Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/EGrIiKvxrg_4K2v4gGSZns_Rspc.roa
File: EGrIiKvxrg_4K2v4gGSZns_Rspc.roa (raw, json)
Hash identifier: ecIJtNNq5zkceaS4C6m3Xn6Alzv0fBe2LTCYq95eGSI=
Subject key identifier: 10:6A:C8:88:AB:F1:AE:0F:F8:2B:6B:F8:80:64:99:9E:CF:D1:B2:97
Certificate issuer: /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial: 01A061B2278E86E45AC5CAF37BD7EC7DEF1B
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/EGrIiKvxrg_4K2v4gGSZns_Rspc.roa
Signing time: Wed 02 Sep 2026 10:37:40 +0000
ROA not before: Wed 02 Sep 2026 10:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 5.101.136.0/21 maxlen: 21
5.101.144.0/21 maxlen: 21
5.101.168.0/21 maxlen: 21
31.132.0.0/21 maxlen: 21
37.9.56.0/21 maxlen: 21
77.74.192.0/21 maxlen: 21
77.75.120.0/21 maxlen: 21
78.110.160.0/21 maxlen: 21
78.110.169.0/24 maxlen: 24
78.110.170.0/24 maxlen: 24
78.110.172.0/22 maxlen: 22
78.157.192.0/21 maxlen: 21
78.157.200.0/24 maxlen: 24
78.157.201.0/24 maxlen: 24
78.157.203.0/24 maxlen: 24
78.157.204.0/24 maxlen: 24
78.157.206.0/23 maxlen: 23
78.157.208.0/20 maxlen: 20
81.92.192.0/22 maxlen: 22
81.92.217.0/24 maxlen: 24
81.92.218.0/24 maxlen: 24
91.109.112.0/21 maxlen: 21
94.46.184.0/22 maxlen: 22
94.46.192.0/22 maxlen: 22
94.46.207.0/24 maxlen: 24
94.46.220.0/22 maxlen: 22
94.46.244.0/24 maxlen: 24
94.46.245.0/24 maxlen: 24
94.46.247.0/24 maxlen: 24
94.229.64.0/20 maxlen: 20
178.159.0.0/20 maxlen: 20
185.17.24.0/24 maxlen: 24
185.17.26.0/24 maxlen: 24
185.17.27.0/24 maxlen: 24
185.99.252.0/24 maxlen: 24
185.99.253.0/24 maxlen: 24
185.99.254.0/24 maxlen: 24
185.103.96.0/22 maxlen: 22
185.109.168.0/22 maxlen: 22
2a01:a500::/32 maxlen: 32
2a01:a500:1::/48 maxlen: 48
2a01:a500:1228::/48 maxlen: 48
2a01:a500:251a::/48 maxlen: 48
2a01:a500:251b::/48 maxlen: 48
2a01:a500:251c::/48 maxlen: 48
2a01:a500:2566::/48 maxlen: 48
2a01:a500:a517::/48 maxlen: 48
2a01:a500:b517::/48 maxlen: 48
2a01:a500:c517::/48 maxlen: 48
2a01:a500:d517::/48 maxlen: 48
2a01:a500:e517::/48 maxlen: 48
2a01:a500:f517::/48 maxlen: 48
2a01:a502::/32 maxlen: 32
2a01:a507::/32 maxlen: 32
2a01:a507:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:b2:27:8e:86:e4:5a:c5:ca:f3:7b:d7:ec:7d:ef:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
Validity
