Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0EIGGyUH4IgjBTxy-AXLmHa345o.roa
File: 0EIGGyUH4IgjBTxy-AXLmHa345o.roa (raw, json)
Hash identifier: mntwucaD78skgoeu97tEQ/KK8hhVNy3tCEhmwju8poM=
Subject key identifier: D0:42:06:1B:25:07:E0:88:23:05:3C:72:F8:05:CB:98:76:B7:E3:9A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0C4218D33632A840BE3FD5B9F8BAF9979
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0EIGGyUH4IgjBTxy-AXLmHa345o.roa
Signing time: Mon 21 Sep 2026 13:22:08 +0000
ROA not before: Mon 21 Sep 2026 13:22:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 81.5.156.0/24 maxlen: 24
81.168.41.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
82.153.67.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
82.153.137.0/24 maxlen: 24
82.153.139.0/24 maxlen: 24
82.153.140.0/24 maxlen: 24
82.153.221.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
82.153.240.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
89.213.63.0/24 maxlen: 24
89.213.153.0/24 maxlen: 24
109.176.209.0/24 maxlen: 24
109.176.211.0/24 maxlen: 24
109.176.216.0/24 maxlen: 24
109.176.217.0/24 maxlen: 24
109.176.218.0/24 maxlen: 24
109.176.219.0/24 maxlen: 24
109.176.220.0/24 maxlen: 24
109.176.221.0/24 maxlen: 24
109.176.222.0/24 maxlen: 24
109.176.223.0/24 maxlen: 24
109.176.249.0/24 maxlen: 24
213.152.61.0/24 maxlen: 24
213.152.62.0/24 maxlen: 24
213.210.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:21:8d:33:63:2a:84:0b:e3:fd:5b:9f:8b:af:99:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 21 13:22:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d042061b2507e08823053c72f805cb9876b7e39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:33:bf:cb:cc:2c:6f:0d:b7:be:77:65:35:
2d:cb:13:c8:ea:b1:a3:be:19:e1:5c:ab:c4:02:a3:
97:e4:28:93:41:01:38:87:27:a6:50:96:c6:28:37:
37:f6:06:77:7b:ab:93:4f:dc:13:7a:ac:6f:1f:84:
a3:97:e6:32:5a:55:62:97:fc:7c:f9:93:cd:80:56:
ec:2d:0d:e1:c8:12:d2:ed:38:0a:c3:73:6a:d6:7b:
0a:af:bf:30:e7:b1:97:25:10:b9:02:03:44:73:d2:
2c:5f:22:a6:12:c9:e0:2b:ef:1d:4a:90:a1:e2:c7:
fa:e5:ed:9c:fa:9f:90:4f:e6:aa:2d:1d:4e:06:b7:
e4:a7:a0:f2:9b:42:f3:7b:f3:37:d4:36:2d:ec:3e:
09:45:36:34:fe:c3:18:60:56:98:f9:80:4d:c0:e4:
d4:3a:4d:da:15:c0:0a:09:62:fd:75:1e:b4:7c:25:
1c:bc:d8:08:20:bf:1e:93:00:b3:e0:76:04:73:0a:
03:20:5e:b1:bf:09:2c:38:c2:cc:48:70:76:55:6f:
42:a1:aa:12:61:7c:ad:06:ae:de:e7:41:73:a1:64:
09:85:df:3b:76:10:01:8e:70:56:20:da:fe:e0:a8:
83:6a:78:3e:92:9f:86:28:ea:ef:5e:b4:60:4e:c5:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:42:06:1B:25:07:E0:88:23:05:3C:72:F8:05:CB:98:76:B7:E3:9A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0EIGGyUH4IgjBTxy-AXLmHa345o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.41.0/24
81.168.123.0/24
82.152.111.0/24
82.153.67.0/24
82.153.73.0/24
82.153.78.0/24
82.153.137.0/24
82.153.139.0-82.153.140.255
82.153.221.0/24
82.153.223.0/24
82.153.240.0/24
82.153.250.0/24
89.213.63.0/24
89.213.153.0/24
109.176.209.0/24
109.176.211.0/24
109.176.216.0/21
109.176.249.0/24
213.152.61.0-213.152.62.255
213.210.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:2c:b4:79:02:d2:0b:d0:5e:0e:93:98:ce:1d:b7:d5:9c:09:
46:3f:05:81:cc:4a:16:50:af:a0:cb:18:d8:27:a8:4c:ec:fc:
f0:dc:0f:b2:ed:4b:1c:b1:75:e5:57:76:db:98:85:88:6b:9c:
a9:3e:7a:df:84:44:26:15:bd:71:6d:49:29:7e:40:50:56:8c:
36:62:7d:fd:42:92:8f:e4:f5:c0:c6:39:9e:af:2c:5e:14:f7:
a7:c3:e4:5f:f2:8d:64:2f:cb:e5:26:aa:96:c0:3a:fc:1d:45:
08:bc:26:f8:cd:c0:99:5a:a5:55:3b:d1:49:78:54:56:8b:dc:
ac:14:dd:d3:b6:60:94:7b:fa:82:e1:7d:1d:82:0b:11:d4:ad:
93:a8:93:be:02:5f:11:e1:7c:83:fd:89:3c:d0:f5:27:d6:52:
82:13:ca:3d:f4:93:96:f0:83:d5:69:40:f1:75:af:37:9a:83:
ea:d1:ac:f9:f4:05:3a:41:be:62:b4:2e:1d:7c:14:06:ac:26:
d2:a6:32:e6:3c:db:be:be:73:9e:20:30:15:6a:be:73:c2:21:
a7:1f:a5:b2:38:72:84:d9:1d:40:68:30:6b:ac:9f:82:82:cf:
3d:9b:7a:2f:92:3d:cd:b0:5c:21:e7:fc:3c:de:e8:fa:c9:87:
5f:ce:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:48:30 2026 by rpki-client