Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/1-Eg5Gq7MYAa6DrhE6ydl6yFozOE.roa
File: 1-Eg5Gq7MYAa6DrhE6ydl6yFozOE.roa (raw, json)
Hash identifier: rMOXwD7ZrFZGr6TjCHoSbGglS/P8lelprsl/pLm/oCg=
Subject key identifier: F8:48:39:1A:AE:CC:60:06:BA:0E:B8:44:EB:27:65:EB:21:68:CC:E1
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01A0C9A1DDD5BEA9B6855BD7BC42D175BCFA
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/1-Eg5Gq7MYAa6DrhE6ydl6yFozOE.roa
Signing time: Tue 22 Sep 2026 15:00:23 +0000
ROA not before: Tue 22 Sep 2026 15:00:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210387
IP address blocks: 45.138.13.0/24 maxlen: 24
45.138.14.0/23 maxlen: 24
109.234.74.0/24 maxlen: 24
152.89.29.0/24 maxlen: 24
193.135.151.0/24 maxlen: 24
193.135.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:dd:d5:be:a9:b6:85:5b:d7:bc:42:d1:75:bc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Sep 22 15:00:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f848391aaecc6006ba0eb844eb2765eb2168cce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:40:bf:9c:90:15:0a:b1:02:fb:df:97:ed:
52:28:9d:36:45:8e:48:7d:44:4e:73:5b:a6:0a:cd:
4a:81:3e:08:89:07:d2:67:22:f4:00:10:d8:19:78:
e3:4e:0a:b2:d8:1d:a9:7f:62:f6:3b:dc:57:8a:f5:
20:51:3a:3b:7e:85:4e:a2:48:ff:1f:86:d2:61:65:
43:27:0d:27:19:bf:25:5f:cd:41:a1:04:cc:14:77:
b2:b9:de:38:c4:61:94:b1:32:bb:10:c7:41:ad:89:
ff:b7:2d:d7:c7:5e:f2:45:16:19:2c:3b:7f:d0:4d:
8a:25:3d:5c:22:33:e0:8b:72:75:01:58:87:65:13:
7a:db:71:eb:ec:66:1a:a1:89:5a:4b:2b:4c:b2:db:
19:4a:55:64:17:98:fc:b4:56:2f:22:81:2b:ef:78:
4e:53:56:49:ef:75:33:13:97:86:d7:bc:a4:eb:b5:
c2:18:ce:ed:2d:50:cf:d9:e1:ad:87:1f:66:72:63:
69:fc:7b:b3:69:f4:86:9d:a5:c0:fb:e6:55:85:25:
90:db:39:c6:b4:69:b0:2e:9d:09:9f:24:47:b9:f1:
f8:9c:11:56:c0:31:e7:8c:ca:4b:da:3a:4e:c6:cf:
83:e7:be:75:1c:1e:ed:e8:e1:98:4d:82:04:c0:1e:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:48:39:1A:AE:CC:60:06:BA:0E:B8:44:EB:27:65:EB:21:68:CC:E1
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/1-Eg5Gq7MYAa6DrhE6ydl6yFozOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.13.0-45.138.15.255
109.234.74.0/24
152.89.29.0/24
193.135.151.0/24
193.135.157.0/24
Signature Algorithm: sha256WithRSAEncryption
61:04:e7:f0:a0:08:eb:28:aa:50:23:b6:13:5b:ce:9f:a9:9b:
77:bc:b8:1e:19:f0:84:79:e5:9e:73:c2:84:ff:b6:61:df:a1:
1c:a6:4b:72:4f:0a:8f:94:0b:99:65:dd:e8:40:55:06:73:8b:
da:9c:b4:ad:b4:59:6d:37:3d:8f:e5:03:d1:a9:fe:db:2e:a5:
fb:9f:55:ab:00:69:f6:de:e2:a2:c9:7e:dd:2c:68:cf:ed:36:
e5:ce:80:bf:be:7b:f4:5c:70:ad:36:f2:8b:84:fe:46:5f:66:
04:b1:93:99:04:e2:69:61:e9:b6:46:41:1f:dc:4a:ad:cf:b4:
f6:35:7d:fd:c4:b4:9d:56:7b:23:64:a3:34:b9:e8:e8:b8:d0:
92:ca:e7:73:61:31:85:ad:8d:d8:b3:42:50:3e:97:62:81:83:
52:d9:fc:c9:de:59:a7:2c:c9:5a:5a:6a:13:09:1c:d3:0a:ac:
1d:6d:63:9e:8e:1e:45:75:9a:17:a2:e8:28:de:d6:34:f8:aa:
04:ae:30:37:b9:0c:3d:ee:2c:9d:3b:e6:3e:6f:4f:1c:3e:af:
71:b5:f0:02:d4:49:3f:0c:cc:2d:bb:8c:96:f9:10:54:cf:bb:
db:ff:a7:72:8e:1f:09:07:32:11:33:69:41:fb:79:6c:83:90:
7f:87:77:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:36:36 2026 by rpki-client