Not Before: Sep 2 10:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=106ac888abf1ae0ff82b6bf88064999ecfd1b297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:36:45:87:68:e7:9c:d8:fd:48:2f:59:22:
9c:28:64:a0:e4:60:d8:99:cd:00:e3:7e:0e:35:a5:
0f:b9:70:4d:d5:f6:ed:0d:2b:41:28:2b:bb:be:38:
39:4d:95:d5:af:37:29:83:8c:35:cb:7d:3b:67:07:
a9:fd:e9:1f:3c:8c:31:5b:0d:de:dc:bc:6b:e6:5d:
53:97:8b:23:89:ee:1d:7f:9a:7c:34:20:15:85:f0:
69:62:b6:05:4a:93:d3:4d:d0:99:c2:b3:2f:5f:da:
6f:8e:98:f3:aa:54:82:ad:c2:66:19:ed:8b:9d:e3:
44:af:10:a2:77:59:54:a3:60:21:5f:70:dc:cb:49:
7f:f9:c7:85:78:0d:81:ce:5d:0d:e0:08:a7:73:59:
4e:b8:8c:27:1e:9e:e7:d1:fc:f2:c4:60:73:9d:a2:
e1:c4:8a:f8:1e:cf:fc:0c:f1:0c:70:2f:f2:50:98:
9f:2c:d4:0c:81:e6:7c:39:67:58:48:06:7b:58:c1:
32:94:f2:ed:47:4a:b9:cc:1f:1d:e9:00:b3:25:db:
27:3b:c0:e1:e8:2e:d5:a6:6a:a7:d6:88:70:ce:34:
19:33:6b:90:cf:f6:c5:ef:ab:6d:df:f8:34:a6:f5:
67:3e:2f:5d:a6:b2:b0:4d:d3:f5:97:7d:e9:74:b6:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6A:C8:88:AB:F1:AE:0F:F8:2B:6B:F8:80:64:99:9E:CF:D1:B2:97
X509v3 Authority Key Identifier:
keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/EGrIiKvxrg_4K2v4gGSZns_Rspc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.136.0-5.101.151.255
5.101.168.0/21
31.132.0.0/21
37.9.56.0/21
77.74.192.0/21
77.75.120.0/21
78.110.160.0/21
78.110.169.0-78.110.170.255
78.110.172.0/22
78.157.192.0-78.157.201.255
78.157.203.0-78.157.204.255
78.157.206.0-78.157.223.255
81.92.192.0/22
81.92.217.0-81.92.218.255
91.109.112.0/21
94.46.184.0/22
94.46.192.0/22
94.46.207.0/24
94.46.220.0/22
94.46.244.0/23
94.46.247.0/24
94.229.64.0/20
178.159.0.0/20
185.17.24.0/24
185.17.26.0/23
185.99.252.0-185.99.254.255
185.103.96.0/22
185.109.168.0/22
IPv6:
2a01:a500::/32
2a01:a502::/32
2a01:a507::/32
Signature Algorithm: sha256WithRSAEncryption
27:81:31:95:b1:16:59:8e:70:77:67:23:1b:71:bd:5c:f0:a8:
1a:15:cb:c6:d6:12:4e:12:60:d1:9c:ca:e0:84:c1:25:58:ba:
d9:e1:09:cf:f6:fd:e7:9c:79:73:91:ff:8b:8a:a3:94:76:69:
3a:52:36:15:d1:e4:6b:47:4f:9e:6a:d6:46:10:1b:c4:84:20:
d6:48:85:8e:d3:6c:d1:a0:7d:fe:ac:44:e0:08:cc:6f:ea:f1:
07:7d:3b:6a:d7:b2:c0:02:3b:ca:ec:b9:44:76:77:6b:45:99:
35:ce:15:ae:0d:7f:e4:d0:9a:36:f6:26:a2:3b:75:60:d9:02:
a4:2b:55:08:57:96:26:85:89:1d:3e:3b:29:6d:d6:60:aa:1f:
53:1c:2c:6f:18:4e:ca:30:30:32:92:d2:a3:05:7b:62:04:09:
