Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/0eyjF4LKH08gSHwI8t81kvl7qf4.roa
File: 0eyjF4LKH08gSHwI8t81kvl7qf4.roa (raw, json)
Hash identifier: OAQ9yLlIfIoZMZDTNkGDPEhOI6wA3fmO9jqPZiRRR1M=
Subject key identifier: D1:EC:A3:17:82:CA:1F:4F:20:48:7C:08:F2:DF:35:92:F9:7B:A9:FE
Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial: 019D0FD23D183435A61608347086A417EFED
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/0eyjF4LKH08gSHwI8t81kvl7qf4.roa
Signing time: Sat 21 Mar 2026 09:55:29 +0000
ROA not before: Sat 21 Mar 2026 09:55:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207369
IP address blocks: 91.205.48.0/22 maxlen: 22
95.215.244.0/22 maxlen: 22
178.216.208.0/21 maxlen: 21
185.39.79.0/24 maxlen: 24
185.138.184.0/22 maxlen: 22
185.138.184.0/23 maxlen: 23
185.138.184.0/24 maxlen: 24
185.138.186.0/23 maxlen: 23
185.138.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:d2:3d:18:34:35:a6:16:08:34:70:86:a4:17:ef:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Validity
Not Before: Mar 21 09:55:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1eca31782ca1f4f20487c08f2df3592f97ba9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:e9:47:fc:8a:29:bc:ed:92:92:27:45:bc:
68:3e:18:58:b4:27:bb:51:5e:65:1c:73:41:13:04:
05:d8:a6:bc:66:e3:cc:85:2b:52:29:de:6b:ae:33:
a6:f3:dc:10:5b:66:a1:07:72:77:bb:1c:ac:0d:84:
de:7a:6f:02:1d:d4:42:8e:5c:82:9e:58:1d:b7:19:
fe:94:5e:a5:b7:03:86:27:cc:52:c7:a6:19:9b:25:
45:ba:c8:48:16:55:48:ea:3d:4d:3e:d3:91:67:02:
01:f5:4b:f3:6e:86:6b:4a:f0:81:c5:f7:2a:98:e3:
2f:36:26:7b:f1:81:32:33:90:50:3f:56:f8:a6:2b:
43:f1:7a:05:77:c7:4b:fd:0c:39:0e:88:1b:36:f8:
e0:78:ef:10:31:41:f4:d7:1b:f7:51:e8:3b:74:76:
8a:01:b4:29:cc:43:c0:f4:5c:61:46:75:81:0b:5a:
15:96:5f:73:1b:6b:cf:ce:af:71:0c:2b:f6:80:25:
17:27:8f:5c:7b:90:4f:e4:4d:3e:f1:08:59:b6:d1:
fd:77:8c:ef:d6:61:c0:24:2d:b6:f1:af:4f:a5:3b:
b9:19:f4:40:0a:db:9f:01:c5:11:0b:d5:60:28:a9:
26:57:0e:7f:af:39:b1:da:e5:da:11:e2:62:92:f6:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EC:A3:17:82:CA:1F:4F:20:48:7C:08:F2:DF:35:92:F9:7B:A9:FE
X509v3 Authority Key Identifier:
keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/0eyjF4LKH08gSHwI8t81kvl7qf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.48.0/22
95.215.244.0/22
178.216.208.0/21
185.39.79.0/24
185.138.184.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:26:df:a5:6c:76:6c:31:fb:5e:b9:1e:14:ac:98:2b:f7:4d:
