Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/e74IqSFAgciyBO6YVDdrUZszytY.roa
File: e74IqSFAgciyBO6YVDdrUZszytY.roa (raw, json)
Hash identifier: 1qt6P08s1YPsoVOqNdl3tp1tBYjABQYbpZeKX1wJKNw=
Subject key identifier: 7B:BE:08:A9:21:40:81:C8:B2:04:EE:98:54:37:6B:51:9B:33:CA:D6
Certificate issuer: /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial: 019E262801C26396D9A0052A338C86AE7B27
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/e74IqSFAgciyBO6YVDdrUZszytY.roa
Signing time: Thu 14 May 2026 11:03:36 +0000
ROA not before: Thu 14 May 2026 11:03:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43399
IP address blocks: 91.194.226.0/23 maxlen: 24
91.194.226.0/24 maxlen: 24
91.194.227.0/24 maxlen: 24
91.218.132.0/22 maxlen: 24
91.218.132.0/23 maxlen: 23
91.218.132.0/24 maxlen: 24
91.218.133.0/24 maxlen: 24
91.218.134.0/23 maxlen: 23
91.218.134.0/24 maxlen: 24
91.218.135.0/24 maxlen: 24
212.233.80.0/22 maxlen: 24
212.233.80.0/24 maxlen: 24
212.233.81.0/24 maxlen: 24
212.233.82.0/23 maxlen: 23
212.233.82.0/24 maxlen: 24
212.233.83.0/24 maxlen: 24
217.14.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:26:28:01:c2:63:96:d9:a0:05:2a:33:8c:86:ae:7b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
Validity
Not Before: May 14 11:03:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bbe08a9214081c8b204ee9854376b519b33cad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:54:ea:91:91:f1:21:e5:f1:2d:6e:47:b3:
26:7b:c7:61:b0:31:c7:ab:d1:e9:48:15:7e:9d:a9:
50:32:bc:c9:a4:27:cc:2b:66:18:ca:bd:33:54:77:
4f:f7:9d:e1:bd:83:34:20:54:33:5d:bc:16:80:fb:
f4:7a:1e:2d:73:07:31:9f:64:90:22:6f:79:ce:21:
4a:70:c0:c6:95:87:49:64:ee:0e:4c:7c:de:d6:11:
38:af:e6:a0:d6:94:02:7b:63:dc:98:d3:27:28:06:
fa:e5:61:40:18:20:a2:5e:4d:8f:0b:16:24:35:8d:
54:52:d8:d8:19:b3:0c:ad:7c:e8:52:e6:fb:92:01:
4d:66:ce:da:8f:e2:f1:a4:70:ba:9e:ff:a4:6f:db:
de:e7:f6:f2:bb:61:2c:7b:68:9d:5d:83:43:ce:c5:
66:2c:9a:a9:cb:47:96:b3:66:37:6b:c9:ef:c5:a7:
7c:48:81:3b:e4:19:c6:e8:79:76:44:d3:01:f6:ae:
ec:f5:76:02:8d:35:49:9d:11:77:b8:38:e5:f6:4d:
3c:fa:70:c3:f3:18:f7:4b:60:ec:63:5f:bd:7b:a7:
86:7e:09:9c:72:fb:ee:91:60:e9:6c:bd:47:49:86:
58:3d:09:5b:18:a6:ef:a1:c7:8b:70:ad:8c:46:79:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BE:08:A9:21:40:81:C8:B2:04:EE:98:54:37:6B:51:9B:33:CA:D6
X509v3 Authority Key Identifier:
keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/e74IqSFAgciyBO6YVDdrUZszytY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.226.0/23
91.218.132.0/22
212.233.80.0/22
