Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/E8mOohDcmePz8wTu6FwWLzSrlS8.roa
File: E8mOohDcmePz8wTu6FwWLzSrlS8.roa (raw, json)
Hash identifier: GTMclphGCva6x2txMNdZeOKZzdKFQq0vbNyBSMSOHFk=
Subject key identifier: 13:C9:8E:A2:10:DC:99:E3:F3:F3:04:EE:E8:5C:16:2F:34:AB:95:2F
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01A0AAE2394B3AD75479B2EC2EDD556AA01B
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/E8mOohDcmePz8wTu6FwWLzSrlS8.roa
Signing time: Wed 16 Sep 2026 15:42:27 +0000
ROA not before: Wed 16 Sep 2026 15:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43431
IP address blocks: 37.156.37.0/24 maxlen: 24
89.37.186.0/24 maxlen: 24
94.176.186.0/24 maxlen: 24
188.241.111.0/24 maxlen: 24
188.241.121.0/24 maxlen: 24
2a0b:1780::/30 maxlen: 30
2a0b:1784::/30 maxlen: 30
2a0e:eb00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:e2:39:4b:3a:d7:54:79:b2:ec:2e:dd:55:6a:a0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Sep 16 15:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13c98ea210dc99e3f3f304eee85c162f34ab952f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:20:5f:0b:6b:22:03:d0:e7:73:10:0b:83:
05:07:11:b1:d9:1a:9b:9b:53:2d:0c:d3:ce:a5:66:
33:69:04:d6:62:9b:09:22:57:a3:ac:cb:9b:76:17:
71:27:f2:df:58:cd:c1:03:91:a3:a0:88:d7:a5:5c:
78:ee:d3:7c:c7:be:b6:c9:2c:6b:44:d8:78:44:34:
08:13:b0:1c:84:79:bc:d0:68:77:9f:c2:e6:3a:c4:
75:17:6c:67:c9:1e:f3:98:35:6f:0c:16:c4:db:0e:
5b:aa:1e:97:ad:8b:91:c4:2a:54:f3:ed:13:e8:15:
37:fb:a4:36:10:28:75:79:d3:92:ee:cf:c3:f7:25:
97:62:f2:4b:4f:57:38:63:14:c6:4d:d7:1e:c1:73:
3a:1b:f8:00:26:8b:86:60:60:47:6d:2b:50:77:61:
6d:61:b8:01:3b:40:97:fa:8a:96:3f:97:a5:76:51:
42:75:bf:ed:b7:f7:c2:c4:e4:a4:20:ea:7b:9e:cd:
c7:6d:29:d9:3b:69:48:64:a1:4c:b3:20:98:d8:f4:
5c:c6:54:a2:d3:82:b0:f9:d3:0c:d2:24:f5:5c:5a:
9b:a2:58:5c:c6:6d:ae:dc:d0:f4:f9:10:fa:20:28:
3e:9d:e3:19:9f:bc:50:28:1a:a0:7d:87:14:83:17:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C9:8E:A2:10:DC:99:E3:F3:F3:04:EE:E8:5C:16:2F:34:AB:95:2F
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/E8mOohDcmePz8wTu6FwWLzSrlS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.37.0/24
89.37.186.0/24
94.176.186.0/24
188.241.111.0/24
188.241.121.0/24
IPv6:
2a0b:1780::/29
2a0e:eb00::/32
Signature Algorithm: sha256WithRSAEncryption
96:0c:07:ae:e1:bd:17:97:df:b6:ba:c6:86:f9:3b:be:cc:39:
73:05:7d:05:df:c7:d7:0b:eb:f0:03:81:fa:7b:21:11:c7:f8:
96:85:af:17:3d:2e:fd:c2:f4:eb:0e:05:9f:ba:4b:c8:ac:f1:
76:12:29:d3:d3:5e:32:05:92:1f:e9:7f:f2:3e:5c:20:0a:a8:
2a:c0:15:ca:65:64:89:04:07:62:df:ae:70:b3:29:ec:39:f0:
c7:94:3c:53:07:55:ce:ef:95:ea:0f:9d:27:6c:79:87:eb:73:
62:f1:ca:d5:e4:be:70:33:77:33:f9:64:09:01:8e:81:fe:a6:
d6:54:31:15:b3:db:69:5b:50:22:fa:dd:ca:fa:15:8d:a9:70:
a2:0a:a4:f2:24:a5:2d:31:d5:72:7e:d6:05:55:e3:46:55:8f:
55:1a:26:70:20:be:62:7d:b3:d6:23:54:56:af:ee:c5:f9:6b:
54:f1:f9:3e:5a:85:8e:7a:e2:1e:31:3c:df:36:02:3f:1c:24:
bd:47:e4:e8:0f:a5:11:d6:07:f8:0d:81:b1:23:49:86:a2:39:
c5:6e:2d:96:8f:f6:86:2d:a3:53:3c:be:92:fd:e8:60:7d:96:
ea:e5:a0:e5:a6:c5:d0:c4:34:46:c9:27:ce:a7:ff:50:8c:f5:
44:be:f1:3d
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAaCq4jlLOtdUebLsLt1VaqAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk
YmM3YjMwHhcNMjYwOTE2MTU0MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2M5OGVhMjEwZGM5OWUzZjNmMzA0ZWVlODVjMTYyZjM0YWI5NTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB0gXwtrIgPQ53MQC4MFBxGx2Rqb
m1MtDNPOpWYzaQTWYpsJIlejrMubdhdxJ/LfWM3BA5GjoIjXpVx47tN8x762ySxr
RNh4RDQIE7AchHm80Gh3n8LmOsR1F2xnyR7zmDVvDBbE2w5bqh6XrYuRxCpU8+0T
6BU3+6Q2ECh1edOS7s/D9yWXYvJLT1c4YxTGTdcewXM6G/gAJouGYGBHbStQd2Ft
YbgBO0CX+oqWP5eldlFCdb/tt/fCxOSkIOp7ns3HbSnZO2lIZKFMsyCY2PRcxlSi
04Kw+dMM0iT1XFqbolhcxm2u3ND0+RD6ICg+neMZn7xQKBqgfYcUgxd1BQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFBPJjqIQ3Jnj8/ME7uhcFi80q5UvMB8GA1UdIwQY
MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt
NTQ4NDQwMmNlYjdhLzEvRThtT29oRGNtZVB6OHdUdTZGd1dMelNybFM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh
LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQAJZwlAwQA
WSW6AwQAXrC6AwQAvPFvAwQAvPF5MBQEAgACMA4DBQMqCxeAAwUAKg7rADANBgkq
hkiG9w0BAQsFAAOCAQEAlgwHruG9F5fftrrGhvk7vsw5cwV9Bd/H1wvr8AOB+nsh
Ecf4loWvFz0u/cL06w4Fn7pLyKzxdhIp09NeMgWSH+l/8j5cIAqoKsAVymVkiQQH
Yt+ucLMp7Dnwx5Q8UwdVzu+V6g+dJ2x5h+tzYvHK1eS+cDN3M/lkCQGOgf6m1lQx
FbPbaVtQIvrdyvoVjalwogqk8iSlLTHVcn7WBVXjRlWPVRomcCC+Yn2z1iNUVq/u
xflrVPH5PlqFjnriHjE83zYCPxwkvUfk6A+lEdYH+A2BsSNJhqI5xW4tlo/2hi2j
Uzy+kv3oYH2W6uWg5abF0MQ0Rsknzqf/UIz1RL7xPQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:14:30 2026 by rpki-client