Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/eZmXsP_8WtuzPmHHINoHGtkInLQ.roa
File: eZmXsP_8WtuzPmHHINoHGtkInLQ.roa (raw, json)
Hash identifier: xAlYoOeA/RbIFUWmiaNoetBhfJGEtjYTAa3ebpYj1+g=
Subject key identifier: 79:99:97:B0:FF:FC:5A:DB:B3:3E:61:C7:20:DA:07:1A:D9:08:9C:B4
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019D2EEE3A8863641CE20B0CF0FA76CFB428
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/eZmXsP_8WtuzPmHHINoHGtkInLQ.roa
Signing time: Fri 27 Mar 2026 10:54:17 +0000
ROA not before: Fri 27 Mar 2026 10:54:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.109.40.0/24 maxlen: 24
91.109.41.0/24 maxlen: 24
91.109.44.0/24 maxlen: 24
91.109.45.0/24 maxlen: 24
147.185.196.0/24 maxlen: 24
193.168.200.0/24 maxlen: 24
193.168.203.0/24 maxlen: 24
207.244.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:ee:3a:88:63:64:1c:e2:0b:0c:f0:fa:76:cf:b4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Mar 27 10:54:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=799997b0fffc5adbb33e61c720da071ad9089cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:67:68:74:da:0d:2d:54:67:20:07:6a:79:
26:7c:94:10:79:70:f6:52:2e:18:1e:78:18:7b:e6:
d8:df:1e:50:b7:7d:c7:97:28:ce:39:ea:2e:5a:8a:
c6:72:08:64:39:2e:ad:6c:b0:e1:fd:de:5d:d7:f0:
b1:c1:24:46:49:e7:84:b1:ba:d9:dd:37:8b:66:c0:
f8:a5:75:e2:9d:28:e4:89:aa:cf:74:0a:3a:68:1f:
78:c4:dd:84:b1:37:64:c9:a7:fd:fb:8d:26:04:66:
53:bc:10:3c:1e:51:9c:2f:33:cd:49:96:55:ae:38:
98:76:ed:3b:47:2a:06:66:fe:2f:1a:7a:2f:fd:95:
5c:82:b1:59:1b:a2:f0:28:6f:82:b1:60:0d:be:be:
28:42:79:08:c0:98:0d:6b:cf:41:ac:aa:50:05:79:
cb:1f:8c:9b:03:82:df:aa:ad:cf:07:be:03:c7:2e:
c7:a5:c8:f6:f0:22:b6:df:94:61:17:3a:73:7b:f5:
39:7f:48:09:44:cd:68:9c:22:68:88:7e:41:6a:6b:
7a:b0:2c:fd:00:41:9b:c2:b9:e5:be:9e:2b:f4:31:
09:02:19:1d:96:b9:e7:a2:6e:c4:46:52:98:d4:64:
1d:14:f5:4c:54:86:2f:26:8b:1b:49:d3:d8:14:0c:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:99:97:B0:FF:FC:5A:DB:B3:3E:61:C7:20:DA:07:1A:D9:08:9C:B4
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/eZmXsP_8WtuzPmHHINoHGtkInLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.40.0/23
91.109.44.0/23
147.185.196.0/24
193.168.200.0/24
193.168.203.0/24
207.244.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3b:c9:05:2c:94:1f:33:5e:ce:40:72:b7:4e:f5:68:51:d9:
22:01:7e:8c:51:89:03:0c:31:a5:5b:d2:e1:96:c3:5e:ec:71:
0e:76:eb:4b:03:6c:49:e2:34:31:f4:09:48:e8:f7:f5:6f:c2:
86:3f:b7:c3:2a:3d:45:e5:d7:f1:bb:ee:9e:00:0f:e5:1b:fb:
b7:56:01:17:c0:ef:bd:12:17:52:97:51:4a:c1:85:41:7e:26:
9e:b8:ed:c5:9c:12:0a:cd:0c:b6:5c:06:ba:bf:eb:1b:58:aa:
b8:5a:66:c6:6f:fc:c1:fe:e0:f5:0d:94:40:25:d8:33:9c:76:
1d:9c:61:43:ca:f2:c8:8e:2b:1b:65:7d:b2:b3:12:e8:79:07:
11:5f:3c:8a:a3:96:3a:95:02:a6:ff:70:68:12:92:17:e1:da:
d0:90:45:5e:7d:b9:39:58:86:56:33:75:ad:26:d5:1d:2f:22:
2d:e3:8c:87:14:b6:6c:04:50:4f:5f:81:11:81:66:3a:49:96:
9e:21:36:64:9f:c6:aa:b6:b1:f5:19:f6:4d:a1:82:f6:27:2e:
20:e7:16:cc:69:f1:5d:0f:66:a9:e5:8e:00:bd:ea:01:ec:61:
ec:53:6a:44:9e:2b:bc:e6:7f:94:0e:25:0d:0f:eb:f5:67:17:
0a:da:e8:19
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ0u7jqIY2Qc4gsM8Pp2z7QoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjYwMzI3MTA1NDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTk5OTdiMGZmZmM1YWRiYjMzZTYxYzcyMGRhMDcxYWQ5MDg5Y2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UVnaHTaDS1UZyAHankmfJQQeXD2
Ui4YHngYe+bY3x5Qt33HlyjOOeouWorGcghkOS6tbLDh/d5d1/CxwSRGSeeEsbrZ
3TeLZsD4pXXinSjkiarPdAo6aB94xN2EsTdkyaf9+40mBGZTvBA8HlGcLzPNSZZV
rjiYdu07RyoGZv4vGnov/ZVcgrFZG6LwKG+CsWANvr4oQnkIwJgNa89BrKpQBXnL
H4ybA4Lfqq3PB74Dxy7Hpcj28CK235RhFzpze/U5f0gJRM1onCJoiH5Bamt6sCz9
AEGbwrnlvp4r9DEJAhkdlrnnom7ERlKY1GQdFPVMVIYvJosbSdPYFAyiawIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFHmZl7D//Frbsz5hxyDaBxrZCJy0MB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvZVptWHNQXzhXdHV6UG1ISElOb0hHdGtJbkxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBW20oAwQB
W20sAwQAk7nEAwQAwajIAwQAwajLAwQAz/TGMA0GCSqGSIb3DQEBCwUAA4IBAQBq
O8kFLJQfM17OQHK3TvVoUdkiAX6MUYkDDDGlW9LhlsNe7HEOdutLA2xJ4jQx9AlI
6Pf1b8KGP7fDKj1F5dfxu+6eAA/lG/u3VgEXwO+9EhdSl1FKwYVBfiaeuO3FnBIK
zQy2XAa6v+sbWKq4WmbGb/zB/uD1DZRAJdgznHYdnGFDyvLIjisbZX2ysxLoeQcR
XzyKo5Y6lQKm/3BoEpIX4drQkEVefbk5WIZWM3WtJtUdLyIt44yHFLZsBFBPX4ER
gWY6SZaeITZkn8aqtrH1GfZNoYL2Jy4g5xbMafFdD2ap5Y4AveoB7GHsU2pEniu8
5n+UDiUND+v1ZxcK2ugZ
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:38:03 2026 by rpki-client