Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/eGha0qVj3gFz3bAjzxKGw82oVgw.roa
File: eGha0qVj3gFz3bAjzxKGw82oVgw.roa (raw, json)
Hash identifier: KI8tWuRdgljkfi5kboQSER8ErDfnx66Z08txRSRqRGU=
Subject key identifier: 78:68:5A:D2:A5:63:DE:01:73:DD:B0:23:CF:12:86:C3:CD:A8:56:0C
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019F944B5B5D0EBE5F77EA284361207C9C1B
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/eGha0qVj3gFz3bAjzxKGw82oVgw.roa
Signing time: Fri 24 Jul 2026 13:23:14 +0000
ROA not before: Fri 24 Jul 2026 13:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 46.243.7.0/24 maxlen: 24
91.200.14.0/24 maxlen: 24
91.200.15.0/24 maxlen: 24
92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
95.81.76.0/24 maxlen: 24
95.81.114.0/24 maxlen: 24
95.81.115.0/24 maxlen: 24
95.81.123.0/24 maxlen: 24
95.81.124.0/24 maxlen: 24
95.81.125.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
104.128.128.0/24 maxlen: 24
104.128.129.0/24 maxlen: 24
109.69.60.0/24 maxlen: 24
132.243.26.0/24 maxlen: 24
157.228.140.0/24 maxlen: 24
157.228.141.0/24 maxlen: 24
157.228.142.0/24 maxlen: 24
185.37.195.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
2a06:ddc0::/29 maxlen: 29
2a0b:8040::/29 maxlen: 29
2a0b:d900::/29 maxlen: 29
2a0c:5d00:2001::/48 maxlen: 48
2a0c:6980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:4b:5b:5d:0e:be:5f:77:ea:28:43:61:20:7c:9c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 24 13:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78685ad2a563de0173ddb023cf1286c3cda8560c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:18:aa:79:14:f6:41:d9:b0:12:cc:41:f3:
ee:f3:a5:69:69:ec:60:19:5d:a3:4c:b3:ba:18:ee:
15:53:73:84:4e:60:3f:9a:a8:83:92:a9:71:11:c9:
c8:b7:36:ae:c7:3b:25:fd:ce:63:35:80:03:ed:8d:
72:67:11:8f:2b:47:ee:88:2c:c7:16:96:a6:e7:42:
a5:c4:a0:f1:cf:a0:b3:21:2b:ee:b1:b9:ba:55:86:
e0:75:c2:99:88:99:95:d9:65:84:c1:36:48:2e:42:
78:25:3f:0a:ad:68:57:df:f7:cc:29:ce:19:e6:09:
94:43:75:e2:17:4b:b4:79:91:f3:ae:36:21:82:e9:
f4:b6:34:86:3d:59:64:06:ad:a5:a1:44:fb:92:55:
70:84:ae:c7:b3:e5:80:ba:f8:24:27:c1:7c:d2:f8:
9f:74:02:d3:19:1f:1a:60:69:b4:f4:0a:1f:11:f5:
60:d0:47:11:2d:20:fe:f6:4e:54:99:dc:11:d8:47:
8f:67:11:32:6e:6c:c6:54:4a:27:51:08:b2:a8:b1:
63:bf:a3:03:50:fb:be:51:13:ef:c7:82:35:a3:cf:
83:4e:3c:a4:de:64:5c:ea:e9:62:22:f9:d0:b0:b8:
15:d7:50:69:5a:0b:7a:a5:4e:59:92:a8:88:55:36:
c1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:68:5A:D2:A5:63:DE:01:73:DD:B0:23:CF:12:86:C3:CD:A8:56:0C
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/eGha0qVj3gFz3bAjzxKGw82oVgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.7.0/24
91.200.14.0/23
92.62.119.0/24
94.232.248.0/24
