Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/EawHlN7JNAkDnDGpCLUvcHooRMg.roa
File: EawHlN7JNAkDnDGpCLUvcHooRMg.roa (raw, json)
Hash identifier: YsU4fgN+WJKjEkJxieUJoAw2ai8KGB+69/Kr8BF0EXQ=
Subject key identifier: 11:AC:07:94:DE:C9:34:09:03:9C:31:A9:08:B5:2F:70:7A:28:44:C8
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 01A0EC81B4176E380DAD66EC1D6DEBF62B05
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/EawHlN7JNAkDnDGpCLUvcHooRMg.roa
Signing time: Tue 29 Sep 2026 09:31:58 +0000
ROA not before: Tue 29 Sep 2026 09:31:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25144
IP address blocks: 31.223.128.0/19 maxlen: 19
31.223.128.0/21 maxlen: 21
31.223.136.0/21 maxlen: 21
31.223.144.0/21 maxlen: 21
31.223.152.0/21 maxlen: 21
45.131.116.0/22 maxlen: 23
45.131.118.0/23 maxlen: 23
46.239.0.0/18 maxlen: 18
46.239.0.0/22 maxlen: 22
46.239.4.0/22 maxlen: 22
46.239.32.0/19 maxlen: 19
62.101.144.0/20 maxlen: 20
81.93.64.0/19 maxlen: 19
81.93.66.0/24 maxlen: 24
81.93.67.0/24 maxlen: 24
81.93.69.0/24 maxlen: 24
81.93.70.0/24 maxlen: 24
81.93.73.0/24 maxlen: 24
81.93.84.0/24 maxlen: 24
81.93.86.0/24 maxlen: 24
81.93.91.0/24 maxlen: 24
81.93.92.0/24 maxlen: 24
89.111.192.0/18 maxlen: 18
89.111.192.0/19 maxlen: 19
89.111.192.0/24 maxlen: 24
89.111.200.0/24 maxlen: 24
89.111.224.0/19 maxlen: 19
89.111.225.0/24 maxlen: 24
89.111.226.0/24 maxlen: 24
89.111.227.0/24 maxlen: 24
89.111.231.0/24 maxlen: 24
89.111.235.0/24 maxlen: 24
89.111.236.0/24 maxlen: 24
89.111.240.0/24 maxlen: 24
89.111.244.0/22 maxlen: 22
89.111.246.0/24 maxlen: 24
89.111.248.0/22 maxlen: 22
94.250.0.0/18 maxlen: 18
94.250.18.0/24 maxlen: 24
94.250.64.0/18 maxlen: 18
109.165.128.0/17 maxlen: 17
185.35.156.0/22 maxlen: 22
185.125.120.0/22 maxlen: 22
217.24.128.0/20 maxlen: 20
2a00:cb00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:81:b4:17:6e:38:0d:ad:66:ec:1d:6d:eb:f6:2b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Sep 29 09:31:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11ac0794dec93409039c31a908b52f707a2844c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1c:58:2d:db:36:b1:a7:7c:3f:10:f9:6e:71:
f7:b1:3c:1b:04:74:80:d6:5d:65:af:50:0a:a9:a3:
2a:52:0a:0d:68:b5:0d:26:2f:36:32:0c:dd:1b:31:
b6:fa:c0:da:bb:69:38:50:f5:b3:2e:d4:ff:7a:3b:
24:8d:20:7f:d6:82:61:3f:42:3a:41:6f:84:33:54:
7e:1b:a8:36:ca:b0:8c:69:22:db:f1:55:4c:7a:e5:
40:7e:ad:dc:ae:6f:ca:eb:c1:d9:dd:1e:69:14:47:
00:36:29:ea:8c:9e:dd:ac:4a:97:27:ef:b2:e8:92:
14:4f:8e:89:7c:33:fe:6f:e4:06:33:91:0b:8c:ae:
14:b4:ac:14:f1:f9:3c:16:e8:7d:d3:d1:87:7b:a6:
16:26:af:fe:46:16:a8:3c:5e:e2:4e:e7:7d:cd:89:
74:53:58:21:07:c8:5e:b6:34:e0:24:e9:7e:3d:a5:
d0:6b:d6:3c:a2:30:2e:2c:c7:24:b9:8b:50:99:44:
9d:fe:2c:d6:0e:a6:55:90:b9:20:ba:c6:8f:2b:a9:
36:64:29:45:73:42:c6:f6:bf:e6:73:08:c1:01:13:
b5:c6:1b:f7:b6:03:a1:17:05:6c:45:c7:4c:a3:b9:
e3:df:be:df:bb:db:2f:95:59:9d:ee:ee:5e:2f:d9:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AC:07:94:DE:C9:34:09:03:9C:31:A9:08:B5:2F:70:7A:28:44:C8
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/EawHlN7JNAkDnDGpCLUvcHooRMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.128.0/19
45.131.116.0/22
46.239.0.0/18
62.101.144.0/20
81.93.64.0/19
89.111.192.0/18
94.250.0.0/17
109.165.128.0/17
185.35.156.0/22
185.125.120.0/22
217.24.128.0/20
IPv6:
2a00:cb00::/32
Signature Algorithm: sha256WithRSAEncryption
0c:77:55:d2:4b:3e:3a:8f:30:84:a0:75:ff:03:51:32:6b:59:
cd:61:c4:6d:69:52:72:9b:51:e3:66:40:31:23:f6:53:b8:64:
5c:f1:79:75:68:18:c0:e6:9a:fb:5b:19:78:42:9e:01:20:f7:
57:17:1d:44:d9:ed:0f:f4:e5:ce:17:09:d8:18:2c:f2:8f:12:
6d:dc:fc:69:b9:c4:cc:27:1f:67:31:2d:f4:df:d5:89:bb:30:
79:99:25:d5:06:57:d6:15:fd:d9:60:59:fc:88:67:84:5a:58:
ab:8a:25:b4:0f:f4:a9:f4:fc:a3:b2:74:f6:b9:fe:46:93:a3:
e0:65:95:79:f5:34:5e:77:63:32:32:8e:cf:d6:df:a9:cb:02:
fb:ab:11:16:97:be:95:78:6e:13:7d:0e:6c:1b:3c:81:9e:0a:
18:98:4b:ed:8c:99:a1:b4:f9:2b:ab:e4:04:9f:e9:6d:9e:92:
a5:43:27:ec:18:e3:03:aa:5d:21:0a:02:8e:5e:bc:af:60:6f:
45:24:e9:0d:ea:4a:35:35:02:8e:6f:86:e8:04:1c:5e:d0:d1:
35:52:3a:ea:82:f0:4b:01:72:64:28:02:bc:4b:c0:2c:97:55:
14:21:63:d1:21:a2:98:b5:40:2f:93:31:1e:fd:73:42:9d:f1:
01:a1:ba:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:47:46 2026 by rpki-client