Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/ESRoyyzD6nuIbg2v7a5fFcPEEtM.roa
File: ESRoyyzD6nuIbg2v7a5fFcPEEtM.roa (raw, json)
Hash identifier: 6CkIgU30ZTpBXP27tZUxeNY4xYkwYzV9C1Gfa7vFkz4=
Subject key identifier: 11:24:68:CB:2C:C3:EA:7B:88:6E:0D:AF:ED:AE:5F:15:C3:C4:12:D3
Certificate issuer: /CN=34e172f20bac5667ff85caff80b4536758e6da9a
Certificate serial: 019F2368A823CF4D26442219FE901A3619D0
Authority key identifier: 34:E1:72:F2:0B:AC:56:67:FF:85:CA:FF:80:B4:53:67:58:E6:DA:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/ESRoyyzD6nuIbg2v7a5fFcPEEtM.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61102
IP address blocks: 89.33.28.0/24 maxlen: 24
89.33.29.0/24 maxlen: 24
107.150.178.0/24 maxlen: 24
107.150.179.0/24 maxlen: 24
176.223.65.0/24 maxlen: 24
185.18.204.0/24 maxlen: 24
185.18.205.0/24 maxlen: 24
185.18.206.0/24 maxlen: 24
185.18.207.0/24 maxlen: 24
185.37.148.0/24 maxlen: 24
185.37.149.0/24 maxlen: 24
185.37.150.0/24 maxlen: 24
185.37.151.0/24 maxlen: 24
185.217.96.0/24 maxlen: 24
185.217.97.0/24 maxlen: 24
185.217.98.0/24 maxlen: 24
185.217.99.0/24 maxlen: 24
188.210.255.0/24 maxlen: 24
2a03:ff40:4ed1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a8:23:cf:4d:26:44:22:19:fe:90:1a:36:19:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e172f20bac5667ff85caff80b4536758e6da9a
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=112468cb2cc3ea7b886e0dafedae5f15c3c412d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1c:17:20:7a:62:eb:1a:75:62:69:c9:29:72:
ed:8a:7b:1c:10:b8:56:69:7e:0f:03:c9:77:e6:f7:
60:34:1b:95:ad:12:a4:97:e6:35:4b:8f:4b:f3:e2:
71:ef:a4:56:ae:6b:f6:60:70:50:18:a7:4c:95:ad:
d3:ae:26:85:b4:2a:a0:76:81:1e:71:11:62:56:77:
4a:8d:4f:4f:25:19:85:78:e3:2a:79:71:7b:7d:c6:
2d:48:21:84:52:28:65:f2:69:35:7c:d4:07:26:2b:
2d:fa:d8:ec:23:da:72:5a:e5:73:42:6b:55:fb:42:
20:c9:5b:9c:17:db:db:a1:2e:bb:df:7e:22:78:72:
3a:bd:af:0d:d3:7a:53:4d:48:58:3d:5f:4b:0e:ac:
a2:3e:8d:8e:27:10:77:0f:1f:6f:0c:18:f0:e4:4b:
29:5f:69:62:a9:13:4b:0d:e6:d0:0d:d0:af:32:9e:
b7:42:67:47:b6:41:44:66:ce:a9:f5:de:7f:c9:e5:
a3:31:ba:fb:8d:38:0b:9c:ab:24:63:8f:58:fd:0d:
47:d1:e8:61:ba:6b:02:f7:b8:b3:20:46:9e:a6:ac:
eb:80:f8:99:7d:ae:81:6e:a1:2c:86:9d:13:1e:e3:
2a:57:45:4a:2f:40:7c:d4:62:5a:4d:03:fe:61:a5:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:24:68:CB:2C:C3:EA:7B:88:6E:0D:AF:ED:AE:5F:15:C3:C4:12:D3
X509v3 Authority Key Identifier:
keyid:34:E1:72:F2:0B:AC:56:67:FF:85:CA:FF:80:B4:53:67:58:E6:DA:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/ESRoyyzD6nuIbg2v7a5fFcPEEtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.28.0/23
107.150.178.0/23
176.223.65.0/24
185.18.204.0/22
185.37.148.0/22
185.217.96.0/22
188.210.255.0/24
IPv6:
2a03:ff40:4ed1::/48
Signature Algorithm: sha256WithRSAEncryption
27:47:3e:a7:b5:03:45:cd:e8:62:77:35:84:0b:30:0e:4e:f6:
fd:94:9b:3a:43:44:db:f0:3d:e2:03:a3:23:a7:a0:dc:e3:73:
a1:54:23:74:c3:55:98:a7:b4:16:fe:53:d7:ad:89:7c:57:13:
d1:00:ae:64:ae:93:1d:89:44:ca:85:3c:96:b1:99:c6:5e:51:
2e:20:25:65:dd:63:61:fd:54:c5:ae:f0:75:24:ab:2c:e6:fc:
67:81:f4:2a:e2:dc:f9:2b:93:6c:b2:ae:7e:0b:08:b7:3b:b8:
c3:1d:c1:0f:5e:1a:ec:5a:2b:2e:46:4e:81:ca:c8:68:57:0a:
05:f3:c8:76:5c:b9:26:5c:e6:26:d2:b7:6e:82:62:bf:77:3a:
90:2d:f4:c8:51:43:6a:d2:ae:e9:49:57:cd:59:25:e6:2e:a5:
c6:6d:2c:f0:f1:6b:e0:e0:56:57:68:fe:c1:bf:87:78:bf:0e:
03:74:45:03:dc:a9:ec:c3:0e:f1:bd:6f:78:38:92:da:b5:79:
e7:39:64:d0:d5:c0:a7:b8:8a:6f:29:ba:4c:3f:a9:40:15:83:
b3:fd:70:e4:bb:fb:26:fa:45:d7:89:aa:ae:ee:94:ac:05:d7:
0d:06:cf:36:03:67:be:02:57:70:d6:59:35:95:a6:fc:f9:08:
bf:11:dc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:32 2026 by rpki-client