Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/egE-L3lfQQHRXgiKKXMMe_vA8S4.roa
File: egE-L3lfQQHRXgiKKXMMe_vA8S4.roa (raw, json)
Hash identifier: fKsJ4IbxmhZj0AeM3d6m7gRSsCizU0x5R9ysjD9lY6Y=
Subject key identifier: 7A:01:3E:2F:79:5F:41:01:D1:5E:08:8A:29:73:0C:7B:FB:C0:F1:2E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019A2AC2D7B5BB270C09701CBA024C81EE68
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/egE-L3lfQQHRXgiKKXMMe_vA8S4.roa
Signing time: Tue 28 Oct 2025 12:20:03 +0000
ROA not before: Tue 28 Oct 2025 12:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.57.0/24 maxlen: 24
82.152.58.0/24 maxlen: 24
82.152.73.0/24 maxlen: 24
82.152.75.0/24 maxlen: 24
82.152.98.0/24 maxlen: 24
82.152.109.0/24 maxlen: 24
82.152.226.0/24 maxlen: 24
82.152.240.0/24 maxlen: 24
82.152.243.0/24 maxlen: 24
82.153.203.0/24 maxlen: 24
82.153.205.0/24 maxlen: 24
82.153.217.0/24 maxlen: 24
82.163.23.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
109.176.40.0/21 maxlen: 24
109.176.48.0/21 maxlen: 24
109.176.153.0/24 maxlen: 24
212.38.79.0/24 maxlen: 24
213.130.130.0/24 maxlen: 24
213.130.149.0/24 maxlen: 24
213.130.151.0/24 maxlen: 24
213.210.54.0/24 maxlen: 24
213.218.214.0/24 maxlen: 24
213.218.234.0/24 maxlen: 24
213.218.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:c2:d7:b5:bb:27:0c:09:70:1c:ba:02:4c:81:ee:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 28 12:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a013e2f795f4101d15e088a29730c7bfbc0f12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:96:b8:a6:aa:c5:e5:b4:15:b2:77:dd:00:
e8:27:56:51:3f:34:1d:a2:f4:26:31:0e:80:3b:bf:
6a:72:08:23:67:79:8a:14:4d:0a:b5:8a:6c:45:e0:
d2:cf:2e:bc:b8:95:ca:a4:f3:87:2e:11:27:d6:0c:
8a:33:9f:14:e3:6a:26:c9:7d:84:5a:6f:6c:69:12:
41:e2:82:35:af:4a:cf:d1:88:3c:f5:6e:c3:29:3c:
46:be:16:e9:00:0c:3b:b7:b1:39:9e:57:e2:a9:57:
ce:f1:2c:9b:9a:bf:91:97:bf:03:7d:4c:be:71:9c:
fb:cd:b0:d9:c6:69:95:1a:fc:99:91:ac:76:29:07:
6c:4a:87:9b:55:bb:aa:8b:18:74:5f:26:21:0b:24:
f1:3b:3f:5c:49:44:f9:9c:dd:2f:68:f6:db:b1:98:
6c:34:d7:74:c3:95:0e:5f:c6:ef:31:c0:d3:72:54:
de:d3:95:9f:9a:fa:a4:16:1d:d3:aa:17:cf:4d:e7:
7f:b6:f3:2a:2f:db:0e:79:15:24:87:27:20:10:db:
4b:33:16:f5:31:ef:04:82:38:ec:af:56:83:d9:fd:
0e:aa:d8:5a:91:2b:74:ba:ab:01:c0:8b:6a:39:a5:
47:cb:29:11:a5:d4:06:7e:09:76:9a:66:b3:f0:fe:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:01:3E:2F:79:5F:41:01:D1:5E:08:8A:29:73:0C:7B:FB:C0:F1:2E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/egE-L3lfQQHRXgiKKXMMe_vA8S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.57.0-82.152.58.255
82.152.73.0/24
82.152.75.0/24
82.152.98.0/24
82.152.109.0/24
82.152.226.0/24
82.152.240.0/24
82.152.243.0/24
82.153.203.0/24
82.153.205.0/24
82.153.217.0/24
82.163.23.0/24
89.213.164.0/24
109.176.40.0-109.176.55.255
109.176.153.0/24
212.38.79.0/24
213.130.130.0/24
213.130.149.0/24
213.130.151.0/24
213.210.54.0/24
213.218.214.0/24
213.218.234.0/24
213.218.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:89:6d:c8:e6:7c:a7:6a:a8:e0:58:cb:c8:3a:86:ae:a7:64:
25:54:76:c0:17:b6:33:f1:ac:01:30:2e:56:24:bc:37:9a:e6:
35:dd:e8:8c:3e:38:d6:0f:35:a1:f9:c2:06:47:1d:ef:72:6b:
de:fe:fc:86:64:89:93:81:f2:b1:20:d3:17:df:ea:48:04:2e:
11:98:88:d7:c6:be:2c:8e:60:81:a8:81:bc:44:2d:04:2d:4a:
f0:48:21:18:56:6f:39:89:88:1a:1d:cf:02:88:b2:b8:e6:0b:
ff:d2:9f:83:30:b3:79:be:b9:ef:d2:9a:25:51:42:c2:20:74:
35:6f:cf:08:06:bb:68:a9:4d:fb:a9:ff:ff:67:38:fe:5c:d6:
d1:19:28:cd:d9:9b:26:c1:51:85:3a:64:fe:b6:87:69:de:a8:
bc:6d:18:ad:b7:37:c1:6f:96:0e:89:d7:ad:8e:8d:b6:50:0d:
f6:e9:a5:a2:af:56:b7:da:29:10:6f:12:cf:ac:93:38:92:31:
6e:d3:ce:03:ff:70:38:32:d6:db:63:f3:29:36:3f:3e:1b:f5:
32:e7:c5:96:97:40:73:b1:b6:07:4f:f1:20:66:e9:51:9a:74:
e1:1b:0c:22:d9:93:79:f1:0c:a4:11:48:a0:98:2d:33:0b:df:
72:8e:96:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:15 2025 by rpki-client