Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/eqrrcgpV7KMv4JmUrXLZ3oF-OyU.roa
File: eqrrcgpV7KMv4JmUrXLZ3oF-OyU.roa (raw, json)
Hash identifier: UrbDaV7HIRd1q7wUvTKt2CvJ/ULBsWT3eeR6F33PH8c=
Subject key identifier: 7A:AA:EB:72:0A:55:EC:A3:2F:E0:99:94:AD:72:D9:DE:81:7E:3B:25
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 01A0CE313A74465EA542AC93DE9934BDC64A
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/eqrrcgpV7KMv4JmUrXLZ3oF-OyU.roa
Signing time: Wed 23 Sep 2026 12:15:27 +0000
ROA not before: Wed 23 Sep 2026 12:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219369
IP address blocks: 87.199.140.0/23 maxlen: 23
87.199.140.0/24 maxlen: 24
87.199.141.0/24 maxlen: 24
195.10.233.0/24 maxlen: 24
2a0b:9402::/48 maxlen: 48
2a0b:9405::/32 maxlen: 32
2a0b:9405::/33 maxlen: 33
2a0b:9405:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:31:3a:74:46:5e:a5:42:ac:93:de:99:34:bd:c6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Sep 23 12:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7aaaeb720a55eca32fe09994ad72d9de817e3b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:7e:bc:37:0d:16:41:d0:14:75:c7:6e:20:
3d:c7:75:d1:38:da:66:d6:da:01:9a:4c:45:c2:89:
94:6b:eb:c6:3c:de:48:4f:74:95:6f:24:d7:86:06:
3d:54:16:73:73:08:d6:95:0b:27:30:68:79:44:28:
84:40:a8:69:5e:33:e6:10:17:48:34:cf:82:bd:07:
f2:4e:da:0f:aa:c0:67:12:b8:05:51:41:d2:e4:a6:
96:59:37:6d:80:d5:4c:51:2a:9f:a6:29:51:23:a0:
48:38:a0:8d:54:a4:60:0e:d5:23:84:f1:e4:36:f1:
45:8b:0b:c4:f0:db:27:0c:7a:e0:4f:09:70:11:57:
d3:19:92:54:84:c6:b0:e5:fa:2f:e3:37:be:c9:10:
cb:6d:09:a7:11:99:57:0c:a5:ba:ce:d1:e8:2e:dd:
e4:a6:a3:94:59:1a:41:d0:f9:f1:ec:4b:cd:2e:fc:
2b:68:b5:bc:2c:b0:b5:a1:b1:0a:68:1e:4b:0f:02:
5f:2c:53:15:3b:98:84:79:58:9b:47:41:02:43:22:
99:64:f6:00:30:7d:95:87:b9:97:5f:13:37:f2:f5:
e4:bd:07:50:e1:a2:6b:46:a7:c4:17:b6:0a:14:94:
9d:c2:24:80:39:04:c2:16:f0:74:db:4a:7b:4a:2d:
a6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AA:EB:72:0A:55:EC:A3:2F:E0:99:94:AD:72:D9:DE:81:7E:3B:25
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/eqrrcgpV7KMv4JmUrXLZ3oF-OyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.140.0/23
195.10.233.0/24
IPv6:
2a0b:9402::/48
2a0b:9405::/32
Signature Algorithm: sha256WithRSAEncryption
31:bf:b9:84:59:11:42:93:54:c3:a6:55:99:75:e5:53:c4:e6:
eb:09:46:2e:af:d5:ce:5f:74:1a:6d:bb:ed:9b:d8:97:90:0d:
d7:e5:a1:4c:76:1a:f7:30:0b:0e:34:3e:25:a9:f6:04:fc:05:
e3:01:ce:a8:67:28:23:24:10:ce:f5:ff:29:f7:90:58:08:59:
de:05:95:09:8b:cf:2b:d7:4f:0e:90:96:c6:56:4a:9f:5b:d4:
19:a0:68:f2:59:13:38:03:73:87:ff:ea:4f:a2:ed:8a:eb:7e:
17:ba:f9:63:24:0f:a6:d3:f8:23:6d:d2:46:a5:5e:19:66:02:
87:8c:15:6a:35:2e:6b:34:9e:12:eb:e3:6a:44:d7:8b:45:ca:
f0:6c:35:e9:34:5c:7d:6a:2d:7b:6a:84:c2:5f:70:49:b7:a2:
53:80:51:c8:64:0b:9c:80:a1:df:90:01:45:fc:4e:9c:ab:ba:
6f:f0:0a:5e:c4:09:5f:aa:78:2f:cb:d4:fb:19:1e:6e:7f:01:
be:dd:b1:64:c9:1a:df:dc:7c:eb:a4:b9:bb:41:e1:c4:91:d1:
d7:9f:fa:c9:9a:20:ee:7a:20:75:b7:2d:5c:e9:ee:b3:8f:22:
91:e4:42:a0:54:2d:9d:eb:1f:18:4e:2a:5d:f9:fe:70:91:6a:
d4:7b:9f:5b
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaDOMTp0Rl6lQqyT3pk0vcZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTAyZTJkMjRiMWYyMTY5MTMwODgyMDdhMjY4ZTY2MjZi
MGNlMzkwHhcNMjYwOTIzMTIxNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWFhZWI3MjBhNTVlY2EzMmZlMDk5OTRhZDcyZDlkZTgxN2UzYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPN+vDcNFkHQFHXHbiA9x3XRONpm
1toBmkxFwomUa+vGPN5IT3SVbyTXhgY9VBZzcwjWlQsnMGh5RCiEQKhpXjPmEBdI
NM+CvQfyTtoPqsBnErgFUUHS5KaWWTdtgNVMUSqfpilRI6BIOKCNVKRgDtUjhPHk
NvFFiwvE8NsnDHrgTwlwEVfTGZJUhMaw5fov4ze+yRDLbQmnEZlXDKW6ztHoLt3k
pqOUWRpB0Pnx7EvNLvwraLW8LLC1obEKaB5LDwJfLFMVO5iEeVibR0ECQyKZZPYA
MH2Vh7mXXxM38vXkvQdQ4aJrRqfEF7YKFJSdwiSAOQTCFvB020p7Si2mBQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFHqq63IKVeyjL+CZlK1y2d6BfjslMB8GA1UdIwQY
MBaAFH1QLi0ksfIWkTCIIHomjmYmsM45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMt
NTFkNzU1NjhhOWUzLzEvZXFycmNncFY3S012NEptVXJYTFozb0YtT3lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMtNTFkNzU1NjhhOWUz
LzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQBV8eMAwQA
wwrpMBYEAgACMBADBwAqC5QCAAADBQAqC5QFMA0GCSqGSIb3DQEBCwUAA4IBAQAx
v7mEWRFCk1TDplWZdeVTxObrCUYur9XOX3Qabbvtm9iXkA3X5aFMdhr3MAsOND4l
qfYE/AXjAc6oZygjJBDO9f8p95BYCFneBZUJi88r108OkJbGVkqfW9QZoGjyWRM4
A3OH/+pPou2K634XuvljJA+m0/gjbdJGpV4ZZgKHjBVqNS5rNJ4S6+NqRNeLRcrw
bDXpNFx9ai17aoTCX3BJt6JTgFHIZAucgKHfkAFF/E6cq7pv8ApexAlfqngvy9T7
GR5ufwG+3bFkyRrf3HzrpLm7QeHEkdHXn/rJmiDueiB1ty1c6e6zjyKR5EKgVC2d
6x8YTipd+f5wkWrUe59b
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:23:44 2026 by rpki-client