Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EUPGlrH1dbC_ik0wqKXsY-Y86dg.roa
File: EUPGlrH1dbC_ik0wqKXsY-Y86dg.roa (raw, json)
Hash identifier: Ab/mohEMVe0kDmmR8wBZP3DDwJvujq3ctND0/ryRQuA=
Subject key identifier: 11:43:C6:96:B1:F5:75:B0:BF:8A:4D:30:A8:A5:EC:63:E6:3C:E9:D8
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0EC637E85A6A16BC584A9F72EF3044EBE
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EUPGlrH1dbC_ik0wqKXsY-Y86dg.roa
Signing time: Tue 29 Sep 2026 08:58:58 +0000
ROA not before: Tue 29 Sep 2026 08:58:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 45.15.153.0/24 maxlen: 24
45.83.150.0/24 maxlen: 24
45.83.151.0/24 maxlen: 24
45.128.55.0/24 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.73.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.128.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:63:7e:85:a6:a1:6b:c5:84:a9:f7:2e:f3:04:4e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 29 08:58:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1143c696b1f575b0bf8a4d30a8a5ec63e63ce9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:73:1a:c7:02:1f:b3:62:fa:1e:8f:b9:be:
eb:a9:c7:aa:75:1c:ca:79:46:8e:72:a4:3d:c5:0c:
be:d0:32:6b:c3:85:2d:18:e0:71:21:73:d8:8a:33:
72:38:fc:72:e6:b0:98:92:84:5c:75:43:11:d5:aa:
30:c9:d0:1a:97:af:ef:0f:cb:df:f1:b2:46:5d:50:
81:ac:00:66:c5:dc:54:d9:39:a9:cb:ce:f3:16:bd:
20:d1:a4:cb:82:26:aa:35:bf:58:e6:12:df:91:73:
37:ce:ba:4b:2e:4a:ec:94:77:8f:9b:cb:58:4c:68:
b1:7c:64:f7:ac:3b:e8:ed:47:35:ff:6e:77:fd:66:
d4:c0:9c:ed:08:e5:0d:64:fe:56:b9:3f:76:17:8f:
26:97:0f:82:0c:ed:4b:15:d1:c0:4e:e8:3d:fb:2b:
2a:ab:0f:36:00:47:79:e8:c6:0b:2d:f1:2a:3d:29:
2b:45:66:98:31:99:bb:f0:c7:c7:49:32:59:b6:10:
4f:a4:e1:62:84:1c:d2:2a:5d:c8:7f:33:ea:8b:ad:
6b:bf:df:84:7e:af:2b:64:6c:8e:35:3d:39:53:7a:
14:39:a6:4d:84:35:52:4f:38:d7:c1:36:a6:4e:f5:
d9:7c:06:40:78:f8:14:bc:f1:66:74:9e:35:a2:e8:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:43:C6:96:B1:F5:75:B0:BF:8A:4D:30:A8:A5:EC:63:E6:3C:E9:D8
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EUPGlrH1dbC_ik0wqKXsY-Y86dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.153.0/24
45.83.150.0/23
45.128.55.0-45.128.56.255
45.128.73.0-45.128.75.255
Signature Algorithm: sha256WithRSAEncryption
76:4f:0b:4d:9f:9a:8b:f3:51:f0:ad:9e:19:44:e8:b8:d7:07:
63:57:8b:64:71:75:f1:33:6a:f8:fa:ce:7c:11:26:ad:2e:b5:
e6:59:f7:23:aa:e0:5c:a9:36:ea:5a:83:21:b3:4b:ab:c7:81:
0f:43:ce:ab:98:7f:12:4a:b4:a5:53:51:aa:ac:ad:e1:47:9e:
87:16:5a:5e:0d:97:d3:73:77:c4:86:83:8f:36:0e:87:eb:df:
82:f3:81:f9:85:23:cc:b8:2e:94:e4:1c:c7:b7:27:74:06:53:
40:ba:86:32:7a:10:cb:3b:0d:4c:14:96:f1:b0:5d:73:ec:05:
ce:d3:e1:ac:24:af:3b:a2:8d:9d:9a:25:36:59:b4:62:ae:70:
1a:42:d9:c3:d3:19:66:e3:f5:1e:9e:53:02:56:ba:56:e5:a0:
d4:2b:16:e9:e7:9d:7e:15:67:9b:de:b3:6b:63:1d:58:63:4c:
0a:ae:a4:54:9a:f8:8a:b4:3c:76:fe:9a:17:8e:c2:f2:44:04:
8b:4e:9b:45:a1:be:c3:bc:bf:24:26:57:e6:31:f0:3a:b0:e9:
44:fb:39:48:78:6b:3f:64:f4:6a:32:4a:de:c1:8f:ed:ef:c2:
74:62:da:98:3c:55:9e:5c:38:e3:eb:2b:8a:0b:49:61:42:32:
61:ae:a7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:30:06 2026 by rpki-client