Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/dEvu91UmCs0KOahRTi9ldOs_snU.roa
File: dEvu91UmCs0KOahRTi9ldOs_snU.roa (raw, json)
Hash identifier: 01+Ykcd+Kg1UdyAjLCxw5OYxXPvuKRq7ssrgwvHhlWc=
Subject key identifier: 74:4B:EE:F7:55:26:0A:CD:0A:39:A8:51:4E:2F:65:74:EB:3F:B2:75
Certificate issuer: /CN=a08259a41d9c90c871a4a4081eeac98e921c9c96
Certificate serial: 019F236913A3142D8A53C4FA09F441DA8F79
Authority key identifier: A0:82:59:A4:1D:9C:90:C8:71:A4:A4:08:1E:EA:C9:8E:92:1C:9C:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/dEvu91UmCs0KOahRTi9ldOs_snU.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33942
IP address blocks: 82.213.64.0/23 maxlen: 23
82.213.67.0/24 maxlen: 24
82.213.68.0/23 maxlen: 23
82.213.72.0/22 maxlen: 22
82.213.76.0/22 maxlen: 22
82.213.84.0/22 maxlen: 22
82.213.102.0/24 maxlen: 24
82.213.103.0/24 maxlen: 24
82.213.104.0/21 maxlen: 21
83.139.192.0/23 maxlen: 23
83.139.195.0/24 maxlen: 24
83.139.196.0/22 maxlen: 22
83.139.197.0/24 maxlen: 24
83.139.201.0/24 maxlen: 24
83.139.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:13:a3:14:2d:8a:53:c4:fa:09:f4:41:da:8f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08259a41d9c90c871a4a4081eeac98e921c9c96
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=744beef755260acd0a39a8514e2f6574eb3fb275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:8e:78:a4:23:1b:5e:a1:f9:6f:0c:8e:a9:
e7:c1:e3:34:e9:6a:0e:2b:10:56:a2:17:8c:af:58:
bf:a2:3b:30:e4:4f:c3:91:0a:ee:d9:1f:fc:6a:94:
bf:0e:34:d7:ea:88:75:47:41:ad:9a:29:19:aa:31:
7e:ce:10:ac:f0:c2:24:2d:ec:c5:f9:51:35:cf:d6:
1a:d2:58:81:3a:eb:5d:a7:42:c7:a0:71:00:28:ab:
8d:3a:f1:27:eb:ff:64:fb:fe:0d:3c:38:01:8a:d3:
52:f4:34:37:31:90:dc:09:85:94:a7:68:b1:6e:d8:
f8:7c:33:91:f8:0e:57:ef:aa:56:c8:6e:04:69:2c:
3f:ad:c4:b4:13:01:1c:46:84:83:6c:4e:72:9c:e8:
79:50:95:10:ff:f3:9c:54:9a:9d:c9:d5:7c:85:05:
0b:c5:91:7e:e4:dc:62:53:74:09:0b:76:43:22:62:
9b:7e:74:f6:12:fa:0c:e2:72:13:91:df:cd:55:2a:
6e:aa:4f:bf:6e:2e:7f:b2:9c:33:47:92:66:fc:3f:
7c:b1:0f:e7:cd:15:b8:5a:14:b3:d4:f2:65:27:50:
58:22:f7:7d:ef:8e:5b:b2:bb:be:9a:6c:dc:e5:34:
38:11:c7:15:39:7c:19:95:11:14:c1:3b:1f:b4:75:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4B:EE:F7:55:26:0A:CD:0A:39:A8:51:4E:2F:65:74:EB:3F:B2:75
X509v3 Authority Key Identifier:
keyid:A0:82:59:A4:1D:9C:90:C8:71:A4:A4:08:1E:EA:C9:8E:92:1C:9C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/dEvu91UmCs0KOahRTi9ldOs_snU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.213.64.0/23
82.213.67.0-82.213.69.255
82.213.72.0/21
82.213.84.0/22
82.213.102.0-82.213.111.255
83.139.192.0/23
83.139.195.0-83.139.199.255
83.139.201.0/24
83.139.208.0/24
Signature Algorithm: sha256WithRSAEncryption
08:6f:bb:f9:66:3b:ac:92:d3:34:a8:51:a1:96:a1:88:9a:50:
40:ae:77:eb:0d:2d:39:1b:7f:9f:e9:d0:e9:fb:8b:12:22:cb:
9c:2a:2a:6e:70:9c:dc:f2:ba:7d:34:97:59:64:d8:d9:1c:1b:
a1:0a:fe:21:59:34:d9:d1:bb:df:02:d4:85:ec:06:03:21:3f:
12:9a:73:48:c9:b9:2a:c1:53:8a:e3:0d:bc:f3:95:4f:6a:6f:
b4:0f:ac:8b:92:ca:29:c9:1a:f2:88:44:a0:6a:b3:a3:7d:60:
6d:0c:58:b3:93:e7:b4:44:26:8a:f7:8f:48:82:51:1d:6a:b6:
b9:b9:5c:0c:71:99:63:b4:fb:a2:b7:46:66:b2:38:ba:a7:00:
0d:ef:7f:cb:5d:8c:ea:a9:24:d0:63:02:8a:44:e9:fd:53:f7:
ec:48:80:b8:9c:37:40:ad:48:23:56:9b:ef:59:b9:5e:7f:02:
e8:32:54:7f:4d:eb:1d:86:af:84:d5:d8:76:dc:ae:9b:7e:7c:
66:7f:70:12:07:85:66:e7:d4:f7:0b:03:e7:65:cd:50:98:41:
60:f7:6a:13:6b:82:9d:50:25:44:3b:c4:15:22:93:cb:57:7a:
e8:b2:fa:b2:00:78:7a:4d:2c:42:23:4f:32:27:2d:1f:47:b8:
27:04:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:52 2026 by rpki-client