Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EwQzMZ44sae5Mh5yjKvT_0qt3as.roa
File: EwQzMZ44sae5Mh5yjKvT_0qt3as.roa (raw, json)
Hash identifier: /Hgzu5kbI21Hjm4z/yHsBMxyn+zjNCILU61fn6jDN4w=
Subject key identifier: 13:04:33:31:9E:38:B1:A7:B9:32:1E:72:8C:AB:D3:FF:4A:AD:DD:AB
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F89C239F91492A39D4DD51B1D15DC1375
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EwQzMZ44sae5Mh5yjKvT_0qt3as.roa
Signing time: Wed 22 Jul 2026 12:17:15 +0000
ROA not before: Wed 22 Jul 2026 12:17:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 77.107.83.0/24 maxlen: 24
79.99.147.0/24 maxlen: 24
81.168.64.0/24 maxlen: 24
82.153.36.0/24 maxlen: 24
212.38.80.0/24 maxlen: 24
213.130.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:c2:39:f9:14:92:a3:9d:4d:d5:1b:1d:15:dc:13:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 22 12:17:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=130433319e38b1a7b9321e728cabd3ff4aadddab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:57:bd:41:2f:09:56:dd:15:51:c2:42:16:
2b:b8:b2:4d:3c:7c:9c:85:90:3e:91:b7:99:9e:79:
90:58:bd:b4:2b:ae:2b:a2:96:2d:4c:4f:94:5b:dd:
af:c5:f2:5b:61:6b:c5:54:ac:92:19:36:c4:11:41:
ad:f1:c1:9d:e5:60:4a:19:f2:62:34:12:75:48:e0:
00:1f:7e:b5:48:2d:e0:00:db:99:54:8b:14:5d:91:
5e:e1:fc:55:f6:a0:91:71:4f:1c:a0:2a:e1:5c:14:
e7:56:14:5e:17:c2:31:38:4f:85:17:16:ad:5f:ce:
92:9e:8c:69:8c:ee:c0:af:8f:89:4c:81:7b:c0:a8:
29:67:e6:10:7b:18:f8:f0:08:23:d5:30:c8:d8:38:
06:6e:81:3c:7c:91:a9:27:45:2c:2c:5b:4a:21:36:
ee:97:c6:04:b4:9f:7d:de:77:72:75:d2:a7:28:d6:
bf:4f:f5:5e:97:2c:93:eb:1b:4c:1f:d7:e5:0e:94:
99:2e:47:c0:e8:f6:ee:cb:e3:60:b5:fa:d3:78:6f:
fa:b2:b3:7c:a2:43:9a:d9:e0:d6:d3:0f:4e:20:f9:
df:b8:bb:64:d0:0f:90:c9:a2:26:c2:7c:f3:56:db:
f2:e8:f7:87:67:7a:47:af:9b:b5:d7:0f:56:32:a0:
43:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:33:31:9E:38:B1:A7:B9:32:1E:72:8C:AB:D3:FF:4A:AD:DD:AB
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EwQzMZ44sae5Mh5yjKvT_0qt3as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.83.0/24
79.99.147.0/24
81.168.64.0/24
82.153.36.0/24
212.38.80.0/24
213.130.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:00:d4:27:1a:b7:6a:25:fb:d1:0d:b0:9a:c3:3f:ed:0a:df:
63:d6:8b:b0:1d:e1:94:49:2d:d3:f8:20:de:8f:de:13:d7:5a:
47:b1:48:d0:8a:10:14:91:2f:84:df:82:d7:f3:63:d1:65:36:
4b:a8:cb:97:19:e0:54:45:71:45:a4:94:b1:86:ed:3a:eb:c4:
62:6b:c1:67:33:3b:d2:46:5e:e1:c2:f4:b2:95:c9:23:5a:f4:
8a:12:26:b9:4f:e6:98:f8:8b:98:d0:08:da:6c:d3:0d:80:31:
64:5f:4d:97:dd:34:08:32:d4:a2:a5:e7:77:55:f8:cf:37:fd:
ed:35:e9:87:54:f6:fd:04:dc:dc:36:f0:55:ca:2b:0b:40:97:
e8:2c:ee:b8:45:55:79:73:a6:73:89:55:38:ee:f3:b1:97:08:
f0:ad:b8:1a:59:a7:4f:a1:0b:48:25:61:88:31:b9:f6:3d:9c:
b8:31:51:22:18:5e:3a:27:d1:2a:2b:8a:01:59:42:05:3d:50:
6b:cd:3c:6d:18:8a:ee:55:e4:34:53:ea:75:9f:2a:f6:7f:fc:
28:87:cd:76:b3:2b:9b:e9:74:e0:f3:d4:3f:1c:01:08:fe:22:
57:0c:ed:15:67:5c:a5:ab:a7:3a:94:b6:8c:39:fd:7b:d4:04:
4e:96:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:19 2026 by rpki-client