Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/E8ElCrVyI4_ySp06Rt8AWdsuCgg.roa
File: E8ElCrVyI4_ySp06Rt8AWdsuCgg.roa (raw, json)
Hash identifier: Z4ccaVcUKd9ryOCQ6FjnIiZPSIyvXcv04G23hVd1GlI=
Subject key identifier: 13:C1:25:0A:B5:72:23:8F:F2:4A:9D:3A:46:DF:00:59:DB:2E:0A:08
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 019C9EAE9509AF87505F9B41F857879D844C
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/E8ElCrVyI4_ySp06Rt8AWdsuCgg.roa
Signing time: Fri 27 Feb 2026 10:39:27 +0000
ROA not before: Fri 27 Feb 2026 10:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 45.11.53.0/24 maxlen: 24
45.11.54.0/23 maxlen: 24
45.11.177.0/24 maxlen: 24
45.11.178.0/23 maxlen: 24
45.13.109.0/24 maxlen: 24
45.13.110.0/23 maxlen: 24
45.14.217.0/24 maxlen: 24
45.14.218.0/23 maxlen: 24
45.91.117.0/24 maxlen: 24
45.133.140.0/24 maxlen: 24
45.133.142.0/24 maxlen: 24
91.212.20.0/24 maxlen: 24
91.212.27.0/24 maxlen: 24
193.39.246.0/24 maxlen: 24
195.80.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:ae:95:09:af:87:50:5f:9b:41:f8:57:87:9d:84:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Feb 27 10:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13c1250ab572238ff24a9d3a46df0059db2e0a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:83:25:b9:49:4a:ed:fc:30:04:c7:bc:c9:
dd:7f:3a:0f:90:51:07:0f:4f:c1:0f:8e:62:41:26:
62:42:52:2f:78:96:46:6a:38:8f:bd:00:b0:24:cf:
53:4d:db:22:a8:dd:da:e7:db:fb:b9:b4:85:f6:dd:
47:54:87:e8:fc:d3:88:24:ba:b8:14:98:e6:57:c2:
70:da:a3:93:f3:98:91:0c:5d:bf:9e:ff:27:6b:69:
93:fe:61:32:74:52:7a:6c:d0:8f:f7:51:0b:ee:b7:
5e:93:fc:e3:d7:10:61:12:40:4f:52:0a:93:c9:be:
f1:e5:95:fa:e6:a4:af:aa:ce:eb:7c:64:8f:54:c8:
f4:91:8a:43:9a:8b:f9:ed:79:96:f5:40:65:12:29:
d0:52:34:6f:0e:15:4a:0b:5c:5a:b2:7b:c8:19:0c:
f2:56:36:dd:53:51:c7:ea:64:6d:f8:34:63:b1:77:
9e:5e:32:8f:9d:eb:31:60:ab:53:25:6d:e3:d3:43:
d3:21:a3:a9:10:fb:34:a5:65:95:80:25:07:bd:cc:
71:89:f0:43:7d:2d:db:dc:ef:10:b6:61:16:5f:ee:
57:e7:e7:59:7d:aa:6b:a4:3b:4f:2b:20:00:fe:9e:
8b:65:f4:f7:f8:24:cf:66:76:9d:4f:95:cf:0e:30:
29:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C1:25:0A:B5:72:23:8F:F2:4A:9D:3A:46:DF:00:59:DB:2E:0A:08
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/E8ElCrVyI4_ySp06Rt8AWdsuCgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.53.0-45.11.55.255
45.11.177.0-45.11.179.255
45.13.109.0-45.13.111.255
45.14.217.0-45.14.219.255
45.91.117.0/24
45.133.140.0/24
45.133.142.0/24
91.212.20.0/24
91.212.27.0/24
193.39.246.0/24
195.80.230.0/23
Signature Algorithm: sha256WithRSAEncryption
24:24:39:d2:b3:56:22:4e:5c:9a:bd:cf:13:55:fd:ed:27:ff:
71:54:cb:6f:cc:3e:d7:49:e1:00:22:2a:11:b5:57:2c:60:d1:
03:60:cd:c4:62:bb:3e:1a:92:5c:0d:bd:b3:51:d1:24:c3:a8:
c6:09:d5:fd:09:b4:0c:84:5d:e1:4b:2f:ab:ad:e4:d8:2e:e9:
23:82:00:ef:5b:48:96:7a:ba:2c:56:cc:c4:1d:82:40:10:7a:
80:3f:2f:0c:57:52:f3:4d:79:94:af:e7:be:51:44:6e:31:3b:
e1:c6:55:0f:f9:c0:96:eb:de:a8:c0:84:64:9a:83:2d:19:52:
f3:79:15:dc:ee:90:34:5f:65:ab:9d:54:75:e2:66:1a:e9:99:
67:55:ed:31:01:aa:07:28:79:e4:6f:80:e0:25:fd:08:34:e0:
35:2a:bd:5a:e9:e2:0b:75:a0:e9:64:44:46:f1:a4:89:84:aa:
6a:b2:53:d3:61:76:b3:46:bc:e6:99:57:c3:10:78:f6:75:b1:
74:50:d1:ca:bf:f2:2f:97:26:95:33:dd:89:d4:20:90:ba:93:
1b:c6:30:49:3a:9e:c1:4d:cf:47:c6:30:d2:b7:20:a4:3f:8d:
13:c0:fd:74:65:c7:5e:77:43:c3:4c:03:80:2b:23:57:90:f6:
81:3c:b0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:55 2026 by rpki-client