Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Eo4iezlaKrzySyvGxqgjAjSEE8A.roa
File: Eo4iezlaKrzySyvGxqgjAjSEE8A.roa (raw, json)
Hash identifier: zCuI3xpxxFmIpaGiKe96k4JzlNHLdJd0agpVv8Bglow=
Subject key identifier: 12:8E:22:7B:39:5A:2A:BC:F2:4B:2B:C6:C6:A8:23:02:34:84:13:C0
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019D76854B1BF1A8B097489F8A62CFB749A2
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Eo4iezlaKrzySyvGxqgjAjSEE8A.roa
Signing time: Fri 10 Apr 2026 08:32:20 +0000
ROA not before: Fri 10 Apr 2026 08:32:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207388
IP address blocks: 91.239.217.0/24 maxlen: 24
185.115.160.0/24 maxlen: 24
185.115.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:85:4b:1b:f1:a8:b0:97:48:9f:8a:62:cf:b7:49:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Apr 10 08:32:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=128e227b395a2abcf24b2bc6c6a82302348413c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:cc:54:2d:31:21:31:62:a3:5b:ae:2d:86:
56:62:14:5a:b9:bc:a6:cc:93:a1:56:79:8a:d2:0a:
8d:55:4f:c6:f8:55:06:1d:03:59:31:db:af:16:84:
22:c7:34:af:60:4c:fe:fa:77:7a:88:df:cd:fa:6c:
da:6f:b1:12:06:83:55:45:7b:bc:24:f1:78:a5:72:
0e:f7:2d:be:57:6a:90:bc:c7:3b:db:d1:d4:21:29:
c5:e5:40:7d:79:33:f2:46:7f:6a:d9:8a:fa:da:bd:
08:49:36:19:a4:da:e7:00:2e:22:3d:e4:cb:43:88:
c2:cb:17:d4:7c:01:2a:d9:11:cf:d5:48:6a:58:3e:
b5:d6:64:01:3a:0c:fd:25:81:70:5d:aa:e9:74:10:
4d:87:07:f1:6a:8d:e3:74:d0:50:ff:46:96:66:3c:
6a:b5:2f:03:86:6c:2a:99:f3:34:5f:40:fa:77:01:
b6:74:4e:a5:ef:7d:be:5f:f8:55:03:a7:d9:8f:c3:
bb:70:28:d4:22:58:13:27:a4:d1:eb:ae:77:ba:8b:
fa:73:06:26:8e:29:e6:07:2f:e7:f3:b1:ac:0a:d1:
9b:0a:8b:d9:e1:c3:71:c5:9d:41:5a:94:ad:2f:51:
dd:64:86:0e:e8:a2:74:0c:fd:86:1f:98:da:c8:a8:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8E:22:7B:39:5A:2A:BC:F2:4B:2B:C6:C6:A8:23:02:34:84:13:C0
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Eo4iezlaKrzySyvGxqgjAjSEE8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.217.0/24
185.115.160.0/24
185.115.163.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c5:31:ee:71:6a:8b:da:5b:cf:5c:d9:88:e9:7b:da:f9:a3:
f2:a7:8a:4f:5f:49:05:c6:d1:a1:8b:65:41:59:6c:5e:2f:63:
52:d0:9c:fb:b9:b8:7c:44:23:15:eb:3e:b1:38:6c:a5:20:16:
ac:17:a6:79:22:4c:16:51:88:0a:9f:84:c1:35:a8:80:2c:a4:
ca:de:78:05:5e:d6:69:58:fd:bc:3a:f2:5b:64:36:d3:eb:53:
6d:e8:6b:65:91:25:cf:b7:69:67:9d:80:8e:c2:53:78:f1:11:
8d:35:75:db:2b:7d:3f:4e:ba:66:7b:0c:be:3b:7a:04:37:51:
36:93:7d:a6:73:d2:7b:ed:91:6f:f4:59:a5:44:98:a8:bf:5a:
f4:11:5f:6d:ac:ca:39:c5:8d:bd:b4:d7:cf:03:b9:b2:9b:87:
95:8a:a6:38:e8:49:1f:63:b8:7f:5c:e2:f6:94:96:02:34:2b:
da:3f:b9:2d:ef:76:79:0d:ff:b9:66:21:8c:29:6c:bb:e5:af:
ff:80:9d:93:ba:6b:81:e9:3b:19:bc:c5:75:49:47:5d:88:fb:
6b:03:fe:b2:24:57:21:38:ee:6e:e5:81:1c:11:96:1d:14:d9:
b6:11:b8:73:5e:21:5a:3a:de:83:9c:3e:36:01:d7:3e:71:87:
c2:d0:8a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:06 2026 by rpki-client