Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/el1QJ8EZEOroSio5mjAT6cdENeQ.roa
File: el1QJ8EZEOroSio5mjAT6cdENeQ.roa (raw, json)
Hash identifier: Rq2+3JsrgLjDqBXH9XO5ReXrknj46T6QViW1jQC5N00=
Subject key identifier: 7A:5D:50:27:C1:19:10:EA:E8:4A:2A:39:9A:30:13:E9:C7:44:35:E4
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 01A1398EF8084DA157E87FA9EAEADFA8D74E
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/el1QJ8EZEOroSio5mjAT6cdENeQ.roa
Signing time: Wed 14 Oct 2026 08:37:13 +0000
ROA not before: Wed 14 Oct 2026 08:37:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35444
IP address blocks: 45.93.220.0/22 maxlen: 22
80.90.80.0/20 maxlen: 20
80.90.80.0/24 maxlen: 24
80.90.83.0/24 maxlen: 24
80.90.87.0/24 maxlen: 24
80.90.89.0/24 maxlen: 24
80.90.90.0/24 maxlen: 24
80.90.91.0/24 maxlen: 24
80.90.92.0/24 maxlen: 24
81.26.200.0/21 maxlen: 21
81.26.200.0/24 maxlen: 24
81.26.201.0/24 maxlen: 24
81.26.202.0/24 maxlen: 24
81.26.203.0/24 maxlen: 24
81.26.204.0/24 maxlen: 24
81.26.205.0/24 maxlen: 24
81.26.206.0/23 maxlen: 24
93.93.168.0/22 maxlen: 22
93.93.168.0/23 maxlen: 23
93.93.168.0/24 maxlen: 24
93.93.169.0/24 maxlen: 24
93.93.170.0/23 maxlen: 23
93.93.170.0/24 maxlen: 24
93.93.171.0/24 maxlen: 24
185.132.92.0/23 maxlen: 23
185.132.92.0/24 maxlen: 24
185.132.93.0/24 maxlen: 24
185.132.94.0/24 maxlen: 24
185.132.95.0/24 maxlen: 24
185.158.0.0/22 maxlen: 22
185.158.0.0/23 maxlen: 23
185.158.0.0/24 maxlen: 24
185.158.1.0/24 maxlen: 24
185.158.2.0/23 maxlen: 23
185.158.2.0/24 maxlen: 24
185.158.3.0/24 maxlen: 24
185.175.252.0/22 maxlen: 22
185.175.254.0/24 maxlen: 24
185.187.0.0/22 maxlen: 23
185.187.0.0/23 maxlen: 23
185.187.0.0/24 maxlen: 24
185.187.1.0/24 maxlen: 24
185.187.2.0/23 maxlen: 23
185.187.2.0/24 maxlen: 24
185.187.3.0/24 maxlen: 24
185.212.188.0/22 maxlen: 22
185.212.188.0/23 maxlen: 23
185.212.188.0/24 maxlen: 24
185.212.189.0/24 maxlen: 24
185.212.190.0/23 maxlen: 23
185.212.190.0/24 maxlen: 24
185.212.191.0/24 maxlen: 24
185.239.8.0/22 maxlen: 22
185.239.8.0/23 maxlen: 23
185.239.8.0/24 maxlen: 24
185.239.9.0/24 maxlen: 24
185.239.10.0/23 maxlen: 23
185.239.10.0/24 maxlen: 24
185.239.11.0/24 maxlen: 24
2a03:2de0::/32 maxlen: 32
2a03:2de0:ffff:fffd::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:8e:f8:08:4d:a1:57:e8:7f:a9:ea:ea:df:a8:d7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Oct 14 08:37:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a5d5027c11910eae84a2a399a3013e9c74435e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:11:91:37:5a:f5:91:a2:eb:bb:b0:ed:f1:50:
dd:32:cd:f4:87:5e:b9:62:02:c6:f6:8c:c9:86:1a:
67:37:26:e7:3a:3a:d6:8b:2b:66:fa:b0:50:f1:8f:
ac:39:65:23:cf:1c:b7:aa:d0:07:d5:43:79:c6:65:
57:23:85:25:4a:03:7c:a6:7b:f8:bc:df:c2:2e:f6:
76:dd:76:f8:f7:68:c5:88:ec:c0:bd:62:de:72:f4:
f3:fa:f7:d4:e9:96:c8:d6:50:80:ca:a2:f5:26:89:
c5:21:61:d3:ee:f1:9a:1a:c7:b1:0c:c6:c5:11:4b:
44:5c:28:ba:7e:da:4c:db:7e:ea:c9:2d:48:ed:c4:
69:59:8f:f3:49:72:81:c3:a3:c0:b8:dc:72:64:1d:
c2:01:86:13:a6:70:97:df:e2:73:34:89:66:37:25:
5a:57:76:ac:8d:48:06:fb:d7:78:d4:41:84:33:a5:
9c:d2:46:31:28:7c:7a:5e:9c:ab:cd:9c:32:49:cf:
1e:df:ea:51:28:a2:11:c1:6b:cd:95:53:ff:49:9c:
06:16:7d:8f:71:96:dd:5c:5a:c8:f5:c6:6b:4b:fa:
a1:01:f4:a5:26:5f:b0:83:2a:18:1b:2b:c7:86:e6:
fd:39:da:cb:ee:20:f0:b5:f3:52:2a:43:e6:2b:fe:
eb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5D:50:27:C1:19:10:EA:E8:4A:2A:39:9A:30:13:E9:C7:44:35:E4
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/el1QJ8EZEOroSio5mjAT6cdENeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.220.0/22
80.90.80.0/20
81.26.200.0/21
93.93.168.0/22
185.132.92.0/22
185.158.0.0/22
185.175.252.0/22
185.187.0.0/22
185.212.188.0/22
185.239.8.0/22
IPv6:
2a03:2de0::/32
Signature Algorithm: sha256WithRSAEncryption
48:ad:fc:db:b5:86:9a:ce:b9:71:1c:27:27:fe:20:b8:7c:99:
77:3a:ef:0b:08:7b:a0:73:7b:f1:d7:61:28:82:9c:90:d8:7b:
be:02:3a:ab:b9:50:ac:e3:ca:22:65:1d:77:00:e0:33:e2:6e:
9c:eb:50:6e:8b:b1:fb:1a:e9:55:a6:4a:c1:d3:c9:8b:ac:3b:
71:c5:13:fa:e5:d6:b6:f3:5b:45:84:f6:7b:8b:a4:ad:35:06:
c2:c6:45:b5:f8:2a:a8:1d:e9:d1:1d:73:af:08:0f:97:9b:a9:
ea:45:53:df:e3:31:02:80:9e:99:04:aa:b4:63:24:1e:ac:1f:
52:17:89:0b:56:47:2b:51:e2:c6:c3:2f:a8:6f:45:0c:7f:da:
e2:b6:3b:cc:4d:4e:38:7c:41:5b:2d:8f:48:f8:a8:45:fc:d3:
1d:bf:4c:db:36:44:32:4a:81:3e:13:70:6e:7c:3a:e3:a7:51:
80:0f:a0:8c:5a:e2:c4:ea:a2:d7:e4:f9:dd:34:bc:62:b4:24:
1f:68:d6:91:af:fc:08:f6:40:1d:b6:19:59:e0:2b:af:aa:1d:
82:40:22:bf:bb:08:47:da:a4:dc:76:6b:68:ba:a0:b9:e5:a1:
e2:73:aa:73:e1:a3:13:88:a9:0f:6f:5c:ed:2a:e3:af:f2:b0:
cb:50:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 08:15:50 2026 by rpki-client