Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/E4sPSePQU0Utg0rJy2Bu8An_0ws.roa
File: E4sPSePQU0Utg0rJy2Bu8An_0ws.roa (raw, json)
Hash identifier: lddKB3Pjbr9HauWjyZqgv8uF8Jy8PbuIeHF9FT0DhEQ=
Subject key identifier: 13:8B:0F:49:E3:D0:53:45:2D:83:4A:C9:CB:60:6E:F0:09:FF:D3:0B
Certificate issuer: /CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Certificate serial: 019F5B781487157A854C07AC8E541B43D3AB
Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/E4sPSePQU0Utg0rJy2Bu8An_0ws.roa
Signing time: Mon 13 Jul 2026 12:33:43 +0000
ROA not before: Mon 13 Jul 2026 12:33:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30815
IP address blocks: 88.209.128.0/22 maxlen: 22
88.209.128.0/24 maxlen: 24
88.209.129.0/24 maxlen: 24
88.209.130.0/24 maxlen: 24
88.209.132.0/22 maxlen: 22
88.209.132.0/24 maxlen: 24
88.209.133.0/24 maxlen: 24
88.209.135.0/24 maxlen: 24
88.209.136.0/24 maxlen: 24
88.209.137.0/24 maxlen: 24
88.209.138.0/24 maxlen: 24
88.209.139.0/24 maxlen: 24
88.209.140.0/23 maxlen: 23
88.209.140.0/24 maxlen: 24
88.209.142.0/23 maxlen: 23
88.209.142.0/24 maxlen: 24
88.209.160.0/21 maxlen: 21
88.209.160.0/22 maxlen: 22
88.209.160.0/24 maxlen: 24
88.209.161.0/24 maxlen: 24
88.209.162.0/24 maxlen: 24
88.209.163.0/24 maxlen: 24
88.209.164.0/22 maxlen: 22
88.209.164.0/23 maxlen: 23
88.209.164.0/24 maxlen: 24
88.209.165.0/24 maxlen: 24
88.209.166.0/24 maxlen: 24
88.209.167.0/24 maxlen: 24
88.209.190.0/24 maxlen: 24
88.209.191.0/24 maxlen: 24
93.189.96.0/21 maxlen: 21
93.189.96.0/23 maxlen: 23
93.189.96.0/24 maxlen: 24
93.189.97.0/24 maxlen: 24
93.189.98.0/23 maxlen: 23
93.189.98.0/24 maxlen: 24
93.189.99.0/24 maxlen: 24
93.189.100.0/23 maxlen: 23
93.189.100.0/24 maxlen: 24
93.189.101.0/24 maxlen: 24
93.189.102.0/23 maxlen: 23
93.189.102.0/24 maxlen: 24
93.189.103.0/24 maxlen: 24
185.63.232.0/22 maxlen: 22
185.63.232.0/23 maxlen: 23
185.63.232.0/24 maxlen: 24
185.63.233.0/24 maxlen: 24
185.63.234.0/24 maxlen: 24
185.63.235.0/24 maxlen: 24
2a03:11e0::/32 maxlen: 32
2a03:11e0::/47 maxlen: 47
2a03:11e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:78:14:87:15:7a:85:4c:07:ac:8e:54:1b:43:d3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Validity
Not Before: Jul 13 12:33:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=138b0f49e3d053452d834ac9cb606ef009ffd30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:ae:bb:9d:2c:97:90:1a:65:87:1a:83:87:
d9:a1:9a:ca:38:0d:64:63:ad:3e:df:d2:8e:7c:04:
84:ff:fd:14:94:da:af:59:09:bb:e9:ff:14:5f:30:
a7:fe:cf:6b:19:9a:5c:46:6a:01:7e:cf:e7:9c:86:
0a:8a:12:2a:6e:b6:1a:3c:d8:04:2a:b0:12:41:f7:
d0:6a:a3:cc:38:22:80:95:99:fe:27:5b:4b:8f:ab:
d5:ae:57:bb:ee:ed:60:e1:e6:c5:ee:7e:39:f8:2e:
bf:40:b3:8f:86:ed:00:c4:57:62:9b:c5:36:23:af:
66:98:df:31:98:2f:e7:77:27:e5:b7:46:1e:fd:13:
cb:62:c3:9f:c7:86:87:e5:25:f6:1a:98:b7:61:69:
ff:ec:68:51:cc:c3:59:21:6e:0d:ff:0f:74:1c:42:
71:1e:8c:f7:c4:40:6d:27:08:ab:17:ae:82:95:ea:
19:27:fc:d9:45:79:73:fe:c7:39:9d:99:19:97:64:
03:0e:8e:ca:4a:95:fd:41:33:aa:24:dd:ef:ad:d4:
7b:fd:e3:97:a0:30:8f:85:5f:1e:81:58:a6:aa:7f:
c7:ff:ec:55:67:c5:e4:8f:71:28:a6:a0:11:52:19:
4d:6d:9d:fd:e3:5d:d7:42:18:c3:9c:2c:78:d4:f4:
43:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8B:0F:49:E3:D0:53:45:2D:83:4A:C9:CB:60:6E:F0:09:FF:D3:0B
X509v3 Authority Key Identifier:
keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/E4sPSePQU0Utg0rJy2Bu8An_0ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.128.0/20
88.209.160.0/21
88.209.190.0/23
93.189.96.0/21
185.63.232.0/22
IPv6:
2a03:11e0::/32
Signature Algorithm: sha256WithRSAEncryption
49:60:da:f4:1a:28:d1:3f:62:98:43:6c:3b:f0:be:6c:3b:18:
84:0c:6e:f7:8f:90:71:e7:6a:9b:e4:c5:d4:ba:8c:01:70:f0:
50:ce:c1:b1:39:dc:70:23:4c:e1:3c:9b:33:2d:e3:39:04:85:
fd:e3:b9:76:98:4c:eb:d8:8d:df:0c:7b:9b:1d:e7:7d:22:17:
52:9f:e3:7b:1f:14:21:86:e0:ee:05:db:0c:e5:c0:b8:3f:63:
41:c4:f8:b2:17:41:5a:45:f9:e5:43:34:da:74:24:12:ac:a4:
00:a8:7f:c2:5a:33:bd:b4:d4:26:1c:83:6f:25:66:21:95:9d:
58:ea:a8:f7:15:ba:10:2a:77:c2:ca:69:48:d9:30:48:f1:51:
65:11:e4:54:49:16:81:3b:1f:ed:35:c3:53:dd:a5:ca:30:b4:
78:cf:e5:5c:8a:e5:bf:d8:1f:f1:85:fd:f1:18:1c:1c:4a:12:
4c:f2:c0:d5:26:05:e5:58:09:84:88:07:7f:80:2e:3a:14:8b:
a7:00:30:56:73:c8:51:a5:af:8e:f4:19:92:67:65:4d:ea:61:
9d:e0:20:4f:67:57:00:34:23:c8:63:21:81:cd:ac:87:67:43:
a1:f7:32:b0:b9:82:ac:4d:3b:3a:08:57:fe:b1:a8:26:c0:f8:
0d:d5:b2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:15 2026 by rpki-client