Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/eUJ-8ducR6URHo_ARf9n1B--2MY.roa
File: eUJ-8ducR6URHo_ARf9n1B--2MY.roa (raw, json)
Hash identifier: 5SDzhPwlKZoyMD6LSkaqwRJVCmsA0eYdxz8A0a/PgX4=
Subject key identifier: 79:42:7E:F1:DB:9C:47:A5:11:1E:8F:C0:45:FF:67:D4:1F:BE:D8:C6
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 01A1BA38D3989CD851440B42240C0331DB27
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/eUJ-8ducR6URHo_ARf9n1B--2MY.roa
Signing time: Sun 08 Nov 2026 08:14:08 +0000
ROA not before: Sun 08 Nov 2026 08:14:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398781
IP address blocks: 80.173.192.0/21 maxlen: 32
80.173.232.0/21 maxlen: 32
80.173.240.0/21 maxlen: 32
80.173.248.0/21 maxlen: 32
82.158.0.0/18 maxlen: 32
82.158.92.0/22 maxlen: 32
82.158.96.0/22 maxlen: 32
82.158.100.0/22 maxlen: 32
82.158.104.0/22 maxlen: 32
82.158.108.0/22 maxlen: 32
87.192.88.0/21 maxlen: 24
87.192.208.0/21 maxlen: 24
87.232.144.0/20 maxlen: 24
87.232.200.0/21 maxlen: 24
87.232.208.0/20 maxlen: 24
87.232.226.0/23 maxlen: 24
87.232.232.0/21 maxlen: 24
87.232.240.0/21 maxlen: 24
87.232.248.0/23 maxlen: 24
89.124.246.0/23 maxlen: 24
139.84.64.0/19 maxlen: 24
139.100.32.0/19 maxlen: 24
139.100.64.0/19 maxlen: 24
140.225.32.0/21 maxlen: 32
140.225.40.0/21 maxlen: 32
140.225.48.0/21 maxlen: 32
140.225.56.0/21 maxlen: 32
140.225.224.0/19 maxlen: 32
157.239.64.0/18 maxlen: 24
167.150.82.0/23 maxlen: 32
167.150.96.0/23 maxlen: 32
167.150.108.0/23 maxlen: 32
167.150.114.0/23 maxlen: 32
167.150.150.0/23 maxlen: 32
167.150.164.0/23 maxlen: 32
167.150.168.0/23 maxlen: 32
167.150.174.0/23 maxlen: 32
167.150.178.0/23 maxlen: 32
167.150.184.0/23 maxlen: 32
167.150.202.0/23 maxlen: 32
167.150.212.0/23 maxlen: 32
167.150.242.0/23 maxlen: 32
173.224.144.0/20 maxlen: 32
209.92.16.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ba:38:d3:98:9c:d8:51:44:0b:42:24:0c:03:31:db:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Nov 8 08:14:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79427ef1db9c47a5111e8fc045ff67d41fbed8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:c8:3e:a5:26:9f:09:ad:a5:b4:8e:1a:50:
48:f3:a3:5c:aa:58:fe:52:6c:6b:86:1e:f7:83:5a:
9a:36:39:3f:ec:50:f5:c9:45:2a:76:71:c8:b4:7d:
8d:13:15:b1:d8:5f:ec:4b:af:21:71:7f:8e:66:7c:
2d:97:1c:95:06:98:2a:9c:18:35:e6:d5:fe:1d:9e:
a6:81:e9:9e:ff:d9:49:cb:38:18:33:62:34:71:4a:
3b:ef:21:c4:33:43:ec:02:11:b8:43:d2:46:ec:82:
58:72:1a:10:7e:5b:ee:ec:f3:ff:23:5b:db:c0:43:
13:ed:ef:87:f0:8a:82:5a:ac:16:cf:42:15:86:1b:
13:76:a7:d4:0f:26:dd:cf:ed:17:e9:86:a4:cc:49:
26:e7:ab:91:72:01:de:98:47:f1:d6:04:a8:b3:d4:
c1:99:d2:03:26:ff:cf:0d:49:20:9c:76:10:1b:23:
dd:75:00:95:ec:74:02:33:3a:99:54:f1:56:9b:dd:
c1:42:98:fc:27:82:6c:b0:e4:c6:f8:d0:59:b7:80:
65:ea:d3:8e:82:7b:01:f8:c1:60:3e:01:8e:8b:c7:
de:f5:9d:9e:33:77:ea:62:c2:74:d8:51:1f:18:7e:
0f:8b:38:4b:6e:27:f6:46:5f:37:f7:9d:ec:33:a2:
ae:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:7E:F1:DB:9C:47:A5:11:1E:8F:C0:45:FF:67:D4:1F:BE:D8:C6
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/eUJ-8ducR6URHo_ARf9n1B--2MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.173.192.0/21
80.173.232.0-80.173.255.255
82.158.0.0/18
82.158.92.0-82.158.111.255
87.192.88.0/21
87.192.208.0/21
87.232.144.0/20
87.232.200.0-87.232.223.255
87.232.226.0/23
87.232.232.0-87.232.249.255
89.124.246.0/23
139.84.64.0/19
139.100.32.0-139.100.95.255
140.225.32.0/19
140.225.224.0/19
157.239.64.0/18
167.150.82.0/23
167.150.96.0/23
167.150.108.0/23
167.150.114.0/23
167.150.150.0/23
167.150.164.0/23
167.150.168.0/23
167.150.174.0/23
167.150.178.0/23
167.150.184.0/23
167.150.202.0/23
167.150.212.0/23
167.150.242.0/23
173.224.144.0/20
209.92.16.0/20
Signature Algorithm: sha256WithRSAEncryption
35:50:4b:f7:64:61:69:51:c4:19:12:01:71:75:33:a2:2a:1f:
c2:13:1e:9e:94:ad:97:4d:6b:ef:88:7c:2e:af:11:f7:4a:cc:
4c:cc:cf:78:21:e0:35:85:15:71:d4:52:7c:d8:cc:38:67:f3:
5b:9a:75:f5:20:2b:7c:c8:09:59:1c:eb:fc:57:a5:53:24:44:
4c:3c:37:31:4e:b9:28:08:0c:43:3a:9a:6a:33:66:96:b0:d1:
66:64:63:5c:99:f5:92:39:fb:8c:32:df:f2:a8:ea:3d:de:53:
a7:63:54:15:e2:3f:75:e2:de:65:28:45:e6:5b:2b:ed:08:12:
fc:dd:da:16:cc:1f:a8:21:b8:50:c1:e1:f3:34:71:b8:ce:e3:
b6:47:98:5f:de:cf:92:e7:90:d9:18:24:e6:ed:35:61:5b:e9:
5f:9b:c5:b2:ab:7f:47:34:83:93:a8:82:5f:c6:e9:ee:f4:e2:
35:b6:7c:5f:2e:41:48:6a:a6:31:3b:75:cb:ba:0d:64:b5:3e:
8b:8c:19:e0:3e:9b:c4:4e:01:88:03:81:53:4d:70:e6:09:0c:
2d:a2:91:1f:94:2d:3b:3c:52:ec:d0:ef:99:41:9c:8d:06:3c:
22:37:65:52:0f:d4:70:aa:74:01:3a:c3:01:72:15:69:9f:07:
23:16:20:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:06:11 2026 by rpki-client