Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/EFOJ5hBQeND6qpOwej-hMBPDrb4.roa
File: EFOJ5hBQeND6qpOwej-hMBPDrb4.roa (raw, json)
Hash identifier: 64pmfHtYGatuKBycpEHQu6TCsuyqMwyKSXfipltHlOU=
Subject key identifier: 10:53:89:E6:10:50:78:D0:FA:AA:93:B0:7A:3F:A1:30:13:C3:AD:BE
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 019D6861623367D5312302EACD0B34F23E08
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/EFOJ5hBQeND6qpOwej-hMBPDrb4.roa
Signing time: Tue 07 Apr 2026 14:38:25 +0000
ROA not before: Tue 07 Apr 2026 14:38:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44534
IP address blocks: 5.45.209.0/24 maxlen: 24
5.45.214.0/24 maxlen: 24
5.45.219.0/24 maxlen: 24
5.45.241.0/24 maxlen: 24
5.45.243.0/24 maxlen: 24
5.45.252.0/22 maxlen: 22
5.255.203.0/24 maxlen: 24
5.255.205.0/24 maxlen: 24
5.255.232.0/24 maxlen: 24
5.255.234.0/23 maxlen: 23
37.9.75.0/24 maxlen: 24
37.9.86.0/24 maxlen: 24
37.9.98.0/24 maxlen: 24
37.140.168.0/24 maxlen: 24
77.88.6.0/24 maxlen: 24
77.88.12.0/23 maxlen: 23
77.88.42.0/23 maxlen: 23
77.88.61.0/24 maxlen: 24
84.252.160.0/19 maxlen: 20
87.250.232.0/24 maxlen: 24
87.250.238.0/24 maxlen: 24
87.250.240.0/24 maxlen: 24
90.156.176.0/20 maxlen: 24
90.156.176.0/24 maxlen: 24
93.158.144.0/22 maxlen: 22
93.158.155.0/24 maxlen: 24
93.158.168.0/22 maxlen: 22
93.158.182.0/24 maxlen: 24
93.158.184.0/21 maxlen: 24
93.158.184.0/24 maxlen: 24
93.158.185.0/24 maxlen: 24
93.158.186.0/24 maxlen: 24
93.158.187.0/24 maxlen: 24
95.108.168.0/22 maxlen: 22
95.108.170.0/24 maxlen: 24
141.8.130.0/23 maxlen: 23
178.154.152.0/24 maxlen: 24
2a02:6bf:8000::/34 maxlen: 48
2a02:6bf:8005::/48 maxlen: 48
2a02:6bf:8006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:61:62:33:67:d5:31:23:02:ea:cd:0b:34:f2:3e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Apr 7 14:38:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=105389e6105078d0faaa93b07a3fa13013c3adbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:4f:5d:7e:d4:48:cb:d2:d4:b4:af:8e:91:
7e:41:c3:fb:e0:9c:b2:bd:10:f8:64:7f:a0:a6:b2:
48:b0:f9:8d:af:8b:a5:97:cc:f0:3e:2e:ce:93:c3:
da:7f:cc:56:a3:0e:d8:62:be:ef:a8:f9:8b:a3:da:
4c:2b:ba:2f:14:9c:12:0a:f2:56:c6:fe:04:f8:8c:
42:9b:83:8b:a2:eb:96:1e:c5:ec:bc:d4:97:2f:95:
17:7d:57:d3:54:5d:0c:cd:9b:43:99:6e:84:40:4b:
78:1e:37:5c:f0:78:f3:48:54:a4:ee:ba:41:d5:8b:
dc:1c:4a:95:1a:03:81:b2:7b:62:b2:50:74:23:aa:
86:6d:b7:ed:02:1c:32:b7:f3:59:5e:c5:cd:5d:ff:
49:6e:10:6c:a1:58:65:3f:ca:2b:c6:6c:0c:40:20:
99:04:bb:8a:8e:08:be:75:60:95:82:b2:b1:71:1f:
5d:01:ca:2f:c5:af:65:d5:9d:91:92:13:b8:8c:06:
9a:80:1d:54:f9:7b:ad:ed:6d:d2:ab:a1:91:5f:f6:
f5:14:55:52:57:07:5c:8c:bb:94:64:9a:ed:9c:1d:
47:77:c3:cc:a2:28:c0:c2:02:fd:f6:7d:c3:95:b4:
c9:95:32:05:f3:6d:08:5b:e7:9f:3a:5a:3a:5e:71:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:53:89:E6:10:50:78:D0:FA:AA:93:B0:7A:3F:A1:30:13:C3:AD:BE
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/EFOJ5hBQeND6qpOwej-hMBPDrb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.209.0/24
5.45.214.0/24
5.45.219.0/24
5.45.241.0/24
5.45.243.0/24
5.45.252.0/22
5.255.203.0/24
5.255.205.0/24
5.255.232.0/24
5.255.234.0/23
37.9.75.0/24
37.9.86.0/24
37.9.98.0/24
37.140.168.0/24
77.88.6.0/24
77.88.12.0/23
77.88.42.0/23
77.88.61.0/24
84.252.160.0/19
87.250.232.0/24
87.250.238.0/24
87.250.240.0/24
90.156.176.0/20
93.158.144.0/22
93.158.155.0/24
93.158.168.0/22
93.158.182.0/24
93.158.184.0/21
95.108.168.0/22
141.8.130.0/23
178.154.152.0/24
IPv6:
2a02:6bf:8000::/34
Signature Algorithm: sha256WithRSAEncryption
90:7b:54:93:9f:b4:92:26:67:f4:ef:c7:20:2d:99:9c:10:8b:
29:2d:4c:61:0e:0a:a1:92:d4:0d:2d:85:e0:95:dc:51:07:20:
77:54:b4:cd:29:68:4f:66:65:7d:c0:31:ef:97:2c:c3:af:81:
a8:d6:2c:c3:fa:31:67:bb:37:38:1f:f4:da:a6:e8:a4:70:cd:
bf:a8:0e:54:ac:4a:4d:9a:0c:fa:46:a4:08:50:e0:6e:64:24:
d0:c1:f1:04:9e:74:b9:6d:b0:7c:56:d5:bd:9a:34:31:52:76:
09:7a:db:64:79:a1:14:c0:00:b2:b7:7a:d5:6e:5b:18:4b:a3:
07:2b:a1:3e:64:3a:8e:85:13:47:63:82:82:04:e9:14:c0:de:
cd:97:8d:44:1b:a3:2a:49:eb:93:3b:ab:20:4a:d7:56:16:c4:
93:27:54:67:e2:d6:a5:c5:89:80:42:cb:5b:6c:23:38:7b:8a:
70:b5:6e:ea:b6:9c:54:c7:7c:5f:b0:b9:4f:4c:f9:f6:3b:59:
19:91:af:9e:71:8d:d1:b5:da:69:8c:18:72:58:b8:ca:cb:bd:
36:99:24:2d:32:e6:de:70:46:87:09:b0:68:13:6f:6a:62:e4:
a3:b0:f4:e3:5e:dc:6d:6b:34:ff:dc:82:75:ba:17:2b:cb:30:
ad:e8:37:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:14 2026 by rpki-client