Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EI_pTDesbPnfNTLFgO-jkFQ-Ltc.roa
File: EI_pTDesbPnfNTLFgO-jkFQ-Ltc.roa (raw, json)
Hash identifier: e4adJ9sd42nNUWV4t+PWXQM3UBuM5i6FOclqCU2vPes=
Subject key identifier: 10:8F:E9:4C:37:AC:6C:F9:DF:35:32:C5:80:EF:A3:90:54:3E:2E:D7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A067F757BC6857681293CD0A6D9741ACFA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EI_pTDesbPnfNTLFgO-jkFQ-Ltc.roa
Signing time: Thu 03 Sep 2026 15:50:58 +0000
ROA not before: Thu 03 Sep 2026 15:50:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 37.202.219.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.242.46.0/24 maxlen: 24
151.242.47.0/24 maxlen: 24
151.242.48.0/24 maxlen: 24
151.242.60.0/24 maxlen: 24
151.242.62.0/24 maxlen: 24
151.242.121.0/24 maxlen: 24
151.242.158.0/24 maxlen: 24
151.242.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:f7:57:bc:68:57:68:12:93:cd:0a:6d:97:41:ac:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 3 15:50:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=108fe94c37ac6cf9df3532c580efa390543e2ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:b9:0d:18:39:c3:0e:12:c6:66:b2:a7:f8:
5a:d8:f1:49:1b:b3:56:98:fa:77:63:f4:fa:94:ba:
b0:93:96:48:98:3a:75:9c:bc:9b:2b:f3:18:a9:e1:
71:f2:ab:cd:ff:fa:5b:8e:b1:53:25:86:d1:36:36:
5a:df:27:a8:bf:d6:57:f1:43:d2:38:17:30:40:2f:
17:70:a7:16:f3:30:eb:07:af:93:50:c7:0b:94:26:
70:11:69:92:2a:b8:1f:46:d6:3a:03:9f:41:c3:05:
64:7c:29:4d:dc:bb:ab:0f:a3:3c:f6:b8:af:f1:29:
b3:3e:cb:cf:c1:8e:b2:96:39:95:da:ba:7e:6a:84:
99:2c:c5:2b:c8:6a:a7:ec:cd:f8:1f:ae:a2:e4:e3:
68:ef:33:7f:7b:e6:2e:15:08:8e:71:c4:0e:5f:6b:
35:c0:f9:c1:d9:d6:95:e3:b2:c8:64:28:2e:37:ba:
42:d6:4c:2d:f2:28:f8:6c:24:30:13:8f:6e:6b:f5:
5a:36:99:0a:a1:1d:84:22:70:88:c2:3f:c1:f7:21:
34:89:b5:41:5e:d4:cb:58:17:52:6e:50:34:a7:56:
75:63:8d:55:5f:cf:9a:7b:9c:0c:f9:b3:ee:2c:b6:
12:e8:45:7c:39:ee:e8:ca:6a:53:b8:1d:c4:c6:da:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8F:E9:4C:37:AC:6C:F9:DF:35:32:C5:80:EF:A3:90:54:3E:2E:D7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EI_pTDesbPnfNTLFgO-jkFQ-Ltc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.219.0/24
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.242.46.0-151.242.48.255
151.242.60.0/24
151.242.62.0/24
151.242.121.0/24
151.242.158.0/24
151.242.166.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:50:99:ba:8d:88:9d:b1:45:50:f9:40:7b:e9:b8:1a:fd:ce:
1d:25:cd:35:4c:9e:50:39:4c:f6:cc:ff:d1:43:50:fc:f3:f0:
21:6a:ed:40:69:09:30:36:da:24:9e:89:52:bf:75:8c:26:ea:
70:5d:45:f2:22:76:58:a8:9c:50:13:ad:38:a4:97:a1:1c:6d:
e5:ef:b1:ff:c4:25:b2:51:b3:64:80:9a:80:c9:06:d4:1d:af:
ee:1e:b4:44:e5:36:60:c1:44:a8:24:c5:92:32:0a:5a:ef:fb:
90:7c:0a:7d:47:89:cb:24:5d:9a:fb:5b:be:d8:55:c7:b0:51:
cf:ff:3d:99:3e:06:c1:40:e6:e1:86:ea:c6:1e:98:35:e0:6e:
ce:c8:7e:02:5b:bb:0f:83:f8:04:26:4a:0b:8b:a4:c0:e9:cd:
f5:74:94:51:49:af:88:12:de:3f:79:6a:a1:b5:a8:b8:6b:87:
cd:2d:e5:68:f4:58:ea:af:c8:e9:fd:3f:c1:fe:9e:fc:8a:34:
3c:3d:bc:2a:c1:8c:45:3b:55:d3:bb:52:ca:7e:46:c5:b5:d6:
77:97:77:3b:86:b3:4d:ef:5d:c8:93:41:f2:3f:a3:ee:30:6e:
c9:4e:c1:16:d4:31:ad:86:66:50:f0:ac:12:41:d2:56:bc:cb:
5b:21:6e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:52 2026 by rpki-client