Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/EHmp8YWn5b4C5G1N_s2zk1cc3l0.roa
File: EHmp8YWn5b4C5G1N_s2zk1cc3l0.roa (raw, json)
Hash identifier: ul4b6wLaNPWJeAyFB6U7Wdeyk4BkeYgosOjXakLCpHw=
Subject key identifier: 10:79:A9:F1:85:A7:E5:BE:02:E4:6D:4D:FE:CD:B3:93:57:1C:DE:5D
Certificate issuer: /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial: 019EF395B7B925ED3FD638879E9A3ADF1918
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/EHmp8YWn5b4C5G1N_s2zk1cc3l0.roa
Signing time: Tue 23 Jun 2026 08:25:35 +0000
ROA not before: Tue 23 Jun 2026 08:25:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61438
IP address blocks: 45.84.144.0/22 maxlen: 22
146.19.235.0/24 maxlen: 24
194.93.76.0/23 maxlen: 24
194.93.76.0/24 maxlen: 24
194.93.77.0/24 maxlen: 24
2a04:d200::/29 maxlen: 40
2a04:d200::/32 maxlen: 32
2a04:d201::/32 maxlen: 32
2a04:d207:a00::/40 maxlen: 40
2a04:d207:b00::/40 maxlen: 40
2a04:d207:c00::/40 maxlen: 40
2a04:d207:f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:95:b7:b9:25:ed:3f:d6:38:87:9e:9a:3a:df:19:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Validity
Not Before: Jun 23 08:25:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1079a9f185a7e5be02e46d4dfecdb393571cde5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:70:a1:48:00:98:f0:ed:0a:24:16:80:e1:
b8:32:34:d4:bb:c6:82:93:dd:82:40:b1:fe:4d:91:
e3:8e:9d:3b:52:40:86:e6:38:78:c8:db:83:f5:ea:
45:ad:76:ca:16:a8:ae:f1:2a:b6:08:19:37:11:60:
36:91:c8:c4:86:d2:8d:b2:c3:c7:6d:3c:82:29:08:
e4:76:83:9c:b9:a1:d1:27:3c:b5:92:1d:20:3b:34:
fd:80:51:12:4e:74:ad:d0:c1:d4:fd:fb:f4:38:4b:
18:12:ff:1b:bf:f1:3d:65:87:33:4d:da:b1:e6:40:
a1:91:c1:86:2a:41:de:ca:81:8d:eb:07:fb:61:db:
c4:bd:cc:35:23:c2:26:df:bf:09:da:71:23:ab:b6:
28:ef:7a:54:c1:65:eb:5c:f8:d8:86:2d:44:5c:8d:
90:01:76:03:99:a0:3f:f2:ef:8d:ae:18:70:72:2b:
4b:1d:ea:a8:5f:8f:80:16:45:2f:c6:90:85:eb:43:
72:bc:11:51:f8:bf:a4:35:dc:13:7b:e1:1f:f1:22:
48:de:e6:9a:68:c2:56:c8:e2:22:81:36:82:1d:31:
4d:e1:b7:15:82:14:6e:7f:c2:d6:42:00:46:31:cf:
e8:db:61:9c:f1:8d:66:d9:3c:33:68:73:19:19:c5:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:79:A9:F1:85:A7:E5:BE:02:E4:6D:4D:FE:CD:B3:93:57:1C:DE:5D
X509v3 Authority Key Identifier:
keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/EHmp8YWn5b4C5G1N_s2zk1cc3l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.144.0/22
146.19.235.0/24
194.93.76.0/23
IPv6:
2a04:d200::/29
Signature Algorithm: sha256WithRSAEncryption
98:91:89:3b:b4:88:7b:10:c9:f5:d4:a5:42:e7:4d:14:86:b5:
