Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EBJE8MpSn-QIEsF8YL4DzU2VKv4.roa
File: EBJE8MpSn-QIEsF8YL4DzU2VKv4.roa (raw, json)
Hash identifier: qpdvxnkx0v6VseEAHcHS2IvGdyK9qHMxgHLJwMG85cQ=
Subject key identifier: 10:12:44:F0:CA:52:9F:E4:08:12:C1:7C:60:BE:03:CD:4D:95:2A:FE
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019F889B6A68A5133B91ACEA59D42B4DE936
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EBJE8MpSn-QIEsF8YL4DzU2VKv4.roa
Signing time: Wed 22 Jul 2026 06:55:14 +0000
ROA not before: Wed 22 Jul 2026 06:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 2.59.219.0/24 maxlen: 24
45.93.8.0/24 maxlen: 24
45.93.9.0/24 maxlen: 24
45.148.244.0/24 maxlen: 24
46.16.34.0/24 maxlen: 24
78.40.116.0/24 maxlen: 24
78.40.117.0/24 maxlen: 24
81.177.212.0/24 maxlen: 24
93.185.166.0/24 maxlen: 24
93.185.167.0/24 maxlen: 24
94.103.188.0/24 maxlen: 24
94.231.223.0/24 maxlen: 24
171.22.181.0/24 maxlen: 24
176.116.0.0/24 maxlen: 24
176.125.240.0/24 maxlen: 24
176.125.241.0/24 maxlen: 24
176.125.242.0/24 maxlen: 24
176.125.243.0/24 maxlen: 24
185.103.164.0/24 maxlen: 24
185.103.166.0/24 maxlen: 24
185.103.167.0/24 maxlen: 24
185.139.214.0/24 maxlen: 24
185.139.215.0/24 maxlen: 24
185.212.117.0/24 maxlen: 24
185.234.9.0/24 maxlen: 24
193.27.90.0/24 maxlen: 24
213.232.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:9b:6a:68:a5:13:3b:91:ac:ea:59:d4:2b:4d:e9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jul 22 06:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=101244f0ca529fe40812c17c60be03cd4d952afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:e5:bc:cd:58:83:2c:83:52:e3:36:35:74:
a2:51:79:59:ed:17:8a:9b:86:96:54:1f:a0:cf:3b:
76:53:83:37:be:a0:73:31:cb:e3:19:e1:58:2b:f4:
3a:7f:ec:68:ec:30:b6:40:c6:9e:f3:72:51:be:8d:
88:5a:8b:ab:76:9f:28:b4:73:65:71:d6:3d:8f:72:
24:75:24:31:e5:0a:55:80:05:78:84:65:9b:81:f0:
3a:2b:1f:5a:4d:33:45:ec:6b:ee:8a:ad:96:40:be:
60:a3:b3:42:43:8f:c6:fe:22:2a:1e:b0:f1:a8:40:
eb:71:b2:aa:04:9d:14:c3:e4:21:a6:56:57:f8:b1:
75:e4:fa:74:bd:50:07:10:ff:bb:41:98:6f:02:a3:
85:a6:4d:f7:f3:9e:16:28:e9:89:e7:ee:bf:98:d1:
46:df:d1:ce:fb:e4:11:1e:eb:e6:03:30:a1:e8:af:
a3:c7:98:e6:eb:52:b1:ba:ac:bf:7d:4c:59:e0:f6:
59:e2:02:b1:51:aa:20:6f:e3:08:1b:b5:6b:11:6f:
ea:5c:41:a8:10:43:4e:8a:fa:17:71:2c:81:83:45:
60:9a:36:74:59:76:a0:da:81:a2:dd:bb:f1:32:a0:
0b:c3:99:4b:42:67:f0:95:d8:bf:bd:65:b9:7d:19:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:12:44:F0:CA:52:9F:E4:08:12:C1:7C:60:BE:03:CD:4D:95:2A:FE
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EBJE8MpSn-QIEsF8YL4DzU2VKv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.219.0/24
45.93.8.0/23
45.148.244.0/24
46.16.34.0/24
78.40.116.0/23
81.177.212.0/24
93.185.166.0/23
94.103.188.0/24
94.231.223.0/24
171.22.181.0/24
176.116.0.0/24
176.125.240.0/22
185.103.164.0/24
185.103.166.0/23
185.139.214.0/23
185.212.117.0/24
185.234.9.0/24
193.27.90.0/24
213.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e9:f5:97:e9:4f:c9:63:04:52:71:45:c5:53:1c:49:55:00:
65:df:f1:b3:74:e2:b8:dc:85:9c:28:63:ab:4f:37:cd:ac:17:
84:a3:fb:9c:64:17:d7:b2:6b:5f:1b:95:74:d5:8c:16:cc:34:
ab:91:97:90:2f:40:76:93:f6:c4:4c:af:d1:08:c0:58:3f:46:
0b:b1:59:38:9b:16:19:f7:b2:a8:d6:44:60:4e:19:43:42:a5:
a0:f9:3b:db:66:3f:31:c7:5f:f2:06:a6:c6:3d:17:e3:79:bb:
d8:31:d1:7f:44:c8:c7:56:bf:9e:f6:9a:ea:da:fd:0a:e8:25:
56:4b:5b:83:72:63:5b:2c:02:90:6c:58:53:23:89:46:09:15:
a8:f1:8a:b2:c9:f8:6f:c1:08:32:aa:4b:9e:3c:c0:6d:1c:49:
d2:6b:71:bd:93:63:6a:f0:52:b4:43:3d:b8:90:72:83:0d:2b:
5d:79:60:e2:bd:67:af:5f:90:e7:5f:b9:af:30:1b:4c:64:17:
7e:19:72:00:6b:d1:aa:d1:d7:10:c6:2b:94:7d:4e:20:b7:0e:
5b:42:af:64:c7:ad:db:0f:74:40:2c:ab:9b:1b:0b:bb:2d:d1:
4a:0a:fe:c9:5d:65:07:1c:14:e8:04:50:a3:c6:7e:1b:10:4c:
04:95:74:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:33 2026 by rpki-client