Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa
File: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (raw, json)
Hash identifier: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=
Subject key identifier: 7A:23:6D:9A:5B:26:50:C6:BA:CD:16:0A:E6:A3:E2:25:E2:CA:83:AA
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019D058D3DADC69DA33A0CE266ADCB2CB9EA
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa
Signing time: Thu 19 Mar 2026 10:03:55 +0000
ROA not before: Thu 19 Mar 2026 10:03:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209697
IP address blocks: 45.147.156.0/24 maxlen: 24
45.147.157.0/24 maxlen: 24
45.147.158.0/24 maxlen: 24
77.111.116.0/24 maxlen: 24
77.111.121.0/24 maxlen: 24
92.61.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 07:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:8d:3d:ad:c6:9d:a3:3a:0c:e2:66:ad:cb:2c:b9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Mar 19 10:03:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a236d9a5b2650c6bacd160ae6a3e225e2ca83aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:8a:b4:ef:63:7e:e5:70:b5:4a:61:2d:9b:
ca:8e:0a:4a:b7:12:77:dd:69:93:33:56:d4:7c:de:
ec:59:80:bc:81:42:65:fd:da:9a:9b:17:ae:47:51:
4e:8b:f0:5c:fc:28:8d:8a:41:15:74:3f:82:68:62:
59:62:f9:79:3e:e3:ae:56:19:17:26:bd:41:26:bc:
53:12:09:ee:bc:8b:e6:b7:e1:fb:29:ba:b4:7d:52:
e8:a3:2f:27:a3:01:43:e8:95:aa:37:f8:49:b5:74:
c4:74:f3:89:73:2b:98:83:81:be:27:bc:6e:6b:58:
32:18:c1:f8:9a:eb:91:ee:b0:87:ce:28:d9:77:f2:
27:e9:d8:8d:33:07:0a:b1:fd:98:33:e6:bf:21:2b:
e9:05:2d:6b:b9:e5:14:11:c3:1c:55:22:b1:80:2d:
4e:ff:4a:65:ee:09:ff:b1:84:8e:0d:bb:f8:26:3a:
77:e3:3c:11:f3:af:42:b6:40:d6:06:43:ed:4c:8a:
67:8f:f2:8a:6f:a5:b4:9c:dd:47:ba:f1:21:1b:3c:
d0:75:3e:5b:b8:31:81:1d:49:88:ef:a6:8a:b3:08:
54:67:da:03:aa:9c:49:97:7e:98:d2:d1:d8:47:81:
54:ca:48:11:18:57:a7:ce:a4:50:38:ae:5e:ef:d6:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:23:6D:9A:5B:26:50:C6:BA:CD:16:0A:E6:A3:E2:25:E2:CA:83:AA
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.156.0-45.147.158.255
77.111.116.0/24
77.111.121.0/24
92.61.102.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b7:cf:9d:01:e7:e1:06:80:78:17:04:7f:66:09:2e:d4:54:
e4:51:29:30:d6:74:62:8a:2c:cc:21:cc:24:ff:17:9f:db:23:
42:63:e3:59:ba:d3:2e:a5:f9:b2:3e:79:6f:66:33:2d:2e:e1:
4c:49:a3:07:9f:8a:95:df:d6:b9:83:da:90:7f:7a:7a:73:58:
7a:be:28:6d:bb:66:0c:a0:cd:61:d8:86:c1:8d:1f:a8:20:67:
3d:b5:b6:72:c9:21:48:a5:1c:f0:91:67:86:7b:d6:c8:51:8c:
86:a7:2b:a3:5a:f0:fb:6a:f9:9d:a0:85:53:a2:fc:dc:d1:34:
f4:14:f5:5e:fa:c7:1d:f6:ff:4d:b0:93:87:40:0a:96:07:a4:
8f:e0:b7:03:0b:3b:a7:ea:f2:da:08:10:9e:03:54:f5:af:fd:
5e:43:32:8e:b8:52:76:1d:b7:a0:f0:f4:1a:bb:9f:0f:87:fe:
e8:50:de:30:2f:96:a6:42:3c:59:ef:a8:0c:8e:9b:af:0d:89:
e8:9e:4d:c4:55:3f:cc:27:57:81:27:ed:34:cb:a0:63:ea:d9:
37:9d:2a:ba:eb:f4:1c:bd:32:32:07:f8:5f:a6:cb:be:39:cf:
d9:bc:eb:f1:11:57:23:d6:2f:d4:77:cd:ed:4e:f5:b7:13:55:
12:0b:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 16:02:15 2026 by rpki-client