Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/VW0Lme2J_yQgUbH90ybvFY78qnw.roa
File: VW0Lme2J_yQgUbH90ybvFY78qnw.roa (raw, json)
Hash identifier: /vPzz6J6ZRJW/sdj+JpNDbQ6TuWqQBuE3w6F2Mg6BOY=
Subject key identifier: 55:6D:0B:99:ED:89:FF:24:20:51:B1:FD:D3:26:EF:15:8E:FC:AA:7C
Certificate issuer: /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial: 01A0A4D350ED405A57A6D64C30ED0C5B1ED8
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/VW0Lme2J_yQgUbH90ybvFY78qnw.roa
Signing time: Tue 15 Sep 2026 11:28:27 +0000
ROA not before: Tue 15 Sep 2026 11:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34766
IP address blocks: 31.22.84.0/24 maxlen: 24
45.148.186.0/24 maxlen: 24
95.142.110.0/24 maxlen: 24
178.237.34.0/24 maxlen: 24
185.138.56.0/22 maxlen: 22
185.138.56.0/24 maxlen: 24
185.138.57.0/24 maxlen: 24
185.138.58.0/24 maxlen: 24
185.138.59.0/24 maxlen: 24
193.202.88.0/24 maxlen: 24
2a07:a80::/29 maxlen: 29
2a07:a80::/40 maxlen: 40
2a07:a80:100::/40 maxlen: 40
2a07:a80:200::/40 maxlen: 40
2a07:a80:300::/40 maxlen: 40
2a07:a80:b00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:d3:50:ed:40:5a:57:a6:d6:4c:30:ed:0c:5b:1e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Validity
Not Before: Sep 15 11:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=556d0b99ed89ff242051b1fdd326ef158efcaa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:f4:bb:81:31:38:fc:9d:91:7d:8a:8f:a6:
13:10:a2:14:0e:dc:aa:8e:a1:b8:68:20:1b:fd:f4:
27:ce:4e:eb:8e:d5:e7:36:72:f2:10:28:6d:62:46:
b1:5e:0d:d6:0a:11:4f:ae:1c:2f:f0:9e:39:18:01:
15:46:be:99:30:64:93:d5:54:98:cf:60:3a:d1:70:
a7:d6:f3:ea:49:16:16:a2:05:d2:98:e8:a0:05:62:
ad:7b:ac:6c:4c:95:72:01:74:39:66:9a:b3:81:ad:
9d:92:61:9c:e1:a6:17:4c:f8:7b:6b:f3:37:bd:63:
d8:70:a5:2f:a2:93:cb:8d:76:57:9f:23:e1:ba:d7:
61:ba:43:a2:d2:21:69:87:7c:0b:07:8d:db:85:71:
47:f2:4d:35:92:e4:2d:7f:8b:83:09:1a:28:77:2a:
f2:e8:9b:e4:35:42:54:f0:fc:d8:92:c7:30:31:cb:
90:8e:27:12:1b:22:6a:c4:b4:b1:90:4f:e7:56:5f:
86:71:29:01:e5:cd:0c:a1:2e:9d:34:11:d3:8c:f5:
c6:95:a7:2a:a4:be:32:57:f3:67:d2:27:07:2f:9b:
12:50:c3:1c:81:21:8b:15:2f:5d:77:40:32:c4:ed:
dc:8d:b1:a2:32:3e:8b:aa:19:f4:97:77:cf:4b:29:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6D:0B:99:ED:89:FF:24:20:51:B1:FD:D3:26:EF:15:8E:FC:AA:7C
X509v3 Authority Key Identifier:
keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/VW0Lme2J_yQgUbH90ybvFY78qnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.84.0/24
45.148.186.0/24
95.142.110.0/24
178.237.34.0/24
185.138.56.0/22
193.202.88.0/24
IPv6:
2a07:a80::/29
Signature Algorithm: sha256WithRSAEncryption
3f:b6:f6:41:e5:9e:1e:60:9a:be:e6:e3:18:9f:52:17:aa:49:
f9:ae:d4:7b:42:35:cc:d4:2f:1c:3b:51:f4:bc:68:89:70:29:
1f:ac:72:89:cb:dc:7a:73:37:42:36:2a:ab:d7:2a:32:cd:67:
0f:75:e0:5a:74:f9:e6:25:be:81:5a:b9:74:03:1c:35:bb:23:
a5:c1:91:b3:df:42:26:a6:a7:54:0b:88:c2:c4:2f:0a:9a:2e:
8d:b7:f3:7a:78:1a:29:93:02:22:0d:76:3a:d4:82:9b:24:2c:
fa:5e:51:e7:26:63:7e:35:55:b7:bf:a7:96:a0:24:2b:60:14:
ff:76:17:a4:ab:87:47:24:da:79:5d:60:76:65:8f:50:dd:81:
df:c6:fa:34:93:0f:07:38:f5:8c:6e:2e:f5:0e:c6:33:97:05:
41:8d:5a:98:44:31:4f:d6:75:36:11:be:92:e7:07:af:4c:58:
65:32:50:0e:e6:4c:d1:7a:8e:b8:46:76:34:cb:c2:cc:28:7a:
f4:8e:0e:31:68:db:0c:a1:d2:4e:5b:4b:f6:4a:ed:11:91:15:
05:ca:d3:e5:a5:0e:ec:02:17:a2:a1:35:60:2e:3e:26:1f:2f:
3f:58:b7:24:fe:c3:5f:12:44:07:9f:3a:2f:81:30:a2:a8:c2:
67:8d:86:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:14:31 2026 by rpki-client