Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/EHRNG-kpACtEs0ZEWLFTcfb4Kpk.roa
File: EHRNG-kpACtEs0ZEWLFTcfb4Kpk.roa (raw, json)
Hash identifier: 93XpsB5VKJuRYZMCsqmi8z6M3Wzn065njgcQk7yvI2A=
Subject key identifier: 10:74:4D:1B:E9:29:00:2B:44:B3:46:44:58:B1:53:71:F6:F8:2A:99
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 019D9AA16100BDFC9B5A57667F574CA81871
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/EHRNG-kpACtEs0ZEWLFTcfb4Kpk.roa
Signing time: Fri 17 Apr 2026 08:49:20 +0000
ROA not before: Fri 17 Apr 2026 08:49:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34756
IP address blocks: 45.15.12.0/22 maxlen: 22
45.15.12.0/24 maxlen: 24
45.15.13.0/24 maxlen: 24
45.15.14.0/24 maxlen: 24
45.15.15.0/24 maxlen: 24
77.95.96.0/21 maxlen: 21
91.194.136.0/23 maxlen: 23
176.58.24.0/21 maxlen: 21
176.58.30.0/24 maxlen: 24
176.58.31.0/24 maxlen: 24
185.47.236.0/22 maxlen: 22
193.138.109.0/24 maxlen: 24
195.114.12.0/24 maxlen: 24
195.230.110.0/24 maxlen: 24
2a03:fc00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:a1:61:00:bd:fc:9b:5a:57:66:7f:57:4c:a8:18:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Apr 17 08:49:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10744d1be929002b44b3464458b15371f6f82a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:68:fb:7e:e4:5f:32:23:12:09:1f:99:13:a1:
b7:9e:1c:ce:71:87:f1:25:5f:11:b9:5c:d2:54:2e:
55:6c:a8:17:ee:98:5b:f3:4d:ee:e9:43:a6:9a:45:
a2:01:df:c1:8d:e4:2f:de:6a:7d:1c:3f:2b:11:d6:
7c:43:6f:03:0e:55:0a:03:d4:d5:f2:22:2a:d4:04:
33:dd:93:d3:30:a1:ae:ca:d4:db:b8:b1:69:15:b0:
df:a0:23:16:97:97:4f:15:10:12:04:b7:3f:f1:19:
5f:a8:59:8a:ae:33:d4:f2:b8:71:a4:bf:e5:d3:3b:
33:e1:50:51:91:29:6d:2b:f5:d4:69:5a:31:3b:2a:
88:d2:29:f5:19:7c:cf:2f:90:12:b4:79:f6:51:be:
73:bc:07:b4:45:7b:01:61:db:63:ca:40:31:f6:d5:
0d:62:f8:c4:54:e2:63:78:c8:6c:d8:89:ab:14:c6:
98:6d:48:af:6e:85:ac:cc:05:6a:5e:29:17:23:6c:
f9:05:4a:fa:8b:68:40:8d:17:0e:e3:1b:a5:d8:1f:
16:a5:a8:41:92:e3:5b:3a:a7:36:aa:7b:cc:78:4b:
24:b2:1e:df:44:ca:db:e0:8f:cc:a5:74:36:f2:13:
91:4f:23:7a:ee:82:ef:20:df:7c:a8:76:ec:3f:50:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:4D:1B:E9:29:00:2B:44:B3:46:44:58:B1:53:71:F6:F8:2A:99
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/EHRNG-kpACtEs0ZEWLFTcfb4Kpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.12.0/22
77.95.96.0/21
91.194.136.0/23
176.58.24.0/21
185.47.236.0/22
193.138.109.0/24
195.114.12.0/24
195.230.110.0/24
IPv6:
2a03:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
90:79:b8:7b:6d:d5:6d:48:67:a2:a5:bb:db:1e:5d:f7:a0:b2:
e3:ca:f7:cf:ea:b3:99:45:3c:4c:f4:0e:f4:c1:6d:ff:d1:43:
03:52:54:9c:2f:f8:0c:59:56:e5:1e:3d:46:ab:6f:73:ef:83:
49:1d:fb:b9:c8:03:e8:b9:e0:8c:14:98:e5:0e:4c:b3:9c:94:
4c:ed:87:2a:16:ed:41:f0:e2:57:da:1f:cb:4d:c4:85:1c:fd:
2c:7a:36:01:1b:dd:ce:e3:f2:fc:63:46:2c:0e:0b:02:c8:3c:
85:73:66:fe:27:f6:cf:22:88:41:39:8a:f1:82:f7:25:e4:03:
8c:e5:12:ec:75:4c:0f:37:1a:18:07:21:59:ff:10:b5:0f:28:
18:da:0c:fb:65:39:ef:f0:35:45:9a:0d:71:03:b3:d5:c8:30:
46:55:8d:a3:af:47:d1:3b:cd:76:47:61:87:c6:04:98:ba:27:
a8:5f:2f:77:1e:b6:4d:be:0a:cb:f9:89:d6:ee:ea:cb:da:99:
1e:f8:f0:82:81:73:3a:8c:ff:14:4b:eb:9b:3e:21:64:50:7f:
a6:75:8d:99:6e:b4:a1:97:52:55:9a:ca:3d:ea:24:d9:57:4d:
f6:c5:88:f1:a9:2c:5b:26:d6:c7:f9:ed:33:0c:36:78:f6:71:
dd:d5:cd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:55 2026 by rpki-client