Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/egVxz3MTJZq0IKWSpFpeSPC2o_I.roa
File: egVxz3MTJZq0IKWSpFpeSPC2o_I.roa (raw, json)
Hash identifier: BrC4Wz2qBPoD3hlj84HzY/EV097af5iWNBXxQmWtoQQ=
Subject key identifier: 7A:05:71:CF:73:13:25:9A:B4:20:A5:92:A4:5A:5E:48:F0:B6:A3:F2
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0CA926784E6D118F0B279A24D17F3F3F5
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/egVxz3MTJZq0IKWSpFpeSPC2o_I.roa
Signing time: Tue 22 Sep 2026 19:23:07 +0000
ROA not before: Tue 22 Sep 2026 19:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212171
IP address blocks: 45.86.61.0/24 maxlen: 24
45.86.62.0/24 maxlen: 24
45.86.63.0/24 maxlen: 24
45.86.64.0/24 maxlen: 24
92.118.230.0/24 maxlen: 24
92.118.231.0/24 maxlen: 24
92.118.232.0/24 maxlen: 24
92.118.233.0/24 maxlen: 24
92.118.234.0/24 maxlen: 24
185.166.152.0/24 maxlen: 24
185.166.153.0/24 maxlen: 24
185.166.154.0/24 maxlen: 24
185.166.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:92:67:84:e6:d1:18:f0:b2:79:a2:4d:17:f3:f3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 22 19:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a0571cf7313259ab420a592a45a5e48f0b6a3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:23:58:aa:a8:ed:ef:94:12:03:79:18:01:
0c:50:bd:f0:82:cc:f2:7e:49:78:d8:2c:f8:10:3d:
74:8d:1d:ef:4f:94:d3:06:a0:e8:41:52:73:43:4d:
ea:bd:2e:0b:e3:25:38:b0:ae:e6:c1:b6:56:18:b4:
1e:7b:f2:c4:38:33:86:cc:5c:78:9d:f0:77:9c:a5:
c1:20:ea:32:9b:ee:04:41:d6:2e:30:73:bd:f9:ea:
ed:8d:de:7f:1a:ed:20:5a:62:4b:af:53:70:52:89:
86:64:1c:4d:1a:b1:29:97:67:c9:c9:59:39:62:58:
39:3c:69:81:df:e7:43:0c:b1:b9:c4:59:7e:5a:72:
ed:ff:b4:17:62:0d:a3:cc:5e:0d:35:b1:22:b3:84:
ce:e9:4c:c9:72:34:58:86:dd:ce:e6:cf:1d:ea:0a:
2e:0a:7e:78:6b:59:71:e7:0e:39:50:af:ae:9b:8f:
09:5e:09:fd:e1:d5:d8:d5:31:71:a0:89:b1:cb:ce:
ff:5d:a1:08:d8:39:fa:10:09:34:fd:83:c2:94:9a:
86:cf:7a:ea:36:43:88:bb:fa:4d:6f:bc:07:50:df:
aa:65:c8:86:72:50:e6:38:b7:0d:35:c0:f2:41:3d:
83:d2:6a:b9:5f:e7:55:c8:4f:0f:9e:9b:3f:f7:21:
5b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:05:71:CF:73:13:25:9A:B4:20:A5:92:A4:5A:5E:48:F0:B6:A3:F2
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/egVxz3MTJZq0IKWSpFpeSPC2o_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.61.0-45.86.64.255
92.118.230.0-92.118.234.255
185.166.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:0b:51:47:54:cc:34:7d:ec:e0:39:2d:39:6c:86:e3:76:5e:
4b:aa:0a:84:5e:97:07:25:96:af:fc:e4:d3:ba:a2:f7:46:97:
90:a7:2b:32:ee:ee:64:b6:e0:9e:d6:e2:54:77:4a:bf:2b:b8:
40:3f:a8:96:dc:64:95:7a:50:f1:2e:6f:7a:71:33:f5:f2:5b:
a7:6c:8b:32:f0:7f:cd:77:c8:bc:ba:23:4e:27:19:12:04:21:
09:8e:1f:bd:ee:8c:64:28:4a:44:90:41:ec:64:91:7c:65:b6:
05:72:20:9e:44:15:2d:35:04:4f:bc:07:8a:ea:bb:d3:8d:28:
d8:77:a8:25:bb:1e:4f:e7:ec:b8:65:e8:21:97:c6:d5:06:dc:
6f:fd:40:26:c3:65:ac:fd:38:87:16:ef:19:c7:2d:f4:cc:d5:
0f:00:cf:af:79:38:3f:a4:36:17:4b:7e:29:db:c9:35:0e:4a:
aa:a6:30:d7:a2:21:25:b9:35:09:e0:c3:ed:37:80:c9:57:66:
89:75:f0:4c:53:a3:39:26:6e:14:5b:3d:48:a3:12:38:b1:6a:
b1:7a:58:69:60:47:19:b2:ba:6a:34:84:6d:30:4f:19:23:5c:
cc:23:2d:dc:64:51:75:44:ef:50:71:d9:38:66:5a:20:f2:4e:
e3:ba:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:10:24 2026 by rpki-client