Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/eMg-9ld3IvFs3nS-sBx7IpzuUsQ.roa
File: eMg-9ld3IvFs3nS-sBx7IpzuUsQ.roa (raw, json)
Hash identifier: vJAxtuzNk0O2tAodLcu35hqfnh772emLHtdDBYtmEj0=
Subject key identifier: 78:C8:3E:F6:57:77:22:F1:6C:DE:74:BE:B0:1C:7B:22:9C:EE:52:C4
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 019B79ECEA75287814D39069A086A58E5ECE
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/eMg-9ld3IvFs3nS-sBx7IpzuUsQ.roa
Signing time: Thu 01 Jan 2026 14:18:48 +0000
ROA not before: Thu 01 Jan 2026 14:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215089
IP address blocks: 46.235.8.0/24 maxlen: 24
46.235.11.0/24 maxlen: 24
77.245.157.0/24 maxlen: 24
185.87.254.0/24 maxlen: 24
185.87.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:ea:75:28:78:14:d3:90:69:a0:86:a5:8e:5e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Jan 1 14:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78c83ef6577722f16cde74beb01c7b229cee52c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:5a:01:bf:6b:3f:71:09:32:be:fa:5f:e3:
e2:2c:05:f5:f3:91:ae:4c:72:51:56:77:af:4a:f5:
0a:09:0b:35:5f:06:86:b2:36:0d:46:5e:97:f0:ac:
5c:78:97:ed:de:bf:9e:50:4c:c7:3f:1f:64:ab:7f:
7a:9d:be:c8:4b:32:31:3b:a2:c7:68:57:1f:3d:af:
11:21:34:b5:71:58:50:12:01:3d:74:16:3b:b8:78:
e7:c7:1c:74:ec:9e:07:f1:28:0c:ef:45:5c:6c:ee:
12:56:8c:5c:a4:0a:a8:71:b1:b9:93:f0:d7:e3:63:
42:26:74:56:84:d0:f2:0f:8e:bb:ef:d4:d2:69:24:
47:97:00:f9:4c:e1:bd:be:d4:94:64:cb:62:0e:c5:
66:60:14:fc:0f:60:c2:06:c1:31:d2:71:15:99:e5:
89:d5:60:14:c8:15:8d:29:76:ba:7f:7b:63:08:41:
5b:0e:35:6e:2a:1d:9c:7d:2c:9d:ae:99:9a:8c:84:
cc:e4:62:98:fe:a0:71:ad:d4:c2:ea:a6:71:85:53:
3d:28:6e:7c:72:22:b9:42:98:52:1a:7e:08:ec:d5:
c2:83:92:86:0f:f6:ea:82:cc:6a:0e:ca:8f:23:e9:
b3:f0:81:91:24:47:50:61:de:57:1d:7d:51:a8:27:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C8:3E:F6:57:77:22:F1:6C:DE:74:BE:B0:1C:7B:22:9C:EE:52:C4
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/eMg-9ld3IvFs3nS-sBx7IpzuUsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.8.0/24
46.235.11.0/24
77.245.157.0/24
185.87.254.0/23
Signature Algorithm: sha256WithRSAEncryption
57:8b:72:64:8d:00:1f:ad:a3:1d:2f:2f:0b:c8:f7:db:85:53:
a5:13:4e:b8:d2:4e:29:c9:07:02:a1:1f:4e:9b:41:3e:93:76:
46:c7:78:81:a0:50:57:a0:43:c3:72:f8:2c:9e:48:63:62:4c:
62:71:4b:37:52:4e:ce:e8:52:9f:9a:07:4e:17:e1:4f:8f:6c:
a7:b0:2f:ae:56:83:72:29:0e:a8:44:2c:8c:95:ba:5b:3a:37:
d7:b0:2a:1c:1c:0c:30:80:f2:60:50:f5:de:fb:65:b8:fc:a8:
5b:96:be:16:1e:f5:cf:9d:de:c1:83:a1:1d:24:41:53:ff:53:
2f:ef:d2:03:16:22:42:f2:6d:ba:d4:95:30:fa:69:9a:15:48:
ed:33:71:82:db:14:da:24:1b:26:72:5c:d3:cb:ad:d6:1e:99:
c0:46:f8:56:20:47:54:75:f9:59:b6:b2:b3:af:99:a1:08:d3:
5b:61:41:5a:80:fb:2a:c6:a3:19:89:43:18:6b:97:c0:bf:0c:
fb:d1:1e:b0:5d:e5:8b:88:08:c0:d8:9e:4a:b0:f9:c6:b7:ad:
bb:13:c6:b4:7c:67:c4:fc:62:13:6d:a3:61:d2:85:15:23:8a:
70:a6:32:48:48:66:ec:7f:4a:09:68:7d:54:e0:5d:c1:66:d6:
fb:a4:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:35:08 2026 by rpki-client