Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/EHzjD2BaSdt6dlWwGmMzrIvaNCg.roa
File: EHzjD2BaSdt6dlWwGmMzrIvaNCg.roa (raw, json)
Hash identifier: S94ye2gvt+ykcb3AuWBczPrNA3UQ52LMfEF8Lq+CnR4=
Subject key identifier: 10:7C:E3:0F:60:5A:49:DB:7A:76:55:B0:1A:63:33:AC:8B:DA:34:28
Certificate issuer: /CN=d1dda832769c31681f825685147368af3a11f6f8
Certificate serial: 019EF551BD658C9FC15C3444D4FD9905F341
Authority key identifier: D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/EHzjD2BaSdt6dlWwGmMzrIvaNCg.roa
Signing time: Tue 23 Jun 2026 16:30:35 +0000
ROA not before: Tue 23 Jun 2026 16:30:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57300
IP address blocks: 91.109.168.0/24 maxlen: 24
91.109.169.0/24 maxlen: 24
91.109.170.0/24 maxlen: 24
91.109.171.0/24 maxlen: 24
91.109.172.0/24 maxlen: 24
91.109.173.0/24 maxlen: 24
91.109.174.0/24 maxlen: 24
91.109.175.0/24 maxlen: 24
95.87.120.0/24 maxlen: 24
95.87.121.0/24 maxlen: 24
95.87.122.0/24 maxlen: 24
95.87.123.0/24 maxlen: 24
95.87.124.0/24 maxlen: 24
95.87.125.0/24 maxlen: 24
95.87.126.0/24 maxlen: 24
95.87.127.0/24 maxlen: 24
185.73.164.0/24 maxlen: 24
185.73.165.0/24 maxlen: 24
185.73.166.0/24 maxlen: 24
185.73.167.0/24 maxlen: 24
2a05:3ec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:51:bd:65:8c:9f:c1:5c:34:44:d4:fd:99:05:f3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dda832769c31681f825685147368af3a11f6f8
Validity
Not Before: Jun 23 16:30:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=107ce30f605a49db7a7655b01a6333ac8bda3428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:88:b7:0d:df:b6:c5:66:53:d2:6b:8f:05:
d6:57:d6:07:21:f8:cb:90:1f:99:1b:6d:38:d6:bb:
d7:b8:54:e6:ce:cf:0a:f8:9b:ad:aa:e4:2d:cc:2c:
94:0a:77:8a:dc:d2:04:1e:f1:be:cd:18:f2:93:16:
83:35:34:90:ea:fd:4c:dd:79:02:46:7f:12:2c:1c:
0a:db:23:3f:90:f4:0b:af:3c:84:5f:77:04:07:57:
13:79:f2:34:7c:32:33:f0:15:3a:dc:52:cc:36:af:
c0:f4:39:17:da:61:14:d4:0c:4b:ff:54:cb:54:99:
0a:39:74:ef:1a:04:9a:2b:52:08:09:97:aa:70:0f:
9b:43:b3:24:05:f2:a8:2b:a7:bc:a8:d0:bd:74:91:
a0:66:bb:4a:97:62:56:dc:42:e8:ed:2f:9f:44:bb:
18:5a:6b:35:94:d6:f7:a2:2f:0f:2f:c4:bc:dd:70:
59:eb:11:b3:a4:47:3c:74:9c:6a:bc:d0:a5:c4:e3:
c0:e3:65:9a:5b:06:d5:04:ec:ca:a5:aa:fc:d1:31:
2f:48:5c:d2:4d:5b:2b:1a:ab:20:84:49:9e:c7:32:
dc:ea:65:c6:5d:ed:e5:81:04:a1:ce:a5:3c:33:57:
c6:9b:7b:8a:60:f7:be:a5:f1:92:90:b6:fe:d2:0c:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7C:E3:0F:60:5A:49:DB:7A:76:55:B0:1A:63:33:AC:8B:DA:34:28
X509v3 Authority Key Identifier:
keyid:D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/EHzjD2BaSdt6dlWwGmMzrIvaNCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.168.0/21
95.87.120.0/21
185.73.164.0/22
IPv6:
2a05:3ec0::/29
Signature Algorithm: sha256WithRSAEncryption
66:bd:eb:e2:81:be:c9:d6:6c:1c:2d:57:63:26:fb:fe:41:1e:
f3:c4:69:70:04:a1:96:63:2f:d6:4f:08:59:a1:a1:a7:2e:2e:
ec:a9:74:58:66:c0:68:1e:a7:1b:ae:5d:c4:15:27:46:e5:c2:
25:7a:a3:93:fe:41:95:dd:32:69:e5:a1:6c:7a:dd:dc:bf:a1:
bc:9b:77:d0:9b:a8:6d:1a:5d:a9:9e:63:15:73:ac:06:59:ea:
3b:c2:1b:73:13:c8:ca:c5:77:5f:89:06:dd:c5:ae:96:5f:58:
2c:62:74:a7:0a:5e:cb:bf:b2:6c:4b:94:cd:4d:64:48:22:c6:
78:fa:2b:ae:e0:94:2e:34:f4:c9:76:59:a8:9a:20:4f:f3:9a:
79:fb:fd:23:3c:80:2b:69:84:9b:8b:de:88:23:00:d2:1b:17:
4e:f0:9f:1c:6c:8b:af:13:fd:25:11:68:aa:9c:57:c6:d7:33:
51:fa:25:f1:83:05:31:02:a2:2e:84:54:9a:90:42:c9:9d:69:
81:ca:dc:33:89:a3:79:8c:45:05:d4:3d:1a:58:e9:42:e7:20:
3f:4d:c3:06:a6:49:5c:c3:9f:76:b9:94:8f:18:a7:35:e5:3b:
b6:6e:6f:c1:1b:a6:df:cb:d3:1e:99:08:f2:e9:19:24:cf:4e:
78:09:c4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:55:30 2026 by rpki-client