Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/EDn6jQwDUb3_g3td9FsRuFag4vc.roa
File: EDn6jQwDUb3_g3td9FsRuFag4vc.roa (raw, json)
Hash identifier: odWjY9IlQTpSIG4MhA9Jlqnd2G5ltLMnoOP98UOiafU=
Subject key identifier: 10:39:FA:8D:0C:03:51:BD:FF:83:7B:5D:F4:5B:11:B8:56:A0:E2:F7
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 01A09079F7A9A4229E5BCF320BEF8E9DD131
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/EDn6jQwDUb3_g3td9FsRuFag4vc.roa
Signing time: Fri 11 Sep 2026 12:38:27 +0000
ROA not before: Fri 11 Sep 2026 12:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 78.40.216.0/24 maxlen: 24
85.193.92.0/24 maxlen: 24
85.193.93.0/24 maxlen: 24
85.193.95.0/24 maxlen: 24
90.156.231.0/24 maxlen: 24
176.57.212.0/24 maxlen: 24
185.104.112.0/24 maxlen: 24
185.104.115.0/24 maxlen: 24
185.247.18.0/24 maxlen: 24
185.247.19.0/24 maxlen: 24
188.225.14.0/24 maxlen: 24
194.35.117.0/24 maxlen: 24
217.151.229.0/24 maxlen: 24
217.151.231.0/24 maxlen: 24
2a03:6f02::/48 maxlen: 128
2a03:6f02::/64 maxlen: 64
2a03:6f02:1::/48 maxlen: 128
2a03:6f02:2::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:79:f7:a9:a4:22:9e:5b:cf:32:0b:ef:8e:9d:d1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Sep 11 12:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1039fa8d0c0351bdff837b5df45b11b856a0e2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:16:1e:18:cc:44:ea:2e:c1:8c:b7:6e:58:97:
17:b5:91:9d:17:ba:8b:67:db:49:9d:fe:df:cf:28:
52:4e:10:f2:21:eb:64:99:48:46:f2:c1:34:a8:68:
32:1d:f6:4d:fd:6b:b9:d5:67:bb:ab:40:65:52:86:
71:d0:82:29:cb:0b:d4:77:00:d1:6c:9b:c7:58:3e:
5e:27:6f:98:1c:8c:08:f2:75:7d:8e:4e:92:e5:02:
e8:2b:03:64:e0:2e:35:40:08:25:cb:85:4a:25:72:
7d:e9:fa:21:d7:8f:ac:42:66:90:cd:6a:1b:61:57:
25:79:99:c3:23:03:03:6e:14:77:ee:86:d2:b6:58:
d3:88:65:7f:82:d5:8b:a0:6d:d6:f5:71:bf:7a:c0:
78:38:ba:57:f5:fc:28:bf:5c:e3:82:c5:b5:1a:20:
f5:46:03:57:0a:1a:79:85:9a:7d:6e:04:fd:0c:ef:
03:e5:14:9b:25:47:c1:11:11:15:72:a5:58:85:d8:
0d:1e:3c:12:ed:3f:3d:b2:2d:41:37:16:21:8d:27:
03:8a:b1:b2:60:20:ae:8e:b0:69:10:6a:7a:78:80:
18:71:f7:ca:de:08:9e:d3:c0:9a:db:42:11:83:f5:
8b:b9:d5:49:c4:c8:0e:73:2e:8e:62:99:c2:05:43:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:39:FA:8D:0C:03:51:BD:FF:83:7B:5D:F4:5B:11:B8:56:A0:E2:F7
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/EDn6jQwDUb3_g3td9FsRuFag4vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.216.0/24
85.193.92.0/23
85.193.95.0/24
90.156.231.0/24
176.57.212.0/24
185.104.112.0/24
185.104.115.0/24
185.247.18.0/23
188.225.14.0/24
194.35.117.0/24
217.151.229.0/24
217.151.231.0/24
IPv6:
2a03:6f02::-2a03:6f02:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
27:4a:9c:37:68:16:1e:6e:48:9d:36:47:7e:be:64:be:a4:0c:
8c:b0:51:3c:5f:45:7d:01:79:2f:ea:0a:33:03:74:77:ce:b0:
76:8f:91:ca:a0:39:7f:04:5a:73:fe:da:57:e3:3c:3d:ee:77:
98:01:45:50:95:95:66:aa:74:3b:9e:26:54:20:d8:e3:88:04:
af:13:85:f9:d9:81:e5:2c:4a:6d:5d:9f:32:4a:b3:a4:d7:17:
06:4d:81:e5:33:ec:65:d5:62:61:97:b3:c3:43:5a:09:ce:71:
9d:ca:bd:7c:37:16:c2:7d:38:5e:17:60:44:29:94:8d:74:11:
7a:fb:35:07:6f:ee:d2:79:76:65:07:a7:3a:a5:54:61:68:21:
69:ef:9f:2a:22:b9:4c:46:46:bb:7a:ce:8f:58:11:65:d6:d4:
8a:34:75:90:8d:e4:b5:6a:73:7d:5b:0c:5d:ac:a4:d4:40:d5:
c3:c9:8f:0e:8e:65:0b:be:70:86:a6:05:da:99:3d:bb:4d:63:
8e:06:17:6b:a5:e2:e7:33:07:2c:a2:8f:7c:fb:d4:a8:41:5e:
48:5b:d2:5f:a6:63:23:56:ca:03:b1:15:6e:7d:8c:21:cc:50:
9f:48:a9:6f:36:6d:41:1d:f0:f8:ae:9c:e7:45:ee:97:49:d6:
52:25:e4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:35:55 2026 by rpki-client