Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/ei_p9st3qu-b1Ms5hTEU5BNw5Q8.roa
File: ei_p9st3qu-b1Ms5hTEU5BNw5Q8.roa (raw, json)
Hash identifier: o7eHJiRT0YpFeEhqjitwmm7MAPkx/mYorXzJ8V4EiZM=
Subject key identifier: 7A:2F:E9:F6:CB:77:AA:EF:9B:D4:CB:39:85:31:14:E4:13:70:E5:0F
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 01A0B3F786DAA1D6D77D2800550716ABBBFF
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/ei_p9st3qu-b1Ms5hTEU5BNw5Q8.roa
Signing time: Fri 18 Sep 2026 10:02:18 +0000
ROA not before: Fri 18 Sep 2026 10:02:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136038
IP address blocks: 2.59.152.0/22 maxlen: 22
2.59.152.0/24 maxlen: 24
2.59.154.0/24 maxlen: 24
2.59.155.0/24 maxlen: 24
45.91.224.0/22 maxlen: 22
45.91.226.0/24 maxlen: 24
45.91.227.0/24 maxlen: 24
45.142.152.0/22 maxlen: 22
45.142.152.0/24 maxlen: 24
45.142.153.0/24 maxlen: 24
45.142.154.0/24 maxlen: 24
45.142.155.0/24 maxlen: 24
91.204.224.0/22 maxlen: 22
91.204.225.0/24 maxlen: 24
185.202.100.0/22 maxlen: 22
185.202.103.0/24 maxlen: 24
193.239.150.0/23 maxlen: 23
193.239.150.0/24 maxlen: 24
193.239.154.0/23 maxlen: 23
193.239.154.0/24 maxlen: 24
194.126.202.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:f7:86:da:a1:d6:d7:7d:28:00:55:07:16:ab:bb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Sep 18 10:02:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a2fe9f6cb77aaef9bd4cb39853114e41370e50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:60:0d:74:c5:e5:d9:4c:17:c5:97:24:0c:
f1:55:e1:2f:ed:02:a6:48:b0:35:c4:87:de:84:a8:
d8:6a:d2:7f:e9:93:1a:8c:cc:3b:c0:b0:88:ab:0c:
8b:d8:72:da:0c:3b:cd:e7:02:30:b2:1f:41:af:d6:
e4:71:6c:6f:61:82:89:3b:f4:2e:50:43:47:b9:24:
00:c4:2d:70:1d:29:33:14:ee:36:1b:b5:59:3b:95:
eb:bc:4b:29:9b:db:31:ab:be:da:af:22:bf:92:81:
01:bb:76:1e:2c:a9:b1:b9:00:55:cc:07:e1:e5:8c:
8e:0f:77:c8:d5:7d:5e:63:4f:f7:f7:bc:3e:ef:3c:
8a:51:2d:1d:bd:f1:68:70:c3:d3:b2:34:dd:c6:cd:
93:59:f6:ac:20:f9:19:f6:a9:5c:fa:e3:89:33:95:
a4:e5:9c:c2:91:59:c2:92:29:81:3e:40:9b:79:47:
00:75:ac:7f:d0:33:51:b0:32:65:ef:86:aa:0a:2f:
2b:96:6c:26:23:bd:d0:44:8f:ba:3d:50:5b:55:db:
61:3b:82:8e:4f:e6:70:63:ba:85:e4:7f:d0:d7:8a:
1f:d7:1b:b6:d0:1b:b2:1d:7c:1a:c7:cf:c6:6b:4c:
91:34:21:e8:8f:92:72:be:bb:05:12:20:2d:ee:ec:
87:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2F:E9:F6:CB:77:AA:EF:9B:D4:CB:39:85:31:14:E4:13:70:E5:0F
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/ei_p9st3qu-b1Ms5hTEU5BNw5Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.224.0/22
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
193.239.150.0/23
193.239.154.0/23
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c3:fd:bb:7f:64:76:b3:70:c8:68:bd:c3:fc:0c:a0:b7:4a:
bc:63:06:a3:33:8b:17:40:6d:72:93:b0:de:b0:14:d2:45:22:
7f:55:64:ea:26:b2:e9:de:81:e9:a2:f6:72:19:1b:23:b2:72:
7f:15:af:db:be:36:35:25:6f:fa:e8:a5:00:de:c7:51:b4:d1:
73:3b:ea:4e:e7:54:8f:c1:51:4b:e3:19:a2:c5:75:9b:97:7b:
45:b0:c7:d8:f7:35:10:fa:de:bc:f5:88:c9:a8:2e:99:21:b1:
0e:7a:ab:6d:24:42:d6:d5:17:f9:0f:f6:5b:64:77:9e:ed:70:
8d:99:e3:97:d0:11:48:47:ba:ef:c2:bb:4a:99:5d:77:fc:01:
c2:92:40:ff:10:c0:97:23:f6:02:f9:02:8f:7b:19:68:8b:b0:
b9:a0:70:2b:95:4c:8a:68:e9:9a:3c:22:79:de:56:42:5b:30:
f9:6c:46:4d:23:0f:c0:4d:0e:b6:70:f6:89:c4:b3:1b:e2:01:
4e:23:af:0b:fe:30:03:11:42:ae:c4:36:34:da:9b:19:00:71:
a0:d4:54:5d:04:51:de:22:d1:99:3e:81:8a:a1:76:34:f3:43:
ed:d5:f3:9e:b8:0c:2e:f1:dc:45:0f:77:9d:cb:e1:e3:a9:7d:
d5:26:da:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:53:39 2026 by rpki-client