Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/8ErlG4UTOYiF9gfxJf6TwQxeHEg.roa
File: 8ErlG4UTOYiF9gfxJf6TwQxeHEg.roa (raw, json)
Hash identifier: eSbwcz9+x7y60mhJ4MzK/Nn0JkZvIqiuM+EDo594NbU=
Subject key identifier: F0:4A:E5:1B:85:13:39:88:85:F6:07:F1:25:FE:93:C1:0C:5E:1C:48
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 01A06C78A290B67DA738FD59991D3CFA196A
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/8ErlG4UTOYiF9gfxJf6TwQxeHEg.roa
Signing time: Fri 04 Sep 2026 12:50:40 +0000
ROA not before: Fri 04 Sep 2026 12:50:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42927
IP address blocks: 46.22.160.0/24 maxlen: 24
46.22.163.0/24 maxlen: 24
46.22.164.0/23 maxlen: 23
46.22.167.0/24 maxlen: 24
46.22.168.0/24 maxlen: 24
46.22.169.0/24 maxlen: 24
46.22.170.0/24 maxlen: 24
46.22.173.0/24 maxlen: 24
80.82.16.0/23 maxlen: 23
80.82.16.0/24 maxlen: 24
80.82.17.0/24 maxlen: 24
80.82.18.0/23 maxlen: 23
80.82.18.0/24 maxlen: 24
80.82.19.0/24 maxlen: 24
80.82.20.0/23 maxlen: 23
80.82.20.0/24 maxlen: 24
80.82.21.0/24 maxlen: 24
80.82.22.0/23 maxlen: 23
80.82.22.0/24 maxlen: 24
80.82.25.0/24 maxlen: 24
80.82.26.0/23 maxlen: 23
80.82.26.0/24 maxlen: 24
80.82.27.0/24 maxlen: 24
80.82.28.0/24 maxlen: 24
80.82.29.0/24 maxlen: 24
80.82.30.0/23 maxlen: 23
80.82.30.0/24 maxlen: 24
80.82.31.0/24 maxlen: 24
91.189.248.0/21 maxlen: 21
91.189.248.0/24 maxlen: 24
91.189.249.0/24 maxlen: 24
91.189.250.0/24 maxlen: 24
91.189.251.0/24 maxlen: 24
91.189.252.0/24 maxlen: 24
91.189.253.0/24 maxlen: 24
91.189.254.0/24 maxlen: 24
91.189.255.0/24 maxlen: 24
94.124.0.0/21 maxlen: 21
94.124.0.0/24 maxlen: 24
94.124.1.0/24 maxlen: 24
94.124.2.0/23 maxlen: 23
94.124.3.0/24 maxlen: 24
94.124.4.0/24 maxlen: 24
94.124.5.0/24 maxlen: 24
94.124.6.0/24 maxlen: 24
94.124.7.0/24 maxlen: 24
94.124.8.0/21 maxlen: 21
94.124.8.0/24 maxlen: 24
94.124.9.0/24 maxlen: 24
94.124.10.0/24 maxlen: 24
94.124.11.0/24 maxlen: 24
94.124.12.0/24 maxlen: 24
94.124.13.0/24 maxlen: 24
94.124.14.0/24 maxlen: 24
94.124.15.0/24 maxlen: 24
185.28.16.0/22 maxlen: 22
185.28.16.0/24 maxlen: 24
185.28.17.0/24 maxlen: 24
185.28.18.0/23 maxlen: 23
185.28.18.0/24 maxlen: 24
185.28.19.0/24 maxlen: 24
2a02:f78::/32 maxlen: 32
