Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/E9gDSnYTxzEfk6QdTwv-ncSeVNk.roa
File: E9gDSnYTxzEfk6QdTwv-ncSeVNk.roa (raw, json)
Hash identifier: YcCBKJPqoejItOYgjOwKj+yWsRt8B+k0Z83otF9ejIs=
Subject key identifier: 13:D8:03:4A:76:13:C7:31:1F:93:A4:1D:4F:0B:FE:9D:C4:9E:54:D9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F90F26FA5DA619CCDAB8F5D6A0B2D9CC9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/E9gDSnYTxzEfk6QdTwv-ncSeVNk.roa
Signing time: Thu 23 Jul 2026 21:47:15 +0000
ROA not before: Thu 23 Jul 2026 21:47:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 78.154.108.0/24 maxlen: 24
82.109.11.0/24 maxlen: 24
82.109.242.0/24 maxlen: 24
82.110.98.0/24 maxlen: 24
85.189.4.0/24 maxlen: 24
195.72.168.0/24 maxlen: 24
212.212.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:f2:6f:a5:da:61:9c:cd:ab:8f:5d:6a:0b:2d:9c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 23 21:47:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13d8034a7613c7311f93a41d4f0bfe9dc49e54d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:0d:7f:67:fa:cf:8f:ac:8c:97:39:4f:0f:
ad:b4:95:b1:06:6f:bf:3d:4c:ed:52:a6:fb:33:71:
48:e3:34:84:85:49:e1:42:db:54:a0:68:41:3e:3a:
0b:62:b8:02:a4:53:82:95:ad:4e:09:82:83:49:83:
56:7a:d2:94:0a:f8:91:3d:c4:c1:3a:4e:81:d9:34:
bd:46:33:f4:20:b8:db:50:fb:eb:45:74:ad:39:01:
79:4c:f2:28:1b:cc:f9:4f:49:95:20:81:3a:0a:d7:
7e:7e:fc:9d:fd:e8:be:74:04:46:61:7a:66:d1:9c:
a9:da:5d:18:56:cf:c7:2b:c0:18:c8:ff:fa:b7:03:
94:1f:2a:d8:6f:1d:fd:12:4d:cd:a9:91:31:0d:af:
2c:b0:43:f9:76:87:fb:66:38:0e:8f:41:7c:a1:2c:
4f:6a:8f:ad:f8:2d:a9:c1:b2:1f:54:46:6e:cb:fb:
f6:5f:71:d5:c2:9c:44:d8:65:89:57:18:ed:8d:68:
fd:50:45:5f:60:65:f2:46:72:3a:4b:b9:4a:df:29:
e4:95:51:4f:c1:fc:17:b0:be:fa:09:bd:5b:02:05:
e8:05:46:f3:7a:e5:78:e8:90:ad:0f:26:b7:6d:5b:
10:b8:f5:37:23:42:7a:a8:9a:f2:01:56:4e:13:41:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D8:03:4A:76:13:C7:31:1F:93:A4:1D:4F:0B:FE:9D:C4:9E:54:D9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/E9gDSnYTxzEfk6QdTwv-ncSeVNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.108.0/24
82.109.11.0/24
82.109.242.0/24
82.110.98.0/24
85.189.4.0/24
195.72.168.0/24
212.212.25.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:20:b7:51:ed:c3:f9:e7:99:9f:64:d6:71:c4:86:2b:a0:d0:
32:41:cb:9d:76:78:66:0c:be:2d:d3:94:8e:38:4f:0d:0b:d6:
51:5c:22:ec:13:e3:fb:de:03:5e:72:0f:71:95:3f:ba:f3:0e:
43:30:2f:06:ee:22:08:3e:16:f5:6c:8c:9e:a9:9b:bb:81:9f:
37:59:2e:85:67:58:dc:66:fa:05:6a:ba:c5:7e:89:93:15:3a:
50:4b:c3:30:55:76:51:8d:7c:11:32:c4:41:ce:d4:a4:3a:1f:
e8:d3:9d:8a:54:f4:40:07:17:29:d9:3d:6c:3f:e1:53:a2:e6:
a5:32:e3:a7:64:f8:d6:f7:16:6e:b8:08:7e:7c:07:bc:8a:23:
95:52:17:e5:a4:64:99:0d:65:f6:c4:bd:07:22:2e:7f:8a:f8:
e1:3f:3f:55:79:a1:66:11:69:e8:4d:22:c1:a0:41:9f:64:72:
bf:a6:ad:88:57:60:2a:7f:ad:c1:fe:f2:0c:f3:ef:b5:22:7e:
8b:f4:89:8e:3b:fc:d9:02:1f:36:16:25:7b:94:6d:f0:65:8f:
38:16:9b:88:0e:48:97:be:af:58:1d:cc:eb:93:60:9e:9c:85:
bc:20:96:f3:c4:a0:97:72:bd:39:0d:fc:60:df:cd:a0:1f:a5:
af:bd:28:bd
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ+Q8m+l2mGczauPXWoLLZzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzIzMjE0NzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2Q4MDM0YTc2MTNjNzMxMWY5M2E0MWQ0ZjBiZmU5ZGM0OWU1NGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgANf2f6z4+sjJc5Tw+ttJWxBm+/
PUztUqb7M3FI4zSEhUnhQttUoGhBPjoLYrgCpFOCla1OCYKDSYNWetKUCviRPcTB
Ok6B2TS9RjP0ILjbUPvrRXStOQF5TPIoG8z5T0mVIIE6Ctd+fvyd/ei+dARGYXpm
0Zyp2l0YVs/HK8AYyP/6twOUHyrYbx39Ek3NqZExDa8ssEP5dof7ZjgOj0F8oSxP
ao+t+C2pwbIfVEZuy/v2X3HVwpxE2GWJVxjtjWj9UEVfYGXyRnI6S7lK3ynklVFP
wfwXsL76Cb1bAgXoBUbzeuV46JCtDya3bVsQuPU3I0J6qJryAVZOE0EenwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFBPYA0p2E8cxH5OkHU8L/p3EnlTZMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvRTlnRFNuWVR4ekVmazZRZFR3di1uY1NlVk5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQATppsAwQA
Um0LAwQAUm3yAwQAUm5iAwQAVb0EAwQAw0ioAwQA1NQZMA0GCSqGSIb3DQEBCwUA
A4IBAQC6ILdR7cP555mfZNZxxIYroNAyQcuddnhmDL4t05SOOE8NC9ZRXCLsE+P7
3gNecg9xlT+68w5DMC8G7iIIPhb1bIyeqZu7gZ83WS6FZ1jcZvoFarrFfomTFTpQ
S8MwVXZRjXwRMsRBztSkOh/o052KVPRABxcp2T1sP+FToualMuOnZPjW9xZuuAh+
fAe8iiOVUhflpGSZDWX2xL0HIi5/ivjhPz9VeaFmEWnoTSLBoEGfZHK/pq2IV2Aq
f63B/vIM8++1In6L9ImOO/zZAh82FiV7lG3wZY84FpuIDkiXvq9YHczrk2CenIW8
IJbzxKCXcr05Dfxg382gH6WvvSi9
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:09 2026 by rpki-client