Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/EzRGNzhdlKjrbsDuAmITDc0zggQ.roa
File: EzRGNzhdlKjrbsDuAmITDc0zggQ.roa (raw, json)
Hash identifier: Bi2YLEA9YF03NCwaBNKNXeFcw1yeMv46EtFHmDY/TH8=
Subject key identifier: 13:34:46:37:38:5D:94:A8:EB:6E:C0:EE:02:62:13:0D:CD:33:82:04
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01A050A911C946A8B5333894885A5C67DF04
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/EzRGNzhdlKjrbsDuAmITDc0zggQ.roa
Signing time: Sun 30 Aug 2026 03:14:12 +0000
ROA not before: Sun 30 Aug 2026 03:14:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202015
IP address blocks: 77.83.199.0/24 maxlen: 24
79.141.160.0/23 maxlen: 23
79.141.162.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
79.141.173.0/24 maxlen: 24
85.158.111.0/24 maxlen: 24
89.46.38.0/24 maxlen: 24
91.193.19.0/24 maxlen: 24
185.33.84.0/23 maxlen: 23
185.33.86.0/23 maxlen: 23
185.253.119.0/24 maxlen: 24
193.42.38.0/24 maxlen: 24
193.111.208.0/24 maxlen: 24
194.124.229.0/24 maxlen: 24
2a01:8640:4::/48 maxlen: 48
2a01:8640:5::/48 maxlen: 48
2a01:8640:b::/48 maxlen: 48
2a01:8640:e::/48 maxlen: 48
2a01:8640:1e::/48 maxlen: 48
2a01:8640:1f::/48 maxlen: 48
2a01:8640:22::/48 maxlen: 48
2a01:8640:23::/48 maxlen: 48
2a01:8640:25::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:50:a9:11:c9:46:a8:b5:33:38:94:88:5a:5c:67:df:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Aug 30 03:14:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13344637385d94a8eb6ec0ee0262130dcd338204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:bc:dc:04:75:56:5b:c5:02:8d:74:f7:ec:
da:46:4f:55:2f:97:4e:53:36:33:ec:1f:8a:89:8a:
79:b4:1a:10:bd:1d:3d:c2:5d:8c:36:c0:1d:d9:1e:
54:4f:48:2b:a5:2d:72:be:a0:ad:17:86:c9:b2:da:
ce:01:9f:cc:a0:de:27:69:f3:f6:5f:b9:3a:83:aa:
ec:44:d5:aa:1f:8f:e2:27:bc:96:76:ae:7b:0a:db:
3b:80:6e:68:e5:e6:85:64:97:50:60:78:61:7b:4d:
21:5b:13:29:4a:40:d2:5f:ed:0d:38:8b:95:b5:76:
33:b4:86:da:e8:5f:f9:73:e8:f0:7a:09:a5:28:c9:
2a:f5:11:53:d9:8d:96:96:3f:08:be:54:78:d4:59:
e7:83:17:d8:e2:a6:0c:ad:70:74:15:f2:67:00:d9:
fa:b0:65:16:7f:62:05:37:2d:94:18:2b:ce:dd:fe:
af:39:0b:9f:71:2e:ac:ec:00:e2:61:24:cd:6c:16:
af:26:05:37:14:27:61:b4:ad:2f:5f:51:53:de:20:
2b:33:f9:10:d8:0a:ad:70:2a:df:3d:92:65:2d:8a:
a7:57:a3:7f:a1:9a:07:b7:4e:43:fe:e0:97:0e:ab:
d9:ba:98:1f:dc:4d:33:74:f7:4e:46:24:06:c7:a6:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:34:46:37:38:5D:94:A8:EB:6E:C0:EE:02:62:13:0D:CD:33:82:04
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/EzRGNzhdlKjrbsDuAmITDc0zggQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.199.0/24
79.141.160.0/22
79.141.172.0/23
85.158.111.0/24
89.46.38.0/24
91.193.19.0/24
185.33.84.0/22
185.253.119.0/24
193.42.38.0/24
193.111.208.0/24
194.124.229.0/24
IPv6:
2a01:8640:4::/47
2a01:8640:b::/48
2a01:8640:e::/48
2a01:8640:1e::/47
2a01:8640:22::/47
2a01:8640:25::/48
Signature Algorithm: sha256WithRSAEncryption
9c:75:3d:01:f3:d2:a2:6d:2f:98:3d:41:82:db:e2:4b:3d:bd:
86:a3:75:4d:77:05:59:1c:79:59:1b:71:15:57:fd:1b:3d:9e:
4c:4f:49:44:96:6f:2a:27:53:dc:41:ef:74:fb:f8:3e:0c:a4:
59:42:41:8c:fa:24:ec:b0:0b:8a:4d:f8:c4:cd:8a:ab:3b:1e:
02:dc:f6:eb:00:70:d0:a4:e7:bc:7d:ef:4e:ee:eb:4b:e5:4f:
2d:20:62:b9:9d:84:6e:0f:7b:7a:80:cf:e0:ba:f7:39:33:f1:
f0:f9:93:28:af:81:54:f2:92:dd:4e:80:85:b4:25:3b:ac:b0:
4f:7d:c6:71:4b:60:a4:9e:24:ad:3e:80:07:3d:23:c5:c7:73:
56:8d:11:7f:0b:ee:96:a7:36:c4:36:86:03:b7:48:cc:71:bf:
49:f6:d2:80:32:16:26:c4:af:9f:90:cb:30:57:4e:1c:27:92:
f8:e9:f3:de:6b:46:ec:16:d1:4e:a0:48:68:44:1c:34:6c:a7:
70:82:4b:ea:46:b2:10:0e:23:76:15:d9:53:85:77:41:82:62:
83:22:e1:fe:bb:79:c8:6b:21:a6:20:c6:91:3c:9c:51:5a:f3:
5d:80:7b:05:80:55:55:99:6d:73:2a:c6:22:07:84:b4:bb:1e:
f5:c5:fe:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:03:11 2026 by rpki-client