Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/EzehS4lEWxea1goC3uSmUBkfXw8.roa
File: EzehS4lEWxea1goC3uSmUBkfXw8.roa (raw, json)
Hash identifier: nQIZ+5RqYNsZnmvNJO60ak7iXV9gihXN6MTD5vlRsQo=
Subject key identifier: 13:37:A1:4B:89:44:5B:17:9A:D6:0A:02:DE:E4:A6:50:19:1F:5F:0F
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A1A81A9AEB1AD0BFF3D677B6482EC7F438
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/EzehS4lEWxea1goC3uSmUBkfXw8.roa
Signing time: Wed 04 Nov 2026 19:47:58 +0000
ROA not before: Wed 04 Nov 2026 19:47:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51202
IP address blocks: 31.22.72.0/24 maxlen: 24
31.22.73.0/24 maxlen: 24
31.22.75.0/24 maxlen: 24
31.25.11.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
84.252.120.0/24 maxlen: 24
84.252.121.0/24 maxlen: 24
84.252.122.0/24 maxlen: 24
84.252.123.0/24 maxlen: 24
89.36.32.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
95.175.150.0/24 maxlen: 24
109.175.211.0/24 maxlen: 24
185.79.19.0/24 maxlen: 24
185.121.132.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
185.230.161.0/24 maxlen: 24
185.230.162.0/24 maxlen: 24
185.230.163.0/24 maxlen: 24
192.40.69.0/24 maxlen: 24
194.117.225.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
2a09:6301::/32 maxlen: 48
2a0c:2500::/29 maxlen: 48
2a0c:2500::/32 maxlen: 48
2a0c:2501::/32 maxlen: 48
2a0c:2502::/32 maxlen: 48
2a0c:2503::/32 maxlen: 48
2a14:6781::/32 maxlen: 48
2a14:6781:305::/48 maxlen: 48
2a14:6781:400::/48 maxlen: 48
2a14:6781:401::/48 maxlen: 48
2a14:6782:1::/48 maxlen: 48
2a14:6782:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:1a:9a:eb:1a:d0:bf:f3:d6:77:b6:48:2e:c7:f4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Nov 4 19:47:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1337a14b89445b179ad60a02dee4a650191f5f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:ae:f2:f8:bd:22:49:b8:1d:f7:53:a8:50:
4c:01:8b:55:ee:e8:16:1b:e5:64:b3:6f:e6:be:9e:
e1:39:23:9c:56:d0:e0:4c:12:c3:9e:67:75:1a:84:
39:1e:f9:6e:6a:61:26:06:c2:59:7b:8a:dc:1e:3e:
a8:84:02:7f:52:0a:79:a0:3b:8d:df:59:78:09:8f:
fb:0d:fa:b2:95:90:56:1b:b1:f5:b8:d1:04:59:76:
1c:c7:10:ad:d1:8e:65:a4:91:12:97:5a:63:3c:04:
3e:36:e6:5f:05:5a:9a:9d:98:ba:4a:8a:67:5d:cc:
e0:b9:89:8e:1f:2c:a8:1f:7f:0e:6d:7b:c0:b5:6c:
4c:89:88:ee:cb:41:a6:9c:44:ea:e5:36:b5:d9:8a:
16:5b:74:52:ee:4a:be:58:44:47:e5:46:a9:df:da:
7b:aa:e7:e6:99:73:b9:0b:ea:c4:53:73:e8:44:07:
c4:ee:1b:34:12:02:47:98:3b:8a:29:19:e7:af:3f:
43:48:b4:ef:85:58:1a:eb:90:49:58:f5:4b:82:9e:
b8:58:92:0e:2a:26:8a:58:03:1d:bc:f2:73:60:76:
17:73:db:64:2e:ca:ea:9f:f5:aa:e4:18:7c:59:84:
4f:b1:f1:f3:e4:7b:d1:94:43:a2:7b:0e:5a:0a:5f:
b0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:37:A1:4B:89:44:5B:17:9A:D6:0A:02:DE:E4:A6:50:19:1F:5F:0F
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/EzehS4lEWxea1goC3uSmUBkfXw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.72.0/23
31.22.75.0/24
31.25.11.0/24
62.169.152.0/24
84.252.120.0/22
89.36.32.0/24
89.36.35.0/24
95.175.150.0/24
109.175.211.0/24
185.79.19.0/24
185.121.132.0/23
185.121.135.0/24
185.144.70.0/23
185.230.161.0-185.230.163.255
192.40.69.0/24
194.117.225.0/24
212.232.18.0/23
IPv6:
2a09:6301::/32
2a0c:2500::/29
2a14:6781::/32
2a14:6782:1::/48
2a14:6782:3::/48
Signature Algorithm: sha256WithRSAEncryption
12:d4:ea:a8:ef:af:7e:f0:8e:41:2d:3b:c6:ce:c7:20:b4:75:
c1:84:ba:64:c5:5c:83:76:8c:de:37:3a:4a:e2:a0:33:13:6a:
62:4f:2b:f7:bd:19:6f:0b:44:e7:db:eb:45:be:31:69:f3:da:
ac:62:b5:ed:aa:38:13:b7:e4:67:58:f2:84:cd:d7:e4:f4:d0:
39:ee:77:7a:37:c7:3d:1c:1e:73:27:be:5f:4c:5d:3d:ff:c9:
d7:53:c5:8e:b5:0c:e7:34:43:16:73:89:fd:17:35:f9:f7:0e:
b6:54:2b:ba:2d:1d:1e:ad:90:95:b3:42:a3:7a:fa:cb:28:40:
be:e7:b7:8a:7e:d6:7c:85:02:6b:a2:50:8c:d1:ec:71:ec:6d:
c5:17:a6:a3:85:86:e7:75:89:82:fb:90:7f:9d:f2:80:91:03:
d3:57:a7:b1:88:8b:6a:34:d7:73:4b:e1:b6:2f:eb:d1:30:fc:
33:18:14:c2:81:51:2a:e5:41:06:20:f9:b2:0b:7c:89:ec:5c:
74:a9:17:84:58:40:bd:22:ca:15:a9:51:61:fd:af:26:1e:07:
b2:d6:cc:4d:4e:52:6e:81:22:4e:85:ff:77:dc:98:66:f2:da:
00:7e:71:d9:d3:63:63:87:59:70:9a:d5:49:33:3f:6f:30:50:
79:ed:46:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:46 2026 by rpki-client