Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/e2AyZ2BEWBS0MDGcIRKGddY_-vA.roa
File: e2AyZ2BEWBS0MDGcIRKGddY_-vA.roa (raw, json)
Hash identifier: k3gftfAGEZd+EZsjQ+L0bmvG9iJo2qrBOjPfUiYc9kM=
Subject key identifier: 7B:60:32:67:60:44:58:14:B4:30:31:9C:21:12:86:75:D6:3F:FA:F0
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019F5CE99C216B3339803935E59455BFAF74
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/e2AyZ2BEWBS0MDGcIRKGddY_-vA.roa
Signing time: Mon 13 Jul 2026 19:17:21 +0000
ROA not before: Mon 13 Jul 2026 19:17:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.148.128.0/22 maxlen: 24
37.148.128.0/24 maxlen: 24
37.148.129.0/24 maxlen: 24
37.148.130.0/24 maxlen: 24
37.148.131.0/24 maxlen: 24
45.157.158.0/23 maxlen: 24
93.88.153.0/24 maxlen: 24
93.88.154.0/24 maxlen: 24
93.88.157.0/24 maxlen: 24
93.88.158.0/24 maxlen: 24
95.155.128.0/23 maxlen: 24
95.155.128.0/24 maxlen: 24
95.155.129.0/24 maxlen: 24
95.155.131.0/24 maxlen: 24
95.155.133.0/24 maxlen: 24
95.155.134.0/24 maxlen: 24
95.155.136.0/24 maxlen: 24
95.155.137.0/24 maxlen: 24
95.155.139.0/24 maxlen: 24
95.155.145.0/24 maxlen: 24
95.155.146.0/23 maxlen: 24
95.155.146.0/24 maxlen: 24
95.155.147.0/24 maxlen: 24
95.155.148.0/23 maxlen: 24
95.155.149.0/24 maxlen: 24
95.155.152.0/22 maxlen: 24
95.155.152.0/24 maxlen: 24
95.155.153.0/24 maxlen: 24
95.155.156.0/24 maxlen: 24
95.155.160.0/20 maxlen: 24
95.155.176.0/21 maxlen: 24
95.155.176.0/24 maxlen: 24
152.89.84.0/24 maxlen: 24
152.89.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:e9:9c:21:6b:33:39:80:39:35:e5:94:55:bf:af:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jul 13 19:17:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b60326760445814b430319c21128675d63ffaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:1a:82:34:c8:84:31:a0:c0:6d:3c:03:d9:
e3:dd:93:6f:e1:aa:22:85:55:73:9e:65:e0:cf:d2:
10:8e:b7:53:5a:91:2c:bf:17:46:c0:4f:70:e9:21:
6b:cc:1c:90:66:c2:31:e6:1d:31:c7:c6:91:3d:9d:
fe:8e:66:e9:b2:59:1a:9f:6b:71:15:70:66:a4:68:
b4:fe:78:86:20:90:0e:59:22:44:67:63:f9:86:d6:
3c:72:c3:dc:21:f1:42:c7:18:42:ea:69:b5:e5:19:
c8:84:9c:40:5f:b9:32:1f:01:c2:47:de:74:4d:6f:
f3:ae:e6:98:4a:22:af:b9:1d:12:c8:f0:b5:b0:e9:
ca:6a:29:65:01:a7:4e:48:af:61:40:66:3f:63:ea:
05:8d:d4:d6:67:21:0c:90:e5:0f:de:9e:05:ba:71:
49:88:1d:41:48:1b:3a:77:00:25:25:19:54:21:a9:
18:49:f7:a8:e4:b0:b4:6e:e7:c1:4e:4b:90:78:0b:
c8:92:a6:1a:e2:6f:5c:ed:22:a6:4d:d1:ea:d8:6c:
ce:66:f7:fb:e5:e7:99:90:da:f6:3b:2c:3b:7e:02:
0a:15:30:a4:79:5e:78:ee:79:3f:34:1a:c7:41:7c:
2a:65:bc:51:27:58:9e:59:ce:00:b8:76:42:91:a1:
be:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:60:32:67:60:44:58:14:B4:30:31:9C:21:12:86:75:D6:3F:FA:F0
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/e2AyZ2BEWBS0MDGcIRKGddY_-vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/22
45.157.158.0/23
93.88.153.0-93.88.154.255
93.88.157.0-93.88.158.255
95.155.128.0/23
95.155.131.0/24
95.155.133.0-95.155.134.255
95.155.136.0/23
95.155.139.0/24
95.155.145.0-95.155.149.255
95.155.152.0-95.155.156.255
95.155.160.0-95.155.183.255
152.89.84.0/24
152.89.87.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4b:bf:0c:99:a7:82:86:b2:9f:81:33:52:8b:a6:01:00:56:
b5:3e:7d:d6:38:cf:e8:35:37:b6:08:64:a2:13:a2:c6:c6:37:
a7:62:8c:65:48:42:71:9a:b3:aa:96:48:57:ef:6f:a2:a9:75:
7d:77:92:12:e1:90:fa:d6:0a:5b:a2:f1:b6:d1:3c:5f:f8:d3:
22:fc:9d:15:a9:dc:f8:2b:10:9d:cd:5a:0b:77:bf:2c:15:67:
07:fb:30:35:cb:72:76:26:9c:37:a8:0b:d3:b4:6f:13:17:aa:
8a:37:c0:0d:29:34:24:02:ea:d7:ec:19:68:e8:82:f3:e1:e0:
90:4b:46:99:52:5c:6d:43:64:54:0b:63:fc:98:2c:24:6b:32:
77:a7:d2:0b:c3:24:40:d1:52:6c:46:28:8c:c6:ad:f8:82:df:
e3:1b:d4:d3:2f:81:93:13:c1:e2:94:c4:a0:c0:9c:69:fd:09:
2a:8b:8e:3d:6f:33:e3:c0:4f:6c:5d:82:22:aa:5f:ce:43:57:
45:75:cd:b5:06:89:28:bd:cd:2b:18:17:ce:91:4c:c7:b9:2d:
b0:15:4b:73:82:5e:0f:cc:25:f8:7c:86:98:45:b8:4e:ff:19:
25:a7:e2:46:e0:8c:aa:61:4f:ab:64:09:cd:7e:96:5f:6f:c2:
fc:2a:d8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:21 2026 by rpki-client