Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/e5ECE1RgIH1_tNwoNA7WBLrErgk.roa
File: e5ECE1RgIH1_tNwoNA7WBLrErgk.roa (raw, json)
Hash identifier: YkBX43vtYMPV17x/YHA+YGWAAvLIc2O3OMYxK/YMeuw=
Subject key identifier: 7B:91:02:13:54:60:20:7D:7F:B4:DC:28:34:0E:D6:04:BA:C4:AE:09
Certificate issuer: /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial: 019F23683AA18C43BE82D6054C8B917F473C
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/e5ECE1RgIH1_tNwoNA7WBLrErgk.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28907
IP address blocks: 5.149.120.0/21 maxlen: 21
5.149.124.0/22 maxlen: 24
77.87.192.0/21 maxlen: 21
78.27.192.0/19 maxlen: 24
89.184.64.0/19 maxlen: 24
89.184.64.0/22 maxlen: 24
89.184.65.0/24 maxlen: 24
89.184.66.0/23 maxlen: 23
89.184.72.0/21 maxlen: 21
89.184.80.0/21 maxlen: 24
89.184.88.0/21 maxlen: 21
193.178.144.0/23 maxlen: 23
193.178.146.0/23 maxlen: 23
195.39.196.0/23 maxlen: 23
195.39.196.0/24 maxlen: 24
195.39.197.0/24 maxlen: 24
2a02:2278::/32 maxlen: 32
2a02:2278::/40 maxlen: 56
2a02:2278:100::/44 maxlen: 56
2a02:2278:200::/40 maxlen: 56
2a02:2278:204::/48 maxlen: 48
2a02:2278:208::/48 maxlen: 48
2a02:2278:220::/48 maxlen: 48
2a02:2278:221::/48 maxlen: 48
2a02:2278:234::/48 maxlen: 48
2a02:2278:235::/48 maxlen: 48
2a02:2278:236::/48 maxlen: 48
2a02:2278:237::/48 maxlen: 48
2a02:2278:800::/40 maxlen: 56
2a02:2278:7000::/40 maxlen: 56
2a02:2278:ff00::/40 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3a:a1:8c:43:be:82:d6:05:4c:8b:91:7f:47:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ffc723d157934043134ceed03424a942859d83
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b9102135460207d7fb4dc28340ed604bac4ae09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:1c:43:d2:93:d1:4e:79:cf:ee:77:ac:e2:
d3:24:8c:02:83:b3:47:f8:cf:5a:66:42:03:c8:08:
b2:fe:d6:63:b0:de:c0:19:ae:01:13:59:4b:d7:0e:
b2:1e:f7:74:91:5b:61:4e:8e:b2:3f:be:8b:81:a5:
1c:cb:7b:94:45:81:b4:1c:d9:ca:30:09:8d:66:8b:
c6:ee:5a:2b:e4:ee:58:ca:bc:55:15:da:bc:c5:e0:
b7:f5:49:07:4a:86:d6:b3:7c:d1:6e:41:37:15:8e:
cd:15:37:ad:80:39:38:18:87:c1:9a:1a:ff:22:d8:
51:19:78:60:8b:28:ef:f4:6d:85:5b:77:96:de:aa:
d7:24:3a:27:03:6a:40:a9:61:c9:0e:41:41:d4:08:
f2:8a:97:04:d1:82:13:61:ff:6d:4d:b9:af:2f:4e:
95:e7:1f:78:e1:be:c7:82:c7:72:c8:da:37:df:cd:
d1:c2:86:4e:1f:52:63:2a:45:ce:07:09:83:11:e3:
57:fe:93:a5:52:44:0b:82:69:65:ec:b1:f1:5b:30:
9a:21:51:77:c6:da:1c:2e:41:b2:d5:b8:a3:22:33:
de:ea:ea:c2:63:67:72:b7:3f:98:39:dc:54:2e:55:
da:cb:7f:1b:78:69:11:34:40:90:e1:a1:4d:bf:b5:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:91:02:13:54:60:20:7D:7F:B4:DC:28:34:0E:D6:04:BA:C4:AE:09
X509v3 Authority Key Identifier:
keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/e5ECE1RgIH1_tNwoNA7WBLrErgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.120.0/21
77.87.192.0/21
78.27.192.0/19
89.184.64.0/19
193.178.144.0/22
195.39.196.0/23
IPv6:
2a02:2278::/32
Signature Algorithm: sha256WithRSAEncryption
16:6b:bc:dc:a2:e9:ff:29:89:46:c4:fd:c5:5a:89:6e:df:43:
99:f8:27:45:0a:b7:ac:fe:1b:af:08:e2:df:27:1d:49:aa:89:
01:9f:c8:c6:21:61:79:70:d0:a4:ec:50:66:0e:ce:11:1d:6f:
33:c5:e2:5b:81:76:78:0d:e3:d4:9a:ac:5c:13:5a:d6:c8:e3:
31:f8:0f:38:fe:5c:69:4c:b9:7f:74:3d:ae:41:c3:23:47:7a:
72:a7:89:fa:19:06:ed:7e:b9:ef:3b:c8:d0:61:8b:45:d2:51:
0c:11:ca:ec:b5:c1:22:7b:70:68:d9:62:cb:d7:a4:d1:87:8f:
c9:ed:67:57:8b:e6:12:d2:f1:b5:3e:bb:3c:22:c8:38:2c:99:
e6:21:4e:c7:8d:c5:65:e2:14:79:93:a7:1d:da:fc:40:5c:e9:
7a:b3:0b:a1:7b:24:b1:91:9b:a3:f1:77:82:1d:81:ba:c8:8e:
f5:bb:1b:7a:cf:01:d4:cc:f7:d7:ea:ef:ad:2a:e2:c4:ea:66:
03:be:c7:bc:ca:c3:99:db:c2:55:01:91:88:4c:56:9a:c1:ec:
74:00:57:1f:6c:10:70:0a:a1:88:c3:8d:7c:21:be:64:f9:73:
5c:9f:8b:3f:22:d4:06:69:c4:dc:c6:81:10:3e:71:3e:83:5f:
43:24:d0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:21 2026 by rpki-client