Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/eBweehnas2GuYAkSvkjux9Urb4c.roa
File: eBweehnas2GuYAkSvkjux9Urb4c.roa (raw, json)
Hash identifier: IsQNoxMmS7cT90e/s39/DMNKBqXUlPxHH++DtrM+I00=
Subject key identifier: 78:1C:1E:7A:19:DA:B3:61:AE:60:09:12:BE:48:EE:C7:D5:2B:6F:87
Certificate issuer: /CN=d75e5d507257475f7281230654b39870fa4969dc
Certificate serial: 01A090B74EC306A364347FB5A64E580B2985
Authority key identifier: D7:5E:5D:50:72:57:47:5F:72:81:23:06:54:B3:98:70:FA:49:69:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/eBweehnas2GuYAkSvkjux9Urb4c.roa
Signing time: Fri 11 Sep 2026 13:45:27 +0000
ROA not before: Fri 11 Sep 2026 13:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25255
IP address blocks: 46.220.0.0/16 maxlen: 16
77.116.0.0/14 maxlen: 14
77.116.0.0/17 maxlen: 17
77.116.128.0/17 maxlen: 17
77.117.0.0/17 maxlen: 17
77.119.16.0/20 maxlen: 20
77.119.128.0/20 maxlen: 20
77.119.128.0/22 maxlen: 22
77.119.160.0/20 maxlen: 20
77.119.176.0/20 maxlen: 20
77.119.192.0/19 maxlen: 19
77.119.224.0/19 maxlen: 19
81.3.192.0/18 maxlen: 18
81.3.192.0/24 maxlen: 24
81.3.201.0/24 maxlen: 24
81.3.204.0/23 maxlen: 23
81.3.206.0/23 maxlen: 23
81.3.210.0/24 maxlen: 24
81.3.211.0/24 maxlen: 24
91.141.0.0/17 maxlen: 17
91.141.0.0/20 maxlen: 20
91.141.0.0/22 maxlen: 22
91.141.32.0/19 maxlen: 19
91.141.64.0/20 maxlen: 20
91.141.96.0/20 maxlen: 20
91.141.112.0/20 maxlen: 20
94.245.192.0/18 maxlen: 18
94.245.192.0/24 maxlen: 24
109.126.64.0/18 maxlen: 18
178.112.0.0/14 maxlen: 14
178.112.0.0/17 maxlen: 17
178.112.128.0/17 maxlen: 17
178.113.0.0/17 maxlen: 17
178.115.32.0/19 maxlen: 19
178.115.64.0/20 maxlen: 20
178.115.80.0/20 maxlen: 20
178.115.128.0/20 maxlen: 20
178.115.128.0/22 maxlen: 22
178.115.144.0/20 maxlen: 20
178.115.224.0/19 maxlen: 19
178.165.128.0/17 maxlen: 17
178.165.128.0/20 maxlen: 20
178.165.128.0/22 maxlen: 22
178.165.160.0/19 maxlen: 19
178.165.192.0/20 maxlen: 20
178.165.224.0/20 maxlen: 20
178.165.240.0/20 maxlen: 20
194.24.128.0/19 maxlen: 19
194.24.158.0/24 maxlen: 24
194.24.159.0/24 maxlen: 24
213.94.64.0/18 maxlen: 18
213.94.64.0/21 maxlen: 21
213.94.74.64/28 maxlen: 28
213.94.74.80/28 maxlen: 28
213.94.76.0/24 maxlen: 24
213.94.77.0/24 maxlen: 24
213.94.78.0/24 maxlen: 24
213.94.79.0/24 maxlen: 24
213.94.80.0/22 maxlen: 22
213.94.95.0/24 maxlen: 24
213.94.96.0/21 maxlen: 21
2a02:2861::/32 maxlen: 32
2a02:2861:d::/48 maxlen: 48
2a02:2861:e::/48 maxlen: 48
2a02:2864::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.mft
rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:b7:4e:c3:06:a3:64:34:7f:b5:a6:4e:58:0b:29:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75e5d507257475f7281230654b39870fa4969dc
Validity
Not Before: Sep 11 13:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=781c1e7a19dab361ae600912be48eec7d52b6f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:42:bb:dc:50:38:dd:b2:12:b4:a3:8b:1a:
0d:50:e2:4d:69:07:ec:b5:16:20:2d:b1:81:e7:84:
9b:21:4f:fc:e5:13:5f:53:82:63:e2:71:72:0b:99:
73:04:65:97:2c:91:9f:9f:0f:cd:dc:65:b0:10:22:
4f:b9:45:eb:73:45:8b:91:37:5f:73:36:24:8b:7c:
9e:68:b6:ae:fc:6c:29:da:f7:78:21:8b:ef:b3:85:
60:5e:c1:22:d3:1d:40:4e:27:a6:6f:6d:5c:1b:11:
f4:33:8e:7a:63:9e:bf:79:b4:19:59:1f:15:66:97:
93:ec:ac:db:ea:1a:1b:ec:7d:8d:aa:1a:ad:6d:34:
86:12:30:3d:a8:bd:d2:ec:99:32:92:7f:91:60:01:
e2:85:3a:bd:82:ff:4f:1e:31:bc:e0:75:ac:f3:15:
a2:dc:0c:0e:6a:0e:39:9a:50:8e:eb:b2:27:65:23:
b1:fe:62:f8:0b:c2:71:4b:d5:84:3a:f4:b6:2c:a6:
4d:aa:15:e0:fb:14:61:b8:2a:8c:8c:a6:a9:06:a0:
2c:23:f6:ee:91:85:8a:4c:3c:8b:e4:6a:f1:91:e7:
bd:b9:16:c5:8e:49:21:32:46:29:3b:de:bf:77:16:
10:b0:cf:45:05:7b:49:a0:3d:7d:ee:ec:7e:f8:01:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1C:1E:7A:19:DA:B3:61:AE:60:09:12:BE:48:EE:C7:D5:2B:6F:87
X509v3 Authority Key Identifier:
keyid:D7:5E:5D:50:72:57:47:5F:72:81:23:06:54:B3:98:70:FA:49:69:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/eBweehnas2GuYAkSvkjux9Urb4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.220.0.0/16
77.116.0.0/14
81.3.192.0/18
91.141.0.0/17
94.245.192.0/18
109.126.64.0/18
178.112.0.0/14
178.165.128.0/17
194.24.128.0/19
213.94.64.0/18
IPv6:
2a02:2861::/32
2a02:2864::/30
Signature Algorithm: sha256WithRSAEncryption
c4:03:8c:f2:e7:ce:26:18:21:ad:9b:26:6c:7d:bf:7e:f2:09:
d5:a9:7e:b9:97:71:83:e4:c0:9a:a8:d9:52:04:45:13:71:3f:
0a:d0:d3:27:50:4c:16:7f:f7:ac:62:05:6f:ba:75:f1:99:25:
e9:0c:da:e6:50:7b:95:e8:b9:05:f8:d6:f9:9b:3a:7c:83:b3:
df:51:a4:cb:08:73:58:3b:2d:7e:44:65:ab:30:cf:6a:0c:da:
34:32:f9:d0:8b:fc:5b:15:07:6f:6e:fe:e2:9b:34:34:63:4b:
9b:ae:ac:d6:6a:0b:21:6d:1d:88:82:3b:02:5d:22:c2:e9:2e:
b3:f6:01:d7:bf:c7:87:bd:59:86:59:2e:0a:e6:14:d7:fb:f0:
4a:2a:b7:fe:0a:69:f3:fc:85:45:f3:71:09:5a:e7:cf:d5:eb:
99:03:de:1d:47:91:13:9c:7a:fe:60:b4:ff:8c:3e:75:b5:4a:
ae:89:9e:df:93:b1:32:3a:2d:55:cc:78:ad:53:1f:8d:1f:6c:
9b:1b:26:a3:fd:47:b2:2e:74:d8:be:da:8d:bc:6b:f7:8d:10:
70:8d:ac:ec:64:fb:4f:77:34:a2:df:0a:1f:18:a2:4e:99:d9:
c6:94:5a:3c:0d:6c:7d:61:47:4a:0d:3e:b4:ed:69:04:fd:79:
ff:57:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:21:11 2026 by rpki-client