Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jgVsQMHKCKL93w67oeQyj1sGHZk.roa
File: jgVsQMHKCKL93w67oeQyj1sGHZk.roa (raw, json)
Hash identifier: IroMU51YrHXgSpUB8b/4s2fFLlrQgdyGc1QGKEwScuM=
Subject key identifier: 8E:05:6C:40:C1:CA:08:A2:FD:DF:0E:BB:A1:E4:32:8F:5B:06:1D:99
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019DE4C01FBB5A6D74DE65037A5CEADEF168
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jgVsQMHKCKL93w67oeQyj1sGHZk.roa
Signing time: Fri 01 May 2026 18:14:49 +0000
ROA not before: Fri 01 May 2026 18:14:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.151.140.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
94.229.209.0/24 maxlen: 24
103.41.44.0/23 maxlen: 24
103.41.46.0/23 maxlen: 24
103.102.132.0/24 maxlen: 24
103.102.133.0/24 maxlen: 24
124.158.112.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e4:c0:1f:bb:5a:6d:74:de:65:03:7a:5c:ea:de:f1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 1 18:14:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e056c40c1ca08a2fddf0ebba1e4328f5b061d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:25:dc:20:20:cc:4f:9c:63:22:c4:a3:b3:
74:e4:91:3d:2d:ef:43:eb:54:8e:5b:03:d4:9f:d9:
a3:2c:69:ad:be:7c:15:f1:e6:10:40:82:27:05:16:
cd:3c:7f:d3:ed:49:00:5e:0a:a1:e2:aa:a4:d9:58:
de:40:59:a8:65:bb:c4:0f:b8:19:64:94:45:ee:ea:
81:cd:e4:6e:ac:6e:98:e1:01:8e:93:b8:c9:03:53:
f3:df:7f:5d:7a:f3:02:d9:31:64:62:99:7f:fe:11:
e8:fd:1a:15:51:c0:b0:53:9b:37:ab:ff:ea:22:fc:
a8:f0:dd:5c:ba:f0:cc:6f:af:af:6d:81:4a:3b:93:
1e:1b:4a:3a:70:c7:6b:21:cc:6d:02:25:dd:7e:44:
89:5e:31:5a:11:66:a2:b2:af:1a:a2:95:bf:4c:bc:
32:c0:df:85:c4:68:44:fd:bb:96:eb:9c:be:d2:98:
62:ce:cb:16:ef:a9:91:33:c3:0d:9f:4c:1e:ec:0b:
9f:f2:fd:28:f9:03:cc:c6:7a:52:14:35:69:de:2f:
9d:67:95:8c:56:a7:19:cd:bf:24:96:aa:58:aa:08:
68:e6:87:3f:25:b7:3d:68:99:c5:ba:3a:46:d8:8e:
d4:fe:f4:b6:7a:6c:49:47:f6:7f:8c:f0:13:8f:09:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:05:6C:40:C1:CA:08:A2:FD:DF:0E:BB:A1:E4:32:8F:5B:06:1D:99
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jgVsQMHKCKL93w67oeQyj1sGHZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/24
77.111.96.0/22
77.111.102.0/23
77.111.105.0/24
94.229.209.0/24
103.41.44.0/22
103.102.132.0/23
124.158.112.0/24
194.36.33.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:94:7c:3c:ae:4f:bb:cb:b1:0a:93:8b:6b:cc:d5:d1:1e:43:
ac:d4:a0:df:0f:84:2d:ad:18:f9:b1:30:e6:85:b3:fa:b7:59:
45:75:0c:44:68:e5:bc:37:c6:ea:5a:21:67:00:a9:b5:81:1f:
da:01:aa:9d:f6:2c:12:3b:fb:a1:f8:82:b8:7a:ce:18:a4:e2:
41:68:67:a4:af:cb:c1:10:87:ae:07:7a:28:fe:3b:9a:20:45:
d6:13:6f:7e:e0:73:a4:ac:d8:1e:d7:f2:94:b0:c9:36:21:20:
61:f0:4a:43:7a:4d:84:d2:d3:9d:19:ac:60:26:de:7c:79:db:
03:42:f8:85:fa:69:e9:ba:b8:8c:24:e9:58:bb:0e:c2:0a:93:
59:15:09:e2:50:5f:7a:99:5f:d8:06:46:11:e0:a1:7a:40:22:
82:3e:d6:1b:67:80:28:2a:ee:e1:a4:eb:07:cc:47:ab:5b:0e:
81:c7:fe:7b:1e:5b:e7:8a:d0:10:d3:93:e7:15:43:7a:b4:9e:
d1:77:a0:76:a3:e7:75:cb:e3:5e:fa:ab:5d:ee:ae:68:0c:55:
69:2f:40:ed:cd:06:ef:a7:b5:0a:8a:51:43:30:16:a7:7c:ec:
a1:0b:af:dd:ec:b0:73:62:27:99:02:55:ed:ae:55:ee:9a:d7:
29:e2:b7:80
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZ3kwB+7Wm103mUDelzq3vFoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNTAxMTgxNDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTA1NmM0MGMxY2EwOGEyZmRkZjBlYmJhMWU0MzI4ZjViMDYxZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKkl3CAgzE+cYyLEo7N05JE9Le9D
61SOWwPUn9mjLGmtvnwV8eYQQIInBRbNPH/T7UkAXgqh4qqk2VjeQFmoZbvED7gZ
ZJRF7uqBzeRurG6Y4QGOk7jJA1Pz339devMC2TFkYpl//hHo/RoVUcCwU5s3q//q
Ivyo8N1cuvDMb6+vbYFKO5MeG0o6cMdrIcxtAiXdfkSJXjFaEWaisq8aopW/TLwy
wN+FxGhE/buW65y+0phizssW76mRM8MNn0we7Auf8v0o+QPMxnpSFDVp3i+dZ5WM
VqcZzb8klqpYqgho5oc/Jbc9aJnFujpG2I7U/vS2emxJR/Z/jPATjwlDzwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFI4FbEDBygii/d8Ou6HkMo9bBh2ZMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvamdWc1FNSEtDS0w5M3c2N29lUXlqMXNHSFprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALZeMAwQC
TW9gAwQBTW9mAwQATW9pAwQAXuXRAwQCZyksAwQBZ2aEAwQAfJ5wAwQAwiQhMA0G
CSqGSIb3DQEBCwUAA4IBAQDhlHw8rk+7y7EKk4trzNXRHkOs1KDfD4QtrRj5sTDm
hbP6t1lFdQxEaOW8N8bqWiFnAKm1gR/aAaqd9iwSO/uh+IK4es4YpOJBaGekr8vB
EIeuB3oo/juaIEXWE29+4HOkrNge1/KUsMk2ISBh8EpDek2E0tOdGaxgJt58edsD
QviF+mnpuriMJOlYuw7CCpNZFQniUF96mV/YBkYR4KF6QCKCPtYbZ4AoKu7hpOsH
zEerWw6Bx/57HlvnitAQ05PnFUN6tJ7Rd6B2o+d1y+Ne+qtd7q5oDFVpL0DtzQbv
p7UKilFDMBanfOyhC6/d7LBzYieZAlXtrlXumtcp4reA
-----END CERTIFICATE-----
Generated at Sat May 2 07:36:58 2026 by rpki-client