e8:09:1c:24:1f:21:0e:8c:08:21:9e:25:3e:c6:38:ca:5e:13:
5c:6d:5d:aa:6e:8b:06:06:d2:7f:20:de:cd:af:d6:7b:d4:fc:
a6:56:42:ef:fa:79:2e:bb:12:67:8a:0f:af:ad:20:6b:d1:b3:
10:c3:98:f7:9a:ba:34:72:13:a2:d0:b9:48:d5:71:4f:68:a7:
47:c9:27:dc:84:ad:ad:b1:70:93:02:27:32:18:78:34:2c:95:
83:fe:94:b0:3c:17:5c:27:cc:86:24:f2:a1:04:cb:38:92:ca:
b2:fa:ea:e1:3a:bd:bb:2d:06:bc:22:39:ff:0b:b2:63:21:24:
95:63:fc:4f:08:99:23:26:0c:fd:f0:e5:31:86:67:2e:98:0c:
6e:63:c3:07:52:c6:32:02:93:c5:43:9c:15:77:df:1b:03:00:
80:d2:93:04:a8:ef:8e:dd:66:dc:28:b0:ef:e3:ae:ba:61:9d:
f7:d8:da:8d:b7:25:ca:d6:8e:f8:44:c1:62:34:e0:75:dd:2c:
87:38:77:8e:fd:92:f6:96:51:4a:8b:42:b5:f8:09:17:82:2e:
4c:bc:6a:ba:90:dd:cd:21:8e:96:01:b3:db:aa:de:65:8e:07:
d7:36:11:7b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ0P0j0YNDWmFgg0cIakF+/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZmJhMzhhODcwN2ZkMjMxYzM4ODdlNGE1MmJkY2RlZGFi
MjAzMjMwHhcNMjYwMzIxMDk1NTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWVjYTMxNzgyY2ExZjRmMjA0ODdjMDhmMmRmMzU5MmY5N2JhOWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLPpR/yKKbztkpInRbxoPhhYtCe7
UV5lHHNBEwQF2Ka8ZuPMhStSKd5rrjOm89wQW2ahB3J3uxysDYTeem8CHdRCjlyC
nlgdtxn+lF6ltwOGJ8xSx6YZmyVFushIFlVI6j1NPtORZwIB9UvzboZrSvCBxfcq
mOMvNiZ78YEyM5BQP1b4pitD8XoFd8dL/Qw5DogbNvjgeO8QMUH01xv3Ueg7dHaK
AbQpzEPA9FxhRnWBC1oVll9zG2vPzq9xDCv2gCUXJ49ce5BP5E0+8QhZttH9d4zv
1mHAJC228a9PpTu5GfRACtufAcURC9VgKKkmVw5/rzmx2uXaEeJikvbNmQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNHsoxeCyh9PIEh8CPLfNZL5e6n+MB8GA1UdIwQY
MBaAFBr7o4qHB/0jHDiH5KUr3N7asgMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YTliYTItNmE2YS00YzdjLTg4MmEt
MDk5NmFlZDMyZjNiLzEvMGV5akY0TEtIMDhnU0h3STh0ODFrdmw3cWY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83YTliYTItNmE2YS00YzdjLTg4MmEtMDk5NmFlZDMyZjNi
LzEvR3Z1amlvY0hfU01jT0lma3BTdmMzdHF5QXlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCW80wAwQC
X9f0AwQDstjQAwQAuSdPAwQCuYq4MA0GCSqGSIb3DQEBCwUAA4IBAQCbJt+lbHZs
MfteuR4UrJgr903oCRwkHyEOjAghniU+xjjKXhNcbV2qbosGBtJ/IN7Nr9Z71Pym
VkLv+nkuuxJnig+vrSBr0bMQw5j3mro0chOi0LlI1XFPaKdHySfchK2tsXCTAicy
GHg0LJWD/pSwPBdcJ8yGJPKhBMs4ksqy+urhOr27LQa8Ijn/C7JjISSVY/xPCJkj
Jgz98OUxhmcumAxuY8MHUsYyApPFQ5wVd98bAwCA0pMEqO+O3WbcKLDv4666YZ33
2NqNtyXK1o74RMFiNOB13SyHOHeO/ZL2llFKi0K1+AkXgi5MvGq6kN3NIY6WAbPb
qt5ljgfXNhF7
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:12:22 2026 by rpki-client