Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/1-E7nKdbSLj90sJYSF-rtPPWicJo.roa
File: 1-E7nKdbSLj90sJYSF-rtPPWicJo.roa (raw, json)
Hash identifier: OLXm33BZRZAegBXkAQ3qDZFLZUsJCzl2SnjPvzxon3E=
Subject key identifier: F8:4E:E7:29:D6:D2:2E:3F:74:B0:96:12:17:EA:ED:3C:F5:A2:70:9A
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 019DB5261B3DDEC5A4D7C80D72F21ACE8FD0
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/1-E7nKdbSLj90sJYSF-rtPPWicJo.roa
Signing time: Wed 22 Apr 2026 12:24:26 +0000
ROA not before: Wed 22 Apr 2026 12:24:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41678
IP address blocks: 89.185.128.0/21 maxlen: 21
89.185.129.0/24 maxlen: 24
89.185.136.0/21 maxlen: 21
89.185.143.0/24 maxlen: 24
89.185.144.0/20 maxlen: 20
89.185.154.0/24 maxlen: 24
89.185.157.0/24 maxlen: 24
194.46.0.0/19 maxlen: 19
194.46.96.0/20 maxlen: 22
194.46.112.0/21 maxlen: 22
194.46.112.0/22 maxlen: 22
194.46.132.0/22 maxlen: 22
194.46.152.0/22 maxlen: 22
194.46.160.0/24 maxlen: 24
194.46.161.0/24 maxlen: 24
194.46.164.0/22 maxlen: 22
194.46.168.0/21 maxlen: 22
194.46.176.0/20 maxlen: 22
212.108.64.0/20 maxlen: 20
212.108.77.0/24 maxlen: 24
212.108.92.0/22 maxlen: 22
212.108.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:26:1b:3d:de:c5:a4:d7:c8:0d:72:f2:1a:ce:8f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Apr 22 12:24:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f84ee729d6d22e3f74b0961217eaed3cf5a2709a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:2b:db:81:3d:f8:c4:62:bc:e0:f8:ad:54:
7d:e5:70:52:4e:63:09:96:3a:3a:c8:53:38:28:62:
61:4a:34:72:45:95:6e:8a:b1:cd:aa:3d:81:86:8c:
f0:32:45:4f:7e:fb:df:d3:6d:1d:5c:4e:b3:a3:67:
a6:b0:9a:a3:21:71:c8:fa:da:56:e7:e4:67:d7:a7:
bf:f2:80:db:d4:0b:b6:99:e7:3c:36:2f:68:a4:ba:
68:49:56:37:1a:56:af:94:b1:70:9b:dd:8e:6c:d3:
60:94:66:79:80:97:eb:2b:48:00:d7:92:b1:9e:73:
c7:6b:c4:78:fa:64:52:bb:fc:bd:a5:70:a5:05:21:
1b:df:7d:77:55:f8:57:f1:f9:99:2e:da:ab:91:8b:
04:05:cc:7f:87:9e:48:0a:3f:0c:73:62:0a:a6:be:
07:58:d2:09:09:40:fc:5c:5c:14:b2:cc:cc:ee:a0:
4a:ac:07:d5:9c:03:3f:4c:df:32:75:ac:19:15:eb:
78:06:3c:aa:99:65:f9:e9:c7:39:d5:05:7d:d3:f6:
e7:f8:3d:cd:01:16:d2:f8:45:ed:5b:9e:e2:86:ec:
bb:05:9a:a6:2b:65:8c:1b:8d:dc:b7:0c:5b:cf:17:
b3:98:a7:34:ad:bf:af:b4:8c:ce:b9:9f:e8:4b:17:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4E:E7:29:D6:D2:2E:3F:74:B0:96:12:17:EA:ED:3C:F5:A2:70:9A
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/1-E7nKdbSLj90sJYSF-rtPPWicJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.128.0/19
194.46.0.0/19
194.46.96.0-194.46.119.255
194.46.132.0/22
194.46.152.0/22
194.46.160.0/23
194.46.164.0-194.46.191.255
212.108.64.0/20
212.108.92.0/22
Signature Algorithm: sha256WithRSAEncryption
92:0a:a8:f7:be:c4:07:6b:77:85:86:6b:15:6b:98:67:54:92:
81:11:73:7c:d2:fd:40:46:f1:d2:54:fc:19:82:a1:f1:13:3a:
e2:cf:5a:6e:53:c8:0c:4f:a1:59:e2:37:c4:7a:13:e0:9f:d3:
44:b1:00:29:a6:84:c4:98:fd:54:53:40:55:e8:ae:67:4b:cf:
07:b3:ab:74:43:08:f4:59:35:96:92:74:3e:f6:e0:95:3a:10:
04:67:a8:41:e5:d2:20:91:b3:82:b7:ac:54:ab:74:be:87:81:
02:ea:dc:08:fb:a1:5e:d8:13:82:6e:ef:96:5c:ee:12:c3:c4:
ae:e1:d7:5f:12:33:7a:07:27:2d:7a:ec:a7:eb:21:f5:d9:0d:
98:68:a5:02:3d:0c:45:2a:1e:84:8a:24:27:40:26:11:23:91:
e7:8f:bf:9e:a8:e9:b6:80:5a:c9:f4:23:a8:c5:a1:a8:75:04:
f2:c7:1d:ad:de:34:a1:9d:4e:98:7c:21:73:1d:4f:2c:e4:b5:
dd:f5:62:d5:80:72:64:a3:f5:69:f8:cb:67:b8:00:8c:da:72:
42:06:2a:31:ac:73:e6:64:82:5b:49:23:73:1c:32:83:2a:64:
4b:6d:6d:e1:e2:af:cb:ff:47:ce:38:2f:01:38:19:de:45:6e:
22:2f:38:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:40 2026 by rpki-client