Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/wMyrRmK20Ea6CFfSsrLvFdwBCRU.roa
File: wMyrRmK20Ea6CFfSsrLvFdwBCRU.roa (raw, json)
Hash identifier: H0AzC28B239d/SFzRPrzCJV0CBrxOQWl+hBf5HLG69s=
Subject key identifier: C0:CC:AB:46:62:B6:D0:46:BA:08:57:D2:B2:B2:EF:15:DC:01:09:15
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 01A1306AF0658DE90708C01BB643C9DD2E2D
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/wMyrRmK20Ea6CFfSsrLvFdwBCRU.roa
Signing time: Mon 12 Oct 2026 14:01:17 +0000
ROA not before: Mon 12 Oct 2026 14:01:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8069
IP address blocks: 145.190.0.0/23 maxlen: 23
145.190.2.0/24 maxlen: 24
145.190.3.0/24 maxlen: 24
145.190.4.0/23 maxlen: 23
145.190.6.0/24 maxlen: 24
145.190.7.0/24 maxlen: 24
145.190.8.0/21 maxlen: 21
145.190.16.0/21 maxlen: 21
145.190.24.0/21 maxlen: 21
145.190.32.0/22 maxlen: 22
145.190.36.0/24 maxlen: 24
145.190.37.0/24 maxlen: 24
145.190.38.0/23 maxlen: 23
145.190.40.0/23 maxlen: 23
145.190.42.0/24 maxlen: 24
145.190.43.0/24 maxlen: 24
145.190.44.0/22 maxlen: 22
145.190.48.0/22 maxlen: 22
145.190.52.0/23 maxlen: 23
145.190.54.0/24 maxlen: 24
145.190.55.0/24 maxlen: 24
145.190.56.0/23 maxlen: 23
145.190.58.0/24 maxlen: 24
145.190.59.0/24 maxlen: 24
145.190.60.0/24 maxlen: 24
145.190.61.0/24 maxlen: 24
145.190.62.0/24 maxlen: 24
145.190.63.0/24 maxlen: 24
145.190.64.0/24 maxlen: 24
145.190.65.0/24 maxlen: 24
145.190.66.0/24 maxlen: 24
145.190.67.0/24 maxlen: 24
145.190.68.0/24 maxlen: 24
145.190.69.0/24 maxlen: 24
145.190.76.0/24 maxlen: 24
145.190.77.0/24 maxlen: 24
145.190.78.0/24 maxlen: 24
145.190.81.0/24 maxlen: 24
145.190.86.0/24 maxlen: 24
145.190.89.0/24 maxlen: 24
145.190.128.0/24 maxlen: 24
145.190.129.0/24 maxlen: 24
145.190.130.0/24 maxlen: 24
145.190.131.0/24 maxlen: 24
145.190.132.0/24 maxlen: 24
145.190.133.0/24 maxlen: 24
145.190.134.0/24 maxlen: 24
145.190.150.0/24 maxlen: 24
145.190.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:6a:f0:65:8d:e9:07:08:c0:1b:b6:43:c9:dd:2e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Oct 12 14:01:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0ccab4662b6d046ba0857d2b2b2ef15dc010915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:62:0e:8b:42:4a:8d:8e:7d:9d:3d:0c:57:
86:19:55:8f:a8:6a:99:c2:37:01:2a:5f:4b:bc:14:
1c:ae:a3:5f:d1:f5:e7:89:e8:69:6f:fc:0f:a9:61:
01:9e:56:9a:cd:91:89:e1:24:43:65:96:e6:d5:bb:
0d:76:6b:3c:0d:ee:d8:23:4b:85:a8:21:bb:cb:66:
4e:94:2a:25:47:5d:80:94:13:4c:b7:97:36:09:04:
00:dd:81:b7:1d:3f:4e:ac:db:9b:7b:0e:8b:3b:cc:
0d:94:43:5e:70:84:36:a5:a7:8f:32:3d:96:8b:66:
11:f1:25:90:40:f7:7d:18:d3:9b:e1:30:03:6d:90:
a3:01:49:cb:de:7f:9c:82:78:32:bd:aa:1a:68:3c:
80:4b:13:54:c4:4f:98:d7:8b:91:2b:93:a5:ef:6c:
a0:6a:47:f9:85:33:0c:a0:1d:6c:49:d4:a8:ab:9b:
c9:4d:ab:c0:98:ff:ae:f6:09:08:c9:f7:08:ce:fe:
f3:67:b6:68:29:63:d6:fa:be:55:78:9c:ff:51:54:
00:ce:9f:e7:23:c7:4f:20:13:3c:33:66:4f:78:8a:
bb:d5:15:28:49:b6:a3:b1:43:74:dd:3c:0a:d2:5a:
75:2a:b8:d1:7e:b1:b8:64:35:aa:48:97:69:1c:af:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CC:AB:46:62:B6:D0:46:BA:08:57:D2:B2:B2:EF:15:DC:01:09:15
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/wMyrRmK20Ea6CFfSsrLvFdwBCRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.190.0.0-145.190.69.255
145.190.76.0-145.190.78.255
145.190.81.0/24
145.190.86.0/24
145.190.89.0/24
145.190.128.0-145.190.134.255
145.190.150.0/24
145.190.162.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:a6:46:44:f7:78:0a:a3:a0:52:80:eb:3b:b8:67:f5:22:40:
cf:06:31:75:70:79:b3:a0:dd:b3:d1:1c:a4:d2:62:8d:8f:85:
1a:42:8f:6c:e0:79:20:ff:47:96:41:5a:f9:40:7e:b5:c4:21:
c5:c2:b2:1d:0f:b8:c2:bf:92:f7:25:eb:8e:09:f0:28:e3:02:
be:e6:56:09:b9:73:3e:07:28:42:ae:7e:06:3b:07:93:36:1e:
a6:72:82:5d:ec:4a:03:50:92:77:72:b8:3d:f1:f7:7e:0a:29:
bf:49:a8:6c:9b:54:f5:24:95:1c:67:9e:c6:f8:33:db:d5:38:
c0:cb:9b:6f:f5:8f:e2:b0:77:a1:2f:ff:b9:d9:09:6c:de:f1:
3e:99:20:60:e0:95:3d:01:d1:18:7d:2a:fd:9b:18:63:b6:b4:
a9:c0:a5:0d:a6:4f:e6:ca:72:5d:4b:3a:67:fc:cf:4e:fc:37:
c7:df:0f:88:9f:ad:ac:e3:e7:34:d2:e7:30:79:13:fd:be:69:
cd:fd:d3:c6:09:bf:44:bc:59:2a:1d:32:aa:24:6d:3e:a6:ca:
64:00:9c:8e:9b:b3:32:d8:b0:25:b0:2c:6d:5e:76:4c:a5:e7:
10:6f:28:ed:9d:20:38:61:c9:20:50:8a:4b:c5:32:85:da:3b:
b0:6f:01:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:35:12 2026 by rpki-client