Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/eEhMeiaypyt_S7BVopD2YgmSnOw.roa
File: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (raw, json)
Hash identifier: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=
Subject key identifier: 78:48:4C:7A:26:B2:A7:2B:7F:4B:B0:55:A2:90:F6:62:09:92:9C:EC
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019CD844B837A325965A6FEF48B39709892B
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/eEhMeiaypyt_S7BVopD2YgmSnOw.roa
Signing time: Tue 10 Mar 2026 15:01:48 +0000
ROA not before: Tue 10 Mar 2026 15:01:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64249
IP address blocks: 5.182.199.0/24 maxlen: 24
31.132.54.0/24 maxlen: 24
45.67.142.0/24 maxlen: 24
45.67.143.0/24 maxlen: 24
45.67.144.0/24 maxlen: 24
63.246.128.0/24 maxlen: 24
63.246.156.0/24 maxlen: 24
63.246.157.0/24 maxlen: 24
79.98.181.0/24 maxlen: 24
79.98.182.0/24 maxlen: 24
92.249.28.0/24 maxlen: 24
94.154.168.0/23 maxlen: 23
94.154.176.0/24 maxlen: 24
94.154.179.0/24 maxlen: 24
193.148.94.0/24 maxlen: 24
2a0c:3ac1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:44:b8:37:a3:25:96:5a:6f:ef:48:b3:97:09:89:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Mar 10 15:01:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78484c7a26b2a72b7f4bb055a290f66209929cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:7e:aa:d8:7f:97:be:28:59:b2:8e:e7:1b:
eb:b2:8e:7a:aa:bd:90:f6:42:c8:cf:c2:77:33:85:
eb:80:4b:c7:5b:88:99:fd:13:9d:8f:e7:7d:54:58:
9d:bc:c9:53:c1:5c:ac:8f:87:a4:f0:23:cd:7b:60:
ff:5e:fd:de:7e:97:74:1f:f0:d5:56:ec:56:69:bc:
35:07:d7:d6:90:cc:08:dd:b1:57:d2:d7:6c:4d:6e:
7e:68:77:41:87:58:00:23:7c:15:23:4f:81:3e:ac:
2b:bf:8d:85:4f:eb:be:5a:7d:23:7e:3e:e0:28:a9:
a3:fb:5c:d3:52:70:24:d8:71:5d:32:cf:33:9b:b7:
98:fc:90:b4:57:d3:42:6f:0c:61:84:b7:39:b4:6e:
8e:fd:75:99:60:96:52:67:b0:79:07:7d:7a:51:ab:
00:f8:ed:70:0c:8e:25:ae:c0:01:de:d9:26:cf:2f:
fb:e9:f8:1b:2d:4e:28:72:87:50:48:6c:67:14:ea:
04:6e:0b:63:e3:82:34:fd:a2:c0:ad:29:95:c2:11:
06:1d:a0:16:47:46:ba:15:93:96:3f:58:a1:47:a3:
0e:19:6d:7a:bf:21:80:e3:32:d0:6c:74:55:dd:61:
08:4a:05:1e:d4:1e:e4:f9:01:12:ca:3d:10:1f:50:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:48:4C:7A:26:B2:A7:2B:7F:4B:B0:55:A2:90:F6:62:09:92:9C:EC
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/eEhMeiaypyt_S7BVopD2YgmSnOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.199.0/24
31.132.54.0/24
45.67.142.0-45.67.144.255
63.246.128.0/24
63.246.156.0/23
79.98.181.0-79.98.182.255
92.249.28.0/24
94.154.168.0/23
94.154.176.0/24
94.154.179.0/24
193.148.94.0/24
IPv6:
2a0c:3ac1::/32
Signature Algorithm: sha256WithRSAEncryption
0f:58:88:37:c7:e7:a1:52:cd:42:e7:83:08:14:59:1b:fd:7f:
63:e7:1d:2a:82:72:47:b1:15:c1:a2:8b:56:44:c1:ae:c0:69:
5c:50:41:f4:18:00:7a:fa:71:06:35:68:c5:38:23:e5:01:c8:
51:1c:c4:2b:0e:b7:41:f8:31:86:43:4f:d2:fd:2a:6b:c2:6a:
85:ed:13:c1:6d:63:d8:dc:1b:27:a3:6b:76:c4:12:b8:75:72:
1e:8b:d5:82:3f:85:93:6c:66:cf:d7:70:d7:35:7b:12:80:21:
a0:78:d9:8a:f3:d1:e9:30:11:e8:58:28:8c:7b:06:9b:2a:34:
c6:00:47:f5:99:d0:6f:f4:4e:ee:c0:4a:ae:eb:6e:5d:fd:94:
bc:2c:47:85:e1:86:73:d7:4e:c7:dd:04:c4:c7:29:aa:d3:2e:
c0:7e:e4:3a:39:59:da:17:1c:7b:62:eb:1b:42:5a:6d:2f:05:
d1:13:72:39:9e:90:65:28:8e:7b:80:ee:7f:13:87:07:f4:78:
5c:b1:20:48:5c:7f:53:0d:14:7b:d6:df:73:65:95:94:d8:63:
a2:42:d3:ca:b2:c6:98:aa:a9:1e:47:74:a8:5d:39:73:61:59:
2a:75:16:9e:31:78:10:59:3b:3e:ff:fa:24:29:9d:f9:b2:7c:
07:b6:a5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:44:59 2026 by rpki-client