2a02:f7f:14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:78:a2:90:b6:7d:a7:38:fd:59:99:1d:3c:fa:19:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Sep 4 12:50:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f04ae51b8513398885f607f125fe93c10c5e1c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:e0:39:89:08:1d:4b:61:b5:81:d1:fa:f0:
68:93:62:23:4b:6b:a6:91:0b:86:dc:25:46:17:2b:
e1:2c:83:56:33:3e:d6:43:04:f3:4c:87:90:a9:2e:
10:4b:53:14:68:0a:70:6f:56:21:cb:bf:ec:41:b2:
88:b0:a4:98:67:ea:4d:3d:8a:cd:1d:d2:67:16:43:
6a:6e:08:b9:77:e5:0a:6f:68:23:85:8f:6a:a9:de:
f9:45:1a:49:f7:14:c4:be:62:c1:0e:79:bf:8f:fa:
de:d3:69:a6:22:4c:1f:60:1d:90:f9:c5:f6:98:4a:
51:20:e1:a2:50:50:ce:35:e0:f7:09:bd:a3:94:cc:
47:b0:c3:d4:90:7d:8d:fc:d8:3c:af:91:75:2e:33:
44:5c:48:e5:ce:a3:84:db:25:12:ff:40:5e:b3:89:
c7:77:45:e8:cf:fb:f7:ca:92:13:56:03:02:7b:3b:
37:06:2e:e6:c2:84:0b:72:ad:1a:e4:7b:97:c1:aa:
e8:2a:e9:0a:be:f1:0b:be:28:30:5f:68:b6:85:03:
b8:79:ae:7d:31:86:48:fd:12:bd:fe:50:d8:64:30:
19:e5:58:34:2f:03:6f:f9:8e:04:63:45:5f:fe:36:
90:d7:08:86:5f:0a:ba:c5:46:ec:fb:bf:96:f6:0a:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4A:E5:1B:85:13:39:88:85:F6:07:F1:25:FE:93:C1:0C:5E:1C:48
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/8ErlG4UTOYiF9gfxJf6TwQxeHEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.160.0/24
46.22.163.0-46.22.165.255
46.22.167.0-46.22.170.255
46.22.173.0/24
80.82.16.0/21
80.82.25.0-80.82.31.255
91.189.248.0/21
94.124.0.0/20
185.28.16.0/22
IPv6:
2a02:f78::/32
2a02:f7f:14::/48
Signature Algorithm: sha256WithRSAEncryption
a8:11:b2:0d:93:f8:3f:e8:10:ac:d8:fa:1a:eb:35:8a:78:dd:
41:85:52:dd:b0:b2:00:b8:1e:0e:d5:b3:2a:62:eb:89:7c:8f:
3b:38:99:5f:33:56:80:51:22:5e:7b:86:fa:ef:80:f2:dc:51:
25:cd:a4:63:80:65:a0:e2:24:42:c5:c0:21:b8:f8:60:32:5a:
a0:ef:ef:f5:10:91:7c:f3:93:0c:b3:c0:44:65:88:a9:bb:90:
d4:d5:2b:4d:b6:dc:47:77:f1:48:92:f7:69:dc:1d:20:8f:62:
60:a8:0b:21:1e:dd:77:e9:9c:b5:6a:c0:57:d2:c4:8e:ce:d9:
87:b0:1b:da:fb:78:06:f9:8e:00:5d:1e:b4:bb:e4:01:45:82:
ee:32:b5:ad:23:1c:87:22:37:d9:e3:06:c9:2b:72:34:7b:37:
33:27:e4:52:ea:e3:00:45:6e:08:e6:b9:64:41:61:ba:50:1f:
c6:02:b9:bf:0d:db:6a:22:66:43:0f:f8:64:4b:11:4f:0e:66:
e5:80:b6:4f:0e:7f:ae:1f:a3:cb:b3:6a:65:4a:70:e7:2a:17:
62:4b:d7:cf:a5:af:7d:8a:c3:66:b9:1e:47:c7:65:f6:f1:47:
13:89:b0:fc:b3:56:34:9b:7f:98:55:69:69:ca:bb:7a:13:72:
1f:34:f6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:28:17 2026 by rpki-client