95.81.76.0/24
95.81.114.0/23
95.81.123.0-95.81.125.255
103.82.103.0/24
104.128.128.0/23
109.69.60.0/24
132.243.26.0/24
157.228.140.0-157.228.142.255
185.37.195.0/24
185.87.48.0/22
185.117.152.0/22
IPv6:
2a06:ddc0::/29
2a0b:8040::/29
2a0b:d900::/29
2a0c:5d00:2001::/48
2a0c:6980::/29
Signature Algorithm: sha256WithRSAEncryption
86:c4:50:a6:a7:69:f1:fd:12:8d:29:b2:04:7f:4f:93:51:69:
66:81:c2:3e:16:69:03:d6:19:cf:13:54:89:17:b5:1a:b1:c8:
ce:d8:88:12:bc:6b:a3:44:63:d4:96:4d:fb:83:e4:d1:2e:4a:
89:2b:b0:9e:b0:9f:6b:ea:df:84:be:3e:36:d1:0a:49:b5:ab:
d5:de:20:f2:a6:b8:43:cb:cf:58:ba:f2:11:1b:95:80:63:92:
56:0a:2b:59:ef:af:54:46:27:35:65:db:51:11:f0:14:55:64:
c4:89:9f:ae:af:06:3c:29:2a:38:c0:a8:0a:e8:45:ee:a8:07:
bc:78:fe:04:da:cf:5e:74:68:74:9f:be:e7:85:df:9f:be:da:
74:2e:f5:6e:a5:01:c2:54:79:cf:a7:19:58:f9:96:9f:fa:13:
7c:d8:57:46:2c:df:1b:60:5e:8a:3d:50:3b:33:c9:a2:ed:c0:
30:ad:9a:d0:e0:55:fc:d5:9a:82:9b:71:a7:93:50:6a:29:75:
07:0c:d8:5f:1e:cc:2b:7b:c5:4c:ca:9a:5a:0d:6b:de:bd:e1:
77:e1:c1:ee:c0:11:a9:1b:23:83:5a:2d:79:ca:bc:d4:45:86:
f1:d1:a4:14:49:bb:ed:39:a2:6b:8e:b3:3a:54:01:11:ba:11:
1b:15:1e:bb
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgISAZ+US1tdDr5fd+ooQ2EgfJwbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjYwNzI0MTMyMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODY4NWFkMmE1NjNkZTAxNzNkZGIwMjNjZjEyODZjM2NkYTg1NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeQYqnkU9kHZsBLMQfPu86Vpaexg
GV2jTLO6GO4VU3OETmA/mqiDkqlxEcnItzauxzsl/c5jNYAD7Y1yZxGPK0fuiCzH
Fpam50KlxKDxz6CzISvusbm6VYbgdcKZiJmV2WWEwTZILkJ4JT8KrWhX3/fMKc4Z
5gmUQ3XiF0u0eZHzrjYhgun0tjSGPVlkBq2loUT7klVwhK7Hs+WAuvgkJ8F80vif
dALTGR8aYGm09AofEfVg0EcRLSD+9k5UmdwR2EePZxEybmzGVEonUQiyqLFjv6MD
UPu+URPvx4I1o8+DTjyk3mRc6uliIvnQsLgV11BpWgt6pU5ZkqiIVTbBVQIDAQAB
o4ICnTCCApkwHQYDVR0OBBYEFHhoWtKlY94Bc92wI88ShsPNqFYMMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvZUdoYTBxVmozZ0Z6M2JBanp4S0d3ODJvVmd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGyBggrBgEFBQcBBwEB/wSBojCBnzBwBAIAATBqAwQALvMH
AwQBW8gOAwQAXD53AwQAXuj4AwQAX1FMAwQBX1FyMAwDBABfUXsDBAFfUXwDBABn
UmcDBAFogIADBABtRTwDBACE8xowDAMEAp3kjAMEAJ3kjgMEALklwwMEArlXMAME
Arl1mDArBAIAAjAlAwUDKgbdwAMFAyoLgEADBQMqC9kAAwcAKgxdACABAwUDKgxp
gDANBgkqhkiG9w0BAQsFAAOCAQEAhsRQpqdp8f0SjSmyBH9Pk1FpZoHCPhZpA9YZ
zxNUiRe1GrHIztiIErxro0Rj1JZN+4Pk0S5KiSuwnrCfa+rfhL4+NtEKSbWr1d4g
8qa4Q8vPWLryERuVgGOSVgorWe+vVEYnNWXbURHwFFVkxImfrq8GPCkqOMCoCuhF
7qgHvHj+BNrPXnRodJ++54Xfn77adC71bqUBwlR5z6cZWPmWn/oTfNhXRizfG2Be
ij1QOzPJou3AMK2a0OBV/NWagptxp5NQail1BwzYXx7MK3vFTMqaWg1r3r3hd+HB
7sARqRsjg1otecq81EWG8dGkFEm77Tmia46zOlQBEboRGxUeuw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:25:45 2026 by rpki-client