Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/EHRfsqdBqIv-_jr_ZiggJSyGQh8.roa
File: EHRfsqdBqIv-_jr_ZiggJSyGQh8.roa (raw, json)
Hash identifier: GuBt3vwa11J5qRXuLm85netCILaHs5EboKmysMN31gs=
Subject key identifier: 10:74:5F:B2:A7:41:A8:8B:FE:FE:3A:FF:66:28:20:25:2C:86:42:1F
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019F74A4069733431175103707B26A1488AB
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/EHRfsqdBqIv-_jr_ZiggJSyGQh8.roa
Signing time: Sat 18 Jul 2026 09:52:14 +0000
ROA not before: Sat 18 Jul 2026 09:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 77.247.194.0/24 maxlen: 24
91.132.248.0/22 maxlen: 24
91.197.36.0/22 maxlen: 24
91.238.62.0/24 maxlen: 24
109.196.168.0/22 maxlen: 24
185.5.130.0/24 maxlen: 24
185.16.251.0/24 maxlen: 24
185.84.225.0/24 maxlen: 24
185.94.30.0/24 maxlen: 24
185.249.0.0/22 maxlen: 24
192.144.24.0/22 maxlen: 24
193.39.88.0/22 maxlen: 24
193.228.12.0/22 maxlen: 24
194.32.82.0/24 maxlen: 24
194.48.255.0/24 maxlen: 24
194.76.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:a4:06:97:33:43:11:75:10:37:07:b2:6a:14:88:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jul 18 09:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10745fb2a741a88bfefe3aff662820252c86421f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2b:d3:f9:6d:90:9d:6f:f6:61:c1:f1:ea:00:
b4:b4:42:54:dc:46:f2:fa:2b:f4:e8:27:79:5e:05:
31:a6:7f:6b:ca:27:12:a1:96:b7:3b:d0:7f:83:24:
3e:cd:99:0c:c8:c4:76:74:d6:a9:2f:51:46:28:cb:
22:c7:6e:33:e4:9a:a2:4a:69:46:83:a3:27:79:99:
a2:94:2e:23:30:5e:84:8a:58:a1:94:dc:86:81:b1:
3c:6e:0c:f0:ec:e0:ec:61:e9:bf:85:98:27:4f:1e:
3b:ea:f8:26:68:30:73:57:16:b4:f9:51:70:87:ab:
46:93:ac:1a:96:2a:3a:b7:63:a6:af:f8:31:80:71:
0e:12:92:b1:bf:a4:3f:5b:68:db:1c:3c:a2:29:81:
87:bf:eb:a1:d0:4e:3d:6e:99:08:93:5a:0f:49:8c:
0f:a2:26:4f:b2:13:5b:6b:46:00:83:22:2b:39:78:
a2:47:ed:13:ba:9f:63:6c:0a:c4:ce:ff:d7:c8:38:
e6:64:8e:da:87:ff:33:14:82:75:bc:5b:a0:ee:e8:
d3:69:1b:95:6a:4a:7a:7f:60:ea:c9:8a:e9:ea:12:
80:d1:ef:ae:c5:cb:b5:94:62:e3:a8:86:82:8a:40:
e1:36:eb:41:ed:48:f6:5a:8a:1c:dc:09:52:0b:f2:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:5F:B2:A7:41:A8:8B:FE:FE:3A:FF:66:28:20:25:2C:86:42:1F
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/EHRfsqdBqIv-_jr_ZiggJSyGQh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.194.0/24
91.132.248.0/22
91.197.36.0/22
91.238.62.0/24
109.196.168.0/22
185.5.130.0/24
185.16.251.0/24
185.84.225.0/24
185.94.30.0/24
185.249.0.0/22
192.144.24.0/22
193.39.88.0/22
193.228.12.0/22
194.32.82.0/24
194.48.255.0/24
194.76.32.0/22
Signature Algorithm: sha256WithRSAEncryption
45:97:3d:9c:c3:dc:58:8e:96:5c:3f:c7:41:46:0b:de:66:81:
1e:2c:38:c2:5c:d6:51:78:1f:aa:47:5d:c4:86:16:55:85:e5:
4a:46:0c:bf:78:e2:9a:65:37:5c:7b:38:8f:35:16:11:3b:1b:
aa:8d:c5:54:80:74:d8:be:2a:9a:62:0e:c5:4d:d8:4b:59:a2:
f5:fe:7a:3a:35:4f:32:41:18:88:ab:f5:52:c7:82:e6:d1:ae:
d5:34:9c:71:4c:99:7d:b4:1b:88:cf:0f:42:2e:4b:73:3a:84:
9f:23:f7:b3:b6:3d:31:8c:af:56:68:f8:6c:05:1d:28:46:12:
9c:af:4e:3c:8b:8d:07:eb:ef:bd:ad:8a:d8:c2:d9:8a:17:b8:
81:37:01:aa:b7:f9:3f:ed:25:43:08:e8:7f:5d:4b:32:e0:41:
a5:d2:76:4d:4f:0b:6d:96:41:a5:d5:27:b6:a0:4e:f4:d8:a5:
c1:97:09:e8:57:85:8a:83:ed:fb:e6:b8:65:b4:76:1a:57:2c:
7d:7d:8c:41:49:f6:02:de:c5:11:62:29:1e:9f:65:d4:c1:b6:
f7:12:14:57:ff:d4:91:71:00:c3:0a:c8:27:05:e5:7d:fa:4a:
a6:ce:4b:48:47:ad:aa:e8:4f:fb:97:f5:aa:44:eb:59:9a:b3:
35:ac:d9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:35 2026 by rpki-client