0d:c5:bb:1c:b1:22:dd:b6:bc:f4:14:3a:5f:87:2a:53:34:ac:
70:63:a6:5d:b4:2a:d7:80:22:0f:5f:25:cd:3d:7c:ca:3b:10:
93:64:f0:fb:38:b4:72:45:df:d4:b8:1f:0d:1e:43:6e:1c:59:
65:fc:c4:4a:4b:e7:63:77:78:a8:59:15:cf:d2:9c:fa:6a:f4:
55:05:ed:a4:64:e9:a6:85:1e:0b:68:4b:d9:fb:0f:1e:bb:02:
99:cb:68:66:af:12:4b:61:e7:63:4f:11:ec:ee:01:24:7a:db:
5f:a7:b5:de:c9:f6:19:54:71:fa:73:d0:90:54:b7:5a:7d:9c:
14:97:49:76:a2:4d:14:fe:6d:07:e3:a1:7b:90:2f:f4:0d:81:
2c:3b:c8:08:0f:1a:ff:d1:2c:c7:1b:f7:23:7a:aa:a2:28:ba:
9b:77:38:7b:4c:1c:ef:57:f7:5f:6c:2d:d3:14:29:6b:d6:5f:
db:96:a9:ed:8e:07:be:4b:c6:c6:96:c5:56:d4:f4:c5:c5:c8:
23:68:e3:4f:ec:5c:a0:92:2c:9e:41:7c:cc:2a:13:e0:27:c8:
cd:06:09:15:90:5c:b4:9f:ff:1b:4f:f4:c2:ff:63:14:7b:4b:
c8:04:0d:e3
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ7zlbe5Je0/1jiHnpo63xkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDgyY2NmMGM4ZGVhN2Q3ZjZhZDcyZThlNjI0NjJkN2Jl
MjBkNTYwHhcNMjYwNjIzMDgyNTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDc5YTlmMTg1YTdlNWJlMDJlNDZkNGRmZWNkYjM5MzU3MWNkZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIVwoUgAmPDtCiQWgOG4MjTUu8aC
k92CQLH+TZHjjp07UkCG5jh4yNuD9epFrXbKFqiu8Sq2CBk3EWA2kcjEhtKNssPH
bTyCKQjkdoOcuaHRJzy1kh0gOzT9gFESTnSt0MHU/fv0OEsYEv8bv/E9ZYczTdqx
5kChkcGGKkHeyoGN6wf7YdvEvcw1I8Im378J2nEjq7Yo73pUwWXrXPjYhi1EXI2Q
AXYDmaA/8u+NrhhwcitLHeqoX4+AFkUvxpCF60NyvBFR+L+kNdwTe+Ef8SJI3uaa
aMJWyOIigTaCHTFN4bcVghRuf8LWQgBGMc/o22Gc8Y1m2TwzaHMZGcWCbQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFBB5qfGFp+W+AuRtTf7Ns5NXHN5dMB8GA1UdIwQY
MBaAFMLYLM8Mjep9f2rXLo5iRi174g1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3Rnc3p3eU42bjFfYXRjdWptSkdMWHZpRFZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMjc5NTItNGM2Ni00Yjk1LWI2ZGUt
NDMxMThlNDk2ZDQwLzEvRUhtcDhZV241YjRDNUcxTl9zMnprMWNjM2wwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zMjc5NTItNGM2Ni00Yjk1LWI2ZGUtNDMxMThlNDk2ZDQw
LzEvd3Rnc3p3eU42bjFfYXRjdWptSkdMWHZpRFZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLVSQAwQA
khPrAwQBwl1MMA0EAgACMAcDBQMqBNIAMA0GCSqGSIb3DQEBCwUAA4IBAQCYkYk7
tIh7EMn11KVC500UhrUNxbscsSLdtrz0FDpfhypTNKxwY6ZdtCrXgCIPXyXNPXzK
OxCTZPD7OLRyRd/UuB8NHkNuHFll/MRKS+djd3ioWRXP0pz6avRVBe2kZOmmhR4L
aEvZ+w8euwKZy2hmrxJLYedjTxHs7gEkettfp7XeyfYZVHH6c9CQVLdafZwUl0l2
ok0U/m0H46F7kC/0DYEsO8gIDxr/0SzHG/cjeqqiKLqbdzh7TBzvV/dfbC3TFClr
1l/blqntjge+S8bGlsVW1PTFxcgjaONP7FygkiyeQXzMKhPgJ8jNBgkVkFy0n/8b
T/TC/2MUe0vIBA3j
-----END CERTIFICATE-----
Generated at Wed Jul 1 01:34:39 2026 by rpki-client