5b:ad:9c:62:36:dc:f8:d3:75:57:5b:5c:31:19:cd:7d:5c:e7:
b3:59:c2:60:ed:f2:77:7f:32:fd:ac:3d:12:cf:fb:49:dd:94:
5c:cc:7a:6f:6b:f6:bb:f6:e7:51:68:f8:06:06:0c:84:b7:c1:
7f:b0:5c:a7:4d:b4:7b:67:67:00:7f:5d:bf:a9:72:32:4d:c3:
71:25:81:36:b4:4d:58:31:5c:bc:79:db:25:be:b9:24:5b:9d:
d5:d6:22:6c
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgISAaBhsieOhuRaxcrze9fsfe8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmZkYmI2YTRiMTY2MzM2OWRhNDA3ZGI5N2IwMjFmNzMy
ODRhMjgwHhcNMjYwOTAyMTAzNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDZhYzg4OGFiZjFhZTBmZjgyYjZiZjg4MDY0OTk5ZWNmZDFiMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmQ2RYdo55zY/UgvWSKcKGSg5GDY
mc0A434ONaUPuXBN1fbtDStBKCu7vjg5TZXVrzcpg4w1y307Zwep/ekfPIwxWw3e
3Lxr5l1Tl4sjie4df5p8NCAVhfBpYrYFSpPTTdCZwrMvX9pvjpjzqlSCrcJmGe2L
neNErxCid1lUo2AhX3Dcy0l/+ceFeA2Bzl0N4Ainc1lOuIwnHp7n0fzyxGBznaLh
xIr4Hs/8DPEMcC/yUJifLNQMgeZ8OWdYSAZ7WMEylPLtR0q5zB8d6QCzJdsnO8Dh
6C7Vpmqn1ohwzjQZM2uQz/bF76tt3/g0pvVnPi9dprKwTdP1l33pdLZ+9QIDAQAB
o4IDCDCCAwQwHQYDVR0OBBYEFBBqyIir8a4P+Ctr+IBkmZ7P0bKXMB8GA1UdIwQY
MBaAFAW/27aksWYzadpAfbl7Ah9zKEooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJfYnRxU3haak5wMmtCOXVYc0NIM01vU2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80NjBjMDAtM2U5NS00Mjc0LWJjOWMt
MDYwZGFjZmViZTBmLzEvRUdySWlLdnhyZ180SzJ2NGdHU1puc19Sc3BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80NjBjMDAtM2U5NS00Mjc0LWJjOWMtMDYwZGFjZmViZTBm
LzEvQmJfYnRxU3haak5wMmtCOXVYc0NIM01vU2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCB5wQCAAEwgeAw
DAMEAwVliAMEAwVlkAMEAwVlqAMEAx+EAAMEAyUJOAMEA01KwAMEA01LeAMEA05u
oDAMAwQATm6pAwQATm6qAwQCTm6sMAwDBAZOncADBAFOncgwDAMEAE6dywMEAE6d
zDAMAwQBTp3OAwQFTp3AAwQCUVzAMAwDBABRXNkDBABRXNoDBANbbXADBAJeLrgD
BAJeLsADBABeLs8DBAJeLtwDBAFeLvQDBABeLvcDBARe5UADBASynwADBAC5ERgD
BAG5ERowDAMEArlj/AMEALlj/gMEArlnYAMEArltqDAbBAIAAjAVAwUAKgGlAAMF
ACoBpQIDBQAqAaUHMA0GCSqGSIb3DQEBCwUAA4IBAQAngTGVsRZZjnB3ZyMbcb1c
8KgaFcvG1hJOEmDRnMrghMElWLrZ4QnP9v3nnHlzkf+LiqOUdmk6UjYV0eRrR0+e
atZGEBvEhCDWSIWO02zRoH3+rETgCMxv6vEHfTtq17LAAjvK7LlEdndrRZk1zhWu
DX/k0Jo29iaiO3Vg2QKkK1UIV5YmhYkdPjspbdZgqh9THCxvGE7KMDAyktKjBXti
BAlbrZxiNtz403VXW1wxGc19XOezWcJg7fJ3fzL9rD0Sz/tJ3ZRczHpva/a79udR
aPgGBgyEt8F/sFynTbR7Z2cAf12/qXIyTcNxJYE2tE1YMVy8edslvrkkW53V1iJs
-----END CERTIFICATE-----
Generated at Thu Sep 3 18:06:09 2026 by rpki-client