Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/EbE_4FlcTeGEtF61cdD338tmF78.roa
File: EbE_4FlcTeGEtF61cdD338tmF78.roa (raw, json)
Hash identifier: UyLGRhRXp3uuZDt1rn1PuLux78VD/m3miAA3O+vEphU=
Subject key identifier: 11:B1:3F:E0:59:5C:4D:E1:84:B4:5E:B5:71:D0:F7:DF:CB:66:17:BF
Certificate issuer: /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial: 019D11433460FD812C11F8C0611CBD6F626E
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/EbE_4FlcTeGEtF61cdD338tmF78.roa
Signing time: Sat 21 Mar 2026 16:38:30 +0000
ROA not before: Sat 21 Mar 2026 16:38:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50864
IP address blocks: 185.160.88.0/24 maxlen: 24
185.160.89.0/24 maxlen: 24
185.160.91.0/24 maxlen: 24
2a07:bbc2::/48 maxlen: 48
2a07:bbc2:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:11:43:34:60:fd:81:2c:11:f8:c0:61:1c:bd:6f:62:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
Validity
Not Before: Mar 21 16:38:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11b13fe0595c4de184b45eb571d0f7dfcb6617bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:fa:21:43:47:ed:04:94:d0:6f:ba:bc:9e:
0a:83:ef:8c:4b:24:d4:3a:dd:70:d8:1d:fa:91:62:
07:d1:0e:2e:5c:cf:1d:b3:bd:95:bb:cd:92:e5:70:
86:92:98:de:e9:1e:36:69:4f:a4:75:1b:ac:26:00:
ac:46:e1:3d:68:56:65:96:58:91:ec:68:31:e6:7a:
2e:35:6d:84:a7:a2:f5:fe:6e:57:b1:f1:c0:17:4b:
13:2e:9b:f5:4a:30:66:ae:16:c9:f7:3e:92:d7:05:
b8:90:eb:cc:9c:a0:15:c2:b5:1a:fe:fd:10:4c:48:
7b:4b:80:c8:e9:a7:8b:e0:96:dc:c7:cd:39:de:09:
a6:95:ca:46:50:cc:c7:86:23:7a:ad:06:f5:c7:57:
f9:21:5e:2b:66:60:f9:40:80:a5:b1:61:f0:33:3e:
43:73:86:97:87:e8:5b:1c:ed:71:7a:9e:04:3b:6b:
29:c8:35:e5:16:b2:d2:be:4d:df:65:36:ca:d3:13:
6a:08:d5:6d:99:2f:77:09:97:19:83:69:68:a6:88:
73:29:24:a4:ef:7e:89:03:c1:3a:7e:7a:e2:38:17:
de:07:7b:02:77:29:28:0c:6b:b6:54:4d:50:29:65:
9c:2c:b7:4f:e3:0c:17:1a:6e:55:1a:4b:68:13:6f:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B1:3F:E0:59:5C:4D:E1:84:B4:5E:B5:71:D0:F7:DF:CB:66:17:BF
X509v3 Authority Key Identifier:
keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/EbE_4FlcTeGEtF61cdD338tmF78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.88.0/23
185.160.91.0/24
IPv6:
2a07:bbc2::/47
Signature Algorithm: sha256WithRSAEncryption
63:0c:b1:2a:c3:99:c3:0e:50:2e:b2:2e:dd:5d:2c:7d:8d:b9:
a2:ba:8a:29:81:85:cf:02:ba:c6:16:e9:49:71:cf:2b:eb:8a:
73:47:04:ae:59:19:cd:c0:bc:6a:ff:29:e3:64:1a:89:cb:0d:
ce:5e:9f:19:53:c1:ef:6f:d5:74:ac:5d:97:59:d9:33:a1:12:
86:4c:7d:d7:36:93:07:5d:16:c4:fc:15:b3:48:08:ee:f6:01:
69:75:4d:0a:f6:b7:db:cf:ea:81:2a:79:06:3b:be:0c:ee:65:
72:45:6f:8e:c6:e6:54:d1:3a:b8:9a:57:83:42:ec:12:6b:da:
ce:dc:2a:72:ad:5b:c9:3b:c3:b0:12:58:56:f7:b3:21:83:09:
a0:c0:21:44:05:32:94:e6:77:b7:3f:80:0a:f3:4d:88:a1:b8:
a8:28:d9:92:4d:12:f0:59:66:e3:8b:9a:98:80:67:af:44:2e:
43:75:06:4b:67:a7:b1:1f:88:37:12:09:b7:41:35:91:f0:f5:
bc:71:15:89:ee:81:76:12:1e:49:41:55:19:fb:db:38:1b:0e:
cf:49:e1:b4:06:df:44:e8:11:d5:d2:c2:c2:e1:d6:36:19:98:
ca:e4:63:b9:c8:50:01:9f:66:26:e0:0d:75:ae:b6:00:9f:e9:
71:c3:90:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:26:58 2026 by rpki-client