Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/EtJ-6tnlV-8Aq-PH552cwzFu99I.roa
File: EtJ-6tnlV-8Aq-PH552cwzFu99I.roa (raw, json)
Hash identifier: SBFjWOaED819zRLjY2dQChZmsO5IFbHiGrw9/77Wj6s=
Subject key identifier: 12:D2:7E:EA:D9:E5:57:EF:00:AB:E3:C7:E7:9D:9C:C3:31:6E:F7:D2
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 019D502799F5017B0E28825940A6ECBF22C2
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/EtJ-6tnlV-8Aq-PH552cwzFu99I.roa
Signing time: Thu 02 Apr 2026 21:44:25 +0000
ROA not before: Thu 02 Apr 2026 21:44:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15626
IP address blocks: 5.34.182.0/23 maxlen: 23
5.34.182.0/24 maxlen: 24
5.34.183.0/24 maxlen: 24
82.118.17.0/24 maxlen: 24
193.238.152.0/23 maxlen: 23
217.12.192.0/21 maxlen: 21
217.12.192.0/23 maxlen: 23
217.12.195.0/24 maxlen: 24
217.12.196.0/23 maxlen: 23
217.12.198.0/24 maxlen: 24
217.12.199.0/24 maxlen: 24
217.12.205.0/24 maxlen: 24
217.12.210.0/23 maxlen: 23
217.12.210.0/24 maxlen: 24
217.12.211.0/24 maxlen: 24
217.12.212.0/23 maxlen: 23
217.12.214.0/24 maxlen: 24
217.12.216.0/23 maxlen: 23
217.12.220.0/22 maxlen: 22
217.12.221.0/24 maxlen: 24
217.12.222.0/24 maxlen: 24
217.12.223.0/24 maxlen: 24
2a02:27a8::/32 maxlen: 32
2a02:27a8:feed::/48 maxlen: 48
2a02:27ad::/32 maxlen: 32
2a05:9407::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:50:27:99:f5:01:7b:0e:28:82:59:40:a6:ec:bf:22:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Apr 2 21:44:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12d27eead9e557ef00abe3c7e79d9cc3316ef7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:d3:3a:91:6d:a9:0d:c2:76:15:4e:00:ce:
d4:27:16:7f:41:ec:7a:06:26:e6:f7:13:3a:c0:4b:
ef:63:d3:2c:0f:49:97:b7:ae:11:06:65:2d:31:dd:
a8:7f:6f:fb:60:a8:db:a0:b9:1c:8d:a4:1f:3f:25:
c5:45:27:14:c5:ee:f5:e6:0d:3d:d6:10:a0:ff:51:
89:53:e1:9e:78:5d:5c:a5:bc:4b:8e:0e:63:fe:a4:
53:ad:a7:cb:da:2d:cb:0d:cc:c0:60:71:59:41:29:
c9:96:31:3f:f0:ee:24:16:d7:5a:35:0b:9e:05:62:
1c:a2:2f:9d:b0:6a:90:bc:10:f2:2e:20:4b:76:df:
ef:e1:f0:a1:e8:78:21:7d:f7:36:6d:a6:98:2b:0c:
8f:5e:59:12:21:b9:78:12:ea:e3:22:e9:dd:cb:6d:
12:e5:f7:85:d0:a4:e2:0b:36:29:63:50:e1:8b:c1:
f7:4d:dc:c9:ab:a1:86:35:d7:08:91:0e:12:ee:80:
ed:54:f9:dd:a2:32:94:a7:ba:3b:8f:2c:53:b8:14:
cc:ec:59:5e:63:f8:1b:39:bf:ea:b4:97:6b:54:01:
e9:7f:95:7d:b8:fd:fb:f0:22:0d:15:37:b9:c8:48:
79:ba:96:3c:ca:e7:a0:16:d8:02:f0:03:8c:67:29:
a1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D2:7E:EA:D9:E5:57:EF:00:AB:E3:C7:E7:9D:9C:C3:31:6E:F7:D2
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/EtJ-6tnlV-8Aq-PH552cwzFu99I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.182.0/23
82.118.17.0/24
193.238.152.0/23
217.12.192.0/21
217.12.205.0/24
217.12.210.0-217.12.214.255
217.12.216.0/23
217.12.220.0/22
IPv6:
2a02:27a8::/32
2a02:27ad::/32
2a05:9407::/32
Signature Algorithm: sha256WithRSAEncryption
02:d8:e3:cc:07:b7:d1:89:cb:c4:21:e8:a9:9c:76:d2:11:cb:
3f:96:96:97:82:5f:a6:a6:ea:a7:ab:c2:10:cf:43:f1:e4:3c:
ff:99:9f:dc:97:26:d7:22:32:2a:28:20:63:89:25:ba:98:f1:
f1:28:72:59:bb:b7:c5:c5:cb:f1:87:9c:33:a6:74:f2:a0:cf:
7a:86:14:96:6c:89:71:08:36:3e:45:29:9d:68:0c:5e:a8:ae:
2e:e4:83:98:5c:e6:dc:20:e7:24:c9:da:03:3c:04:2d:00:0b:
da:80:ef:0c:90:6b:11:43:0d:33:7a:81:c9:16:1d:fa:cd:c4:
37:1f:a8:39:1c:c7:69:c3:d8:a4:15:73:7b:15:a3:4d:f6:25:
e1:73:15:57:68:41:6c:fb:b8:36:c2:03:59:ac:d4:a6:4b:ba:
23:94:3d:a6:95:f5:af:0c:6c:e4:12:bb:71:bc:0c:3f:a1:97:
c8:ce:db:07:b1:60:80:ea:37:ab:68:2f:fc:b5:6c:dd:9b:e6:
34:2b:3f:69:08:0d:11:9b:8a:69:83:3a:04:8f:cd:46:45:6b:
7f:11:a7:c5:90:be:92:bb:f6:87:bb:41:3f:b0:a7:d1:f0:9f:
c7:80:3b:15:9b:cb:7c:3b:2f:9a:db:20:a3:e0:22:e8:31:9a:
57:98:ed:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:27 2026 by rpki-client