63:21:f4:b2:1d:06:f9:91:ec:
06:70:95:c6:09:a1:0c:ce:c6:fc:23:de:1e:ea:d5:
f3:ef:22:bd:81:7b:39:07:f6:d7:c0:db:29:b2:df:
94:93:ed:a9:2d:4d:a2:d8:09:61:1d:13:b7:15:45:
5a:a2:ef:3f:26:65:4e:e9:aa:b6:35:de:81:19:90:
38:c5:87:b6:0a:d1:10:dd:1e:4b:ba:a6:73:53:28:
d2:ae:06:e8:0a:23:e4:35:2a:4f:5e:8b:3a:7c:f6:
8f:b1:63:37:bf:f7:98:e1:e8:c2:e1:5c:12:68:a5:
b5:8d:40:10:70:7b:e3:40:92:36:8d:ac:bd:7b:42:
28:47:4a:ad:7a:8b:c6:14:ee:2b:66:be:ab:88:9f:
7f:05:28:61:10:4d:65:0c:09:10:19:86:a2:5a:41:
3e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CD:07:CC:7B:2B:31:9D:BD:27:26:86:7D:D0:5E:D5:FD:40:9A:A5
X509v3 Authority Key Identifier:
keyid:CE:02:B1:46:22:C3:EE:03:95:0A:E7:12:3F:57:F4:E6:DE:48:27:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgKxRiLD7gOVCucSP1f05t5IJ1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/OM0HzHsrMZ29JyaGfdBe1f1AmqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/zgKxRiLD7gOVCucSP1f05t5IJ1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.144.0/21
85.202.96.0/20
109.125.192.0-109.125.251.255
109.125.253.0-109.125.255.255
Signature Algorithm: sha256WithRSAEncryption
4e:0e:6b:ca:11:54:ca:4f:14:a8:68:b0:c8:72:12:ef:b3:d2:
54:da:ec:29:d7:e8:d6:88:39:b8:8c:99:f6:44:77:78:25:a8:
83:32:b7:93:b9:07:32:a4:2b:94:d7:e6:44:5a:55:07:44:9c:
85:7d:4d:e4:4a:d7:8c:04:ea:b0:43:0f:ab:14:b3:fd:15:d4:
d6:04:fe:70:13:1b:6c:79:6e:9b:b1:dc:11:7f:78:12:b4:cc:
c8:15:4a:5a:e7:2d:d0:da:87:c5:c3:93:8f:41:5a:93:85:b7:
7a:65:b6:31:74:34:ea:3f:fb:2b:07:cc:74:de:5d:e7:c3:80:
7d:36:54:3e:88:98:70:67:c2:31:5e:a2:21:71:25:02:be:91:
59:d0:67:78:85:7e:f8:c4:a0:16:f8:2b:25:2a:7f:8e:88:6f:
3e:c1:45:80:61:64:69:14:6f:b7:20:69:10:16:81:74:9e:e3:
51:ae:fa:d2:a2:db:d0:53:20:a0:df:19:d0:f0:3d:35:4b:70:
7c:6a:fd:f6:58:55:c8:35:5e:25:30:4b:a7:c9:64:f0:ce:23:
97:62:bc:83:60:02:29:4f:18:f1:89:87:b8:5b:4c:06:d6:bf:
c6:ef:a0:c4:19:de:c2:2a:88:75:ff:26:48:57:33:76:5c:20:
0e:13:88:d2
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZ8jaO8PyKP9i1b38uxwQlkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMDJiMTQ2MjJjM2VlMDM5NTBhZTcxMjNmNTdmNGU2ZGU0
ODI3NWEwHhcNMjYwNzAyMTUxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGNkMDdjYzdiMmIzMTlkYmQyNzI2ODY3ZGQwNWVkNWZkNDA5YWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJN7H5OHbKMxBG6VB+GHikw5TouK
2AL5QdJJJs6+ULlaDeYwF0/Q7wb25xQfGN+bH9OH89Aplw3K5suysfNJtFCS/HfX
bvhmm4x3Z5v09KjS7O5JZOZfYzVtAwRHw41jIfSyHQb5kewGcJXGCaEMzsb8I94e
6tXz7yK9gXs5B/bXwNspst+Uk+2pLU2i2AlhHRO3FUVaou8/JmVO6aq2Nd6BGZA4
xYe2CtEQ3R5LuqZzUyjSrgboCiPkNSpPXos6fPaPsWM3v/eY4ejC4VwSaKW1jUAQ
cHvjQJI2jay9e0IoR0qteovGFO4rZr6riJ9/BShhEE1lDAkQGYaiWkE+dQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFDjNB8x7KzGdvScmhn3QXtX9QJqlMB8GA1UdIwQY
MBaAFM4CsUYiw+4DlQrnEj9X9ObeSCdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemdLeFJpTEQ3Z09WQ3VjU1AxZjA1dDVJSjFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lYWVhNTktOTE5ZC00MTM1LTliZGUt
NmRjZjBjOTNjYmRiLzEvT00wSHpIc3JNWjI5SnlhR2ZkQmUxZjFBbXFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lYWVhNTktOTE5ZC00MTM1LTliZGUtNmRjZjBjOTNjYmRi
LzEvemdLeFJpTEQ3Z09WQ3VjU1AxZjA1dDVJSjFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAtBAIAATAnAwQDTh+QAwQE
VcpgMAwDBAZtfcADBAJtffgwCwMEAG19/QMDAW18MA0GCSqGSIb3DQEBCwUAA4IB
AQBODmvKEVTKTxSoaLDIchLvs9JU2uwp1+jWiDm4jJn2RHd4JaiDMreTuQcypCuU
1+ZEWlUHRJyFfU3kSteMBOqwQw+rFLP9FdTWBP5wExtseW6bsdwRf3gStMzIFUpa
5y3Q2ofFw5OPQVqThbd6ZbYxdDTqP/srB8x03l3nw4B9NlQ+iJhwZ8IxXqIhcSUC
vpFZ0Gd4hX74xKAW+CslKn+OiG8+wUWAYWRpFG+3IGkQFoF0nuNRrvrSotvQUyCg
3xnQ8D01S3B8av32WFXINV4lMEunyWTwziOXYryDYAIpTxjxiYe4W0wG1r/G76DE
Gd7CKoh1/yZIVzN2XCAOE4jS
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:07:52 2026 by rpki-client