Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/eoUMchwiIojkAzlPeyTst1sU-BA.roa
File: eoUMchwiIojkAzlPeyTst1sU-BA.roa (raw, json)
Hash identifier: /VVTKRlAF+KUrsWHSE62kbyNFtQ3lhumvV+cXi1hUqo=
Subject key identifier: 7A:85:0C:72:1C:22:22:88:E4:03:39:4F:7B:24:EC:B7:5B:14:F8:10
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019DF7BF252CD91747B310DC5EDA574AFA7E
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/eoUMchwiIojkAzlPeyTst1sU-BA.roa
Signing time: Tue 05 May 2026 10:46:32 +0000
ROA not before: Tue 05 May 2026 10:46:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.0.0/21 maxlen: 22
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.16.0/24 maxlen: 24
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.47.0/24 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.90.0/23 maxlen: 23
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.204.0/23 maxlen: 23
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.189.248.0/22 maxlen: 24
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.240.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.28.0/22 maxlen: 22
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.56.0/22 maxlen: 22
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:bf:25:2c:d9:17:47:b3:10:dc:5e:da:57:4a:fa:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: May 5 10:46:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a850c721c222288e403394f7b24ecb75b14f810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:da:dd:b0:6d:b6:6f:3a:a3:14:c0:1b:b6:
ed:20:ab:a7:50:32:13:bf:8b:75:94:3e:c1:f4:72:
17:ea:03:13:3c:86:0d:c4:57:a1:e6:97:c2:ea:d8:
4b:16:ba:e7:70:fc:29:b1:75:77:dd:91:eb:48:39:
ea:03:89:55:26:be:d0:1e:35:b4:03:7c:f2:2f:27:
b9:84:e5:4b:07:84:ef:c0:bc:c5:76:c7:39:e2:b6:
e3:5a:ed:8b:ec:a0:f7:f0:d6:68:46:b4:f4:4c:17:
1a:73:df:1a:cf:c7:45:b9:66:f6:57:86:ec:f9:0f:
44:60:bc:f0:88:c5:9b:0e:41:3c:94:5a:3b:df:6f:
cb:4c:14:3c:1c:46:d4:2e:82:46:10:ba:3d:e2:4c:
c3:eb:9d:66:01:ca:c7:14:63:8d:92:f9:f9:bb:79:
e5:97:88:f1:9e:94:8a:f0:2d:ef:01:19:89:65:a2:
b4:3c:b1:0d:71:20:f2:f5:74:a2:19:a6:8c:aa:d5:
65:fd:82:84:0d:b7:67:61:39:dd:67:25:8a:97:4d:
de:5c:1e:63:2b:0b:a8:ca:ec:db:04:15:55:5b:3d:
aa:e5:85:46:85:e5:49:79:48:a8:15:d0:eb:61:be:
12:c5:6f:75:4c:ce:b7:fe:ac:bf:60:2e:ae:02:92:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:85:0C:72:1C:22:22:88:E4:03:39:4F:7B:24:EC:B7:5B:14:F8:10
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/eoUMchwiIojkAzlPeyTst1sU-BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.0.0-5.8.16.255
5.8.48.0/21
5.8.60.0/23
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.47.0/24
5.101.64.0/22
5.101.90.0/23
5.188.44.0-5.188.49.255
5.188.204.0/23
5.188.208.0/22
5.188.223.0/24
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.188.0/22
31.184.192.0/21
31.184.238.0-31.184.241.255
31.184.243.0/24
37.9.48.0/24
37.139.53.0/24
37.139.56.0/22
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.20.0/22
46.161.28.0-46.161.35.255
46.161.44.0-46.161.51.255
91.243.32.0/22
91.243.48.0-91.243.61.255
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
31:55:61:04:04:65:ac:d7:30:02:e4:55:1b:ed:84:4c:08:f9:
95:04:fa:f9:a2:c4:4e:25:e6:cf:45:14:2d:a2:17:5c:2b:6d:
73:8e:5d:08:7e:d8:de:b7:3e:94:8f:cc:d0:7e:c0:19:74:1d:
85:9d:42:0c:6c:dc:26:dd:44:02:29:2d:9d:68:5c:ba:b1:a5:
f7:fb:0a:be:71:bf:ee:98:4c:7c:d9:2b:79:33:9b:fb:66:77:
ac:3a:56:34:21:bb:5f:2d:5e:10:d1:f2:32:56:eb:43:c6:77:
bb:94:00:1d:0f:a8:22:19:e3:aa:e4:39:ec:9f:e0:0a:d7:bc:
c3:c8:8c:83:db:4b:b9:b9:ad:2f:c2:c3:e5:fe:1b:e9:8d:e2:
1f:e2:cc:b8:7f:49:3a:ad:f7:df:5b:c8:c7:71:4d:3f:a6:8f:
e4:44:8b:5f:33:c8:13:43:6b:e0:4d:82:fb:88:c6:da:c3:f4:
d3:90:a6:37:34:f0:ab:90:98:1d:02:ab:7c:e1:df:ab:04:ca:
04:6f:c4:46:78:e2:ac:ac:fa:06:b9:61:59:19:11:0b:76:8f:
05:98:b5:8a:19:8e:8e:da:99:f0:d2:6f:50:6f:d0:33:0a:9a:
7e:b7:0a:0c:53:7c:a7:3a:b1:94:3b:ed:cb:33:cf:d2:30:45:
76:d6:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:57 2026 by rpki-client