217.14.19.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:17:a3:ba:f6:60:ae:6f:3f:4e:c6:e5:e6:ed:ce:f1:4b:70:
3e:b1:ad:61:91:17:9d:79:82:87:f6:86:1b:97:ba:83:cf:af:
fc:e7:17:a4:d0:32:d4:bf:38:5e:12:38:c0:80:6e:fa:c8:43:
16:6f:13:7b:94:a7:1f:5c:f5:6d:19:ec:32:9d:86:88:02:24:
04:94:87:fd:a7:3b:9b:3b:2c:0c:de:41:9d:02:07:6d:2e:4f:
dc:59:a1:59:0e:86:16:d0:60:2c:48:18:0a:d0:c5:94:04:37:
f6:2c:ff:62:7b:3c:ce:db:8f:91:b5:83:2d:62:b6:f4:57:24:
c6:24:5b:2c:4f:18:dc:46:b1:46:4d:02:cc:19:9b:d2:39:87:
89:b1:b4:2b:ea:bd:c4:8d:9f:b4:f0:bc:df:b8:a5:3d:21:ca:
80:06:e4:43:f9:94:b9:87:05:e4:87:9d:c6:e9:c9:a9:c3:8f:
53:39:1e:8f:b8:8a:76:7e:90:16:a4:b2:f0:13:cf:42:6f:c2:
c3:70:44:90:62:df:84:72:4a:8b:95:c2:a0:b1:09:5e:57:ab:
51:6d:4e:69:cf:25:cc:dd:8c:ea:89:d9:e2:ce:3b:c2:9c:86:
30:4e:1c:93:99:86:1d:99:a8:ae:1f:15:b2:cc:5f:bd:fc:1a:
b9:bc:4f:c5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ4mKAHCY5bZoAUqM4yGrnsnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlODdkMzViZGNhYjEyM2FmZmMxYTkxZDE3MzY4Njc5Njk3
MDlhMjMwHhcNMjYwNTE0MTEwMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmJlMDhhOTIxNDA4MWM4YjIwNGVlOTg1NDM3NmI1MTliMzNjYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIVU6pGR8SHl8S1uR7Mme8dhsDHH
q9HpSBV+nalQMrzJpCfMK2YYyr0zVHdP953hvYM0IFQzXbwWgPv0eh4tcwcxn2SQ
Im95ziFKcMDGlYdJZO4OTHze1hE4r+ag1pQCe2PcmNMnKAb65WFAGCCiXk2PCxYk
NY1UUtjYGbMMrXzoUub7kgFNZs7aj+LxpHC6nv+kb9ve5/byu2Ese2idXYNDzsVm
LJqpy0eWs2Y3a8nvxad8SIE75BnG6Hl2RNMB9q7s9XYCjTVJnRF3uDjl9k08+nDD
8xj3S2DsY1+9e6eGfgmccvvukWDpbL1HSYZYPQlbGKbvoceLcK2MRnnQMwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHu+CKkhQIHIsgTumFQ3a1GbM8rWMB8GA1UdIwQY
MBaAFN6H01vcqxI6/8GpHRc2hnlpcJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM29mVFc5eXJFanJfd2FrZEZ6YUdlV2x3bWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MTA3MTYtZjI2Ni00N2YwLTliYWQt
YzIyMzkwZThkOWE2LzEvZTc0SXFTRkFnY2l5Qk82WVZEZHJVWnN6eXRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85MTA3MTYtZjI2Ni00N2YwLTliYWQtYzIyMzkwZThkOWE2
LzEvM29mVFc5eXJFanJfd2FrZEZ6YUdlV2x3bWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBW8LiAwQC
W9qEAwQC1OlQAwQA2Q4TMA0GCSqGSIb3DQEBCwUAA4IBAQAdF6O69mCubz9OxuXm
7c7xS3A+sa1hkRedeYKH9oYbl7qDz6/85xek0DLUvzheEjjAgG76yEMWbxN7lKcf
XPVtGewynYaIAiQElIf9pzubOywM3kGdAgdtLk/cWaFZDoYW0GAsSBgK0MWUBDf2
LP9iezzO24+RtYMtYrb0VyTGJFssTxjcRrFGTQLMGZvSOYeJsbQr6r3EjZ+08Lzf
uKU9IcqABuRD+ZS5hwXkh53G6cmpw49TOR6PuIp2fpAWpLLwE89Cb8LDcESQYt+E
ckqLlcKgsQleV6tRbU5pzyXM3YzqidnizjvCnIYwThyTmYYdmaiuHxWyzF+9/Bq5
vE/F
-----END CERTIFICATE-----
Generated at Sat May 16 18:45:34 2026 by rpki-client