Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/EQcSnDEzv8FK_xJY9AK1FSIjcbI.roa
File: EQcSnDEzv8FK_xJY9AK1FSIjcbI.roa (raw, json)
Hash identifier: yd6zB2ZMaqidG2yxAxCdRzrLByF+Ug+XA8C46cFlruo=
Subject key identifier: 11:07:12:9C:31:33:BF:C1:4A:FF:12:58:F4:02:B5:15:22:23:71:B2
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 01A16857E81C23D2FD43DB6D6CEA7DAD87EE
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/EQcSnDEzv8FK_xJY9AK1FSIjcbI.roa
Signing time: Fri 23 Oct 2026 10:39:13 +0000
ROA not before: Fri 23 Oct 2026 10:39:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31363
IP address blocks: 89.17.33.0/24 maxlen: 24
89.17.35.0/24 maxlen: 24
89.17.49.0/24 maxlen: 24
89.17.51.0/24 maxlen: 24
89.17.52.0/22 maxlen: 22
89.17.56.0/21 maxlen: 21
185.62.192.0/22 maxlen: 22
185.127.224.0/22 maxlen: 22
217.15.53.0/24 maxlen: 24
217.15.56.0/23 maxlen: 23
217.15.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:57:e8:1c:23:d2:fd:43:db:6d:6c:ea:7d:ad:87:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Oct 23 10:39:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1107129c3133bfc14aff1258f402b515222371b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:ff:b1:8f:c1:68:e3:c3:83:ac:3f:cc:c4:
03:38:c7:ae:95:45:c4:54:db:16:83:5d:32:d9:6d:
b9:d0:31:f8:94:bb:ed:b5:de:0a:6e:b8:23:93:ac:
cc:d0:b3:0f:2d:08:fe:c1:7c:35:eb:a1:dd:b6:49:
c7:20:d3:4e:7d:75:0e:b2:30:a2:21:92:33:59:7b:
4a:2e:92:4b:19:ff:6a:82:d4:78:53:43:92:2b:87:
9b:5e:76:ec:01:f6:d3:ea:ed:10:29:48:04:56:63:
53:62:cf:d1:67:d9:11:64:af:d6:d4:2d:33:ca:3a:
98:46:59:fb:03:94:16:a6:6d:20:3a:5e:0a:33:77:
d3:10:9b:bb:67:78:23:83:77:c8:35:63:fa:09:5f:
a4:29:c7:48:35:4d:74:96:0c:73:46:ea:e7:a6:8d:
d2:99:b9:84:34:0d:21:7c:fc:4d:c1:e2:91:33:ed:
da:f6:c8:5c:c1:bb:d3:32:33:98:69:0b:99:7a:db:
e9:0a:14:cb:21:5a:cc:d7:86:e4:53:41:e8:86:75:
8c:1c:27:f6:ca:23:5d:2a:24:be:2f:98:6b:c6:34:
04:c5:25:3a:6c:c2:5b:f6:ef:1d:05:b6:91:3e:7a:
62:f9:35:5a:d3:5b:e7:60:85:00:4e:49:34:b5:6e:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:07:12:9C:31:33:BF:C1:4A:FF:12:58:F4:02:B5:15:22:23:71:B2
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/EQcSnDEzv8FK_xJY9AK1FSIjcbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.17.33.0/24
89.17.35.0/24
89.17.49.0/24
89.17.51.0-89.17.63.255
185.62.192.0/22
185.127.224.0/22
217.15.53.0/24
217.15.56.0/23
217.15.62.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:66:a7:7e:89:49:08:62:82:86:b8:5d:11:60:24:b5:7f:31:
4e:0c:69:d4:9e:7f:64:ba:ca:78:2d:d0:0f:47:b8:55:a2:16:
23:ab:bd:52:f5:7d:8c:87:86:bc:30:8b:f8:38:02:ac:ea:27:
df:b6:5b:ba:2a:bd:2d:0f:c9:bc:41:e7:20:d3:a0:29:d6:a3:
9e:77:5a:59:4a:db:2f:94:c8:b0:0a:0e:60:80:c9:ef:ff:a8:
c7:53:d0:a4:4f:30:63:a5:3f:2b:59:89:8b:20:ed:8b:8f:3c:
9e:50:d3:c2:aa:2e:51:d3:af:2b:b7:a0:86:c7:1f:5d:dc:10:
a0:02:fc:16:00:00:23:cc:b0:e9:8a:55:ff:a2:18:34:91:72:
18:76:8b:ea:8f:b9:89:e4:15:ad:b6:17:44:b2:0e:e5:c4:a3:
0f:f8:65:0e:4b:8a:96:c3:5e:b1:7e:d8:82:db:13:5e:80:77:
95:da:88:a5:b1:e4:c4:17:76:4e:0e:1a:16:fc:be:99:80:d3:
f1:e0:ac:cf:f3:84:d0:6d:84:42:b7:ac:6c:de:35:bb:0a:01:
9b:8b:cd:89:35:0f:0b:1e:18:9b:ea:08:f7:e5:13:46:9c:5c:
7e:b1:1d:34:9a:11:90:84:5c:16:02:e0:8e:97:07:8e:9d:12:
df:dd:9a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:30:39 2026 by rpki-client