Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/eVgXM-V6DHizugjSVxf56PFiwWg.roa
File: eVgXM-V6DHizugjSVxf56PFiwWg.roa (raw, json)
Hash identifier: RaGLMgx4ui2XkU+deBgPdh63KsYlQO2GBlNK0aSQKW4=
Subject key identifier: 79:58:17:33:E5:7A:0C:78:B3:BA:08:D2:57:17:F9:E8:F1:62:C1:68
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019DE3E2904E0359528CAA99057BC8A44D42
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/eVgXM-V6DHizugjSVxf56PFiwWg.roa
Signing time: Fri 01 May 2026 14:12:49 +0000
ROA not before: Fri 01 May 2026 14:12:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 178.239.146.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
178.239.157.0/24 maxlen: 24
185.124.173.0/24 maxlen: 24
185.212.50.0/24 maxlen: 24
185.215.228.0/24 maxlen: 24
185.215.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e3:e2:90:4e:03:59:52:8c:aa:99:05:7b:c8:a4:4d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 1 14:12:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79581733e57a0c78b3ba08d25717f9e8f162c168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:03:5a:ec:19:8d:91:87:d7:46:ce:49:4e:
e9:f2:76:53:58:3f:5f:28:1b:00:7e:20:7d:64:da:
40:9a:b6:44:e1:01:62:70:63:47:84:3c:b9:07:bb:
3f:39:81:2d:cf:2f:48:5e:c7:7c:53:43:c4:77:29:
c9:7a:67:14:cf:cb:a7:29:e9:bc:c2:5a:06:fc:72:
73:33:ca:a5:11:d5:f9:64:fe:a4:54:d0:2d:84:d1:
f4:c1:c5:ff:a2:aa:14:c8:0b:00:d4:1b:7e:ad:38:
ed:8d:79:04:6f:81:f1:ba:98:4e:b9:f8:08:1b:1d:
7c:cb:50:3e:63:7a:07:5a:69:ea:10:cc:70:21:b9:
49:cf:c1:88:0b:c4:bd:af:ea:62:98:ad:29:c7:df:
1d:65:a2:e9:d0:5d:eb:28:c8:1b:99:1f:76:54:b8:
67:aa:5d:9a:3c:a3:fd:4f:86:a8:ef:df:e7:a3:f4:
21:f9:03:57:f0:c7:35:0e:01:7a:46:43:97:cc:d0:
ab:ec:fa:aa:57:62:53:b0:73:63:6b:29:ab:5f:1c:
3e:87:99:f8:4a:aa:da:48:1e:92:3f:93:32:55:87:
ee:db:0b:7c:d2:9d:94:41:42:df:b9:86:db:7c:d3:
8c:87:c1:21:88:61:a5:b2:11:88:c2:03:69:77:cf:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:17:33:E5:7A:0C:78:B3:BA:08:D2:57:17:F9:E8:F1:62:C1:68
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/eVgXM-V6DHizugjSVxf56PFiwWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.146.0/24
178.239.150.0/24
178.239.157.0/24
185.124.173.0/24
185.212.50.0/24
185.215.228.0/24
185.215.230.0/24
Signature Algorithm: sha256WithRSAEncryption
46:78:e4:61:b5:3d:78:77:4d:af:8b:69:71:ec:53:1e:5b:ee:
db:4b:93:9a:a7:35:e4:42:cf:6e:be:f2:f5:b9:60:1a:ba:f3:
7f:ad:2b:cb:46:39:e6:f4:7d:42:c4:57:08:2c:b3:24:4b:d4:
b3:d1:47:67:2a:74:c4:8b:9e:d9:d1:1b:b7:6c:ac:41:32:f5:
6c:b9:a8:c7:0d:d2:11:e2:4d:1c:7c:6c:8a:94:c9:5f:3c:1c:
f1:76:56:76:0d:e0:f2:34:5b:80:e1:45:d2:20:69:0a:07:e4:
d5:52:2c:74:ad:25:8f:76:09:47:8f:b8:05:6f:e5:8f:25:c8:
7f:e3:ac:d1:2a:6f:89:0d:80:01:01:b7:e5:80:c1:94:f8:86:
bd:3c:91:a4:80:7e:63:c7:fc:b7:f0:e8:a1:83:79:94:d3:68:
f8:24:5c:1e:be:62:6c:89:e2:04:f3:7c:47:92:d6:f8:8a:1f:
81:bd:da:f6:35:30:b1:6b:b7:6f:70:f5:8f:43:38:c3:c7:51:
3c:d9:2b:f4:c3:7d:e0:0a:e8:2d:f0:9a:1b:54:97:9a:3a:6f:
11:2b:f4:ed:b0:9a:6c:84:23:9d:2d:e4:b6:52:f3:9a:60:f1:
f3:d7:a3:9c:90:1a:88:0c:79:0d:9d:14:62:f3:c0:d7:3d:92:
50:0f:a2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:52 2026 by rpki-client