Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/ETWKLbiwaKd1T35Ze_036LWsHsQ.roa
File: ETWKLbiwaKd1T35Ze_036LWsHsQ.roa (raw, json)
Hash identifier: 7vkox+mkRx1q7Rh8m9YqnWM2rr0RFAvagvKpfCifdZM=
Subject key identifier: 11:35:8A:2D:B8:B0:68:A7:75:4F:7E:59:7B:FD:37:E8:B5:AC:1E:C4
Certificate issuer: /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Certificate serial: 019B7AC8A4A84A12FEF668E1FC87C66F50AF
Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/ETWKLbiwaKd1T35Ze_036LWsHsQ.roa
Signing time: Thu 01 Jan 2026 18:18:48 +0000
ROA not before: Thu 01 Jan 2026 18:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202913
IP address blocks: 45.148.196.0/22 maxlen: 22
45.148.196.0/23 maxlen: 23
45.148.196.0/24 maxlen: 24
45.148.197.0/24 maxlen: 24
45.148.198.0/23 maxlen: 23
45.148.198.0/24 maxlen: 24
45.148.199.0/24 maxlen: 24
45.148.199.0/25 maxlen: 25
45.148.199.128/25 maxlen: 25
80.78.128.0/22 maxlen: 22
80.78.128.0/23 maxlen: 23
80.78.128.0/24 maxlen: 24
80.78.129.0/24 maxlen: 24
80.78.130.0/23 maxlen: 23
80.78.130.0/24 maxlen: 24
80.78.131.0/24 maxlen: 24
185.130.144.0/22 maxlen: 22
185.130.144.0/23 maxlen: 23
185.130.144.0/24 maxlen: 24
185.130.145.0/24 maxlen: 24
185.130.146.0/23 maxlen: 23
185.130.146.0/24 maxlen: 24
185.130.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:a4:a8:4a:12:fe:f6:68:e1:fc:87:c6:6f:50:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Validity
Not Before: Jan 1 18:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11358a2db8b068a7754f7e597bfd37e8b5ac1ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:67:50:11:3f:7c:2f:af:5e:67:c7:e8:bb:ab:
e4:4e:28:ba:4d:f6:cf:20:10:f1:7e:bc:5f:47:9c:
61:22:a5:71:47:73:d8:5c:e4:f2:07:82:0e:51:23:
41:ce:7f:d8:52:e6:7c:25:eb:74:25:99:23:43:10:
d4:08:2a:52:fa:43:3e:4a:d6:84:82:df:c1:d6:55:
9a:f4:9b:dc:16:9f:97:bc:f8:c6:9a:47:4d:3b:0b:
be:20:9e:89:42:5a:2c:46:f1:42:f5:39:a3:6d:8c:
51:1c:6e:cb:e8:6d:60:1f:4a:91:aa:7f:37:6d:85:
3c:7d:cf:32:ea:6d:fc:98:b7:4d:83:23:ab:6b:8b:
e5:02:68:b6:d5:b8:de:65:18:b4:d3:24:e2:d6:f8:
e1:80:42:67:f4:37:f2:1e:be:ae:71:06:6d:6b:c3:
ff:c0:b1:fb:43:e7:f2:ba:00:ee:13:c0:1b:ea:ef:
85:99:93:95:de:ed:27:66:6e:f0:cd:6e:0b:f8:51:
26:ce:70:1f:65:dc:f1:0e:da:d5:20:c3:ef:4c:38:
ad:88:a1:8b:bf:de:2a:7d:65:fc:1d:a0:9c:07:7f:
e9:f9:31:dc:b0:c7:81:87:0b:13:6b:e7:98:d6:66:
eb:c9:b5:dc:16:3b:f9:15:ee:a5:ac:58:b0:65:5b:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:35:8A:2D:B8:B0:68:A7:75:4F:7E:59:7B:FD:37:E8:B5:AC:1E:C4
X509v3 Authority Key Identifier:
keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/ETWKLbiwaKd1T35Ze_036LWsHsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.196.0/22
80.78.128.0/22
185.130.144.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:3f:8e:0e:0c:70:3f:4f:3c:09:19:d9:35:3f:5c:19:d8:fe:
d3:ab:ee:67:4f:b1:1f:da:59:63:f3:2e:22:91:bd:42:27:5c:
b3:64:64:96:7c:05:8b:97:9b:ce:8d:a0:aa:7b:e2:83:c8:0f:
c6:80:37:0d:f7:c3:25:8b:a7:59:9f:39:8f:4d:78:b8:05:27:
79:7f:95:79:a6:73:60:54:9a:cf:6a:10:ed:c9:14:a7:cd:19:
c6:5e:c2:16:e7:78:dc:2d:15:c2:8c:e8:98:eb:9f:23:87:dc:
80:7c:30:9a:8a:d4:8a:cb:36:ad:6d:44:5e:c5:0b:34:2b:c0:
03:74:13:95:19:cc:32:70:90:b3:bb:3d:42:e4:df:1b:e5:df:
81:02:35:d3:1b:bc:42:19:5e:e1:a2:b7:21:0f:5c:8b:7d:8a:
8d:ab:65:3d:74:3d:e2:20:1c:4d:52:8b:4f:57:ea:ec:b6:48:
12:36:cd:6e:f0:a7:28:b8:40:c8:54:19:01:05:d8:8d:c6:5b:
eb:c7:47:9b:1a:99:5e:41:b2:7b:01:75:0b:1e:2c:c1:50:d7:
45:9d:c7:c8:0f:b2:11:7f:93:6f:61:95:b9:f1:81:a9:7d:53:
01:8f:82:5a:2b:c6:9c:ec:e8:71:a9:c3:71:b8:01:4f:08:d5:
94:32:d8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:01:53 2026 by rpki-client