Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/6a0y2qgU9SH3axH-3w62evXmsdU.roa
File: 6a0y2qgU9SH3axH-3w62evXmsdU.roa (raw, json)
Hash identifier: dnQtTbq4q4h1CWH3DlNT5R7u7sqbhjSS2ea4G+CLRGw=
Subject key identifier: E9:AD:32:DA:A8:14:F5:21:F7:6B:11:FE:DF:0E:B6:7A:F5:E6:B1:D5
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A1895CEB273A9D1BF2B216271D35EC72A7
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/6a0y2qgU9SH3axH-3w62evXmsdU.roa
Signing time: Thu 29 Oct 2026 20:32:10 +0000
ROA not before: Thu 29 Oct 2026 20:32:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 31.40.192.0/24 maxlen: 24
31.40.194.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.140.7.0/24 maxlen: 24
45.152.138.0/24 maxlen: 24
45.154.120.0/22 maxlen: 24
77.83.21.0/24 maxlen: 24
77.83.22.0/24 maxlen: 24
77.83.48.0/24 maxlen: 24
77.83.49.0/24 maxlen: 24
77.83.50.0/23 maxlen: 24
80.243.230.0/23 maxlen: 24
84.252.64.0/24 maxlen: 24
84.252.65.0/24 maxlen: 24
86.62.53.0/24 maxlen: 24
86.62.54.0/24 maxlen: 24
86.62.55.0/24 maxlen: 24
88.218.81.0/24 maxlen: 24
88.218.82.0/23 maxlen: 24
91.132.126.0/24 maxlen: 24
91.132.127.0/24 maxlen: 24
91.245.238.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
95.214.94.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
95.214.244.0/22 maxlen: 24
176.113.40.0/23 maxlen: 24
176.113.42.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
176.118.190.0/24 maxlen: 24
176.118.191.0/24 maxlen: 24
185.155.100.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
185.177.78.0/23 maxlen: 24
193.9.56.0/24 maxlen: 24
193.9.57.0/24 maxlen: 24
193.9.58.0/24 maxlen: 24
193.9.59.0/24 maxlen: 24
193.31.124.0/23 maxlen: 24
193.47.36.0/22 maxlen: 24
193.160.69.0/24 maxlen: 24
193.160.74.0/24 maxlen: 24
193.160.75.0/24 maxlen: 24
193.228.48.0/24 maxlen: 24
193.228.49.0/24 maxlen: 24
193.228.50.0/24 maxlen: 24
193.228.51.0/24 maxlen: 24
194.53.188.0/22 maxlen: 24
194.104.4.0/24 maxlen: 24
194.104.7.0/24 maxlen: 24
194.124.41.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
213.109.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:5c:eb:27:3a:9d:1b:f2:b2:16:27:1d:35:ec:72:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 29 20:32:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9ad32daa814f521f76b11fedf0eb67af5e6b1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:16:95:15:77:59:7b:f8:f8:84:7a:40:b0:e0:
6e:65:25:cc:13:bf:8c:94:4d:83:a2:80:45:1c:f1:
b4:da:b7:6c:c2:98:53:64:69:55:da:36:ed:e1:47:
a0:f4:07:ea:61:95:c8:37:bd:bb:74:63:ee:ff:18:
63:d5:bc:50:1f:23:bf:1e:e6:3e:56:1e:da:36:dd:
d5:08:39:51:81:66:61:83:79:01:bf:7c:6c:6f:08:
3d:a3:f3:e8:45:ae:71:d8:e3:ac:97:b2:d4:de:98:
4b:2c:06:39:b4:65:72:c3:e2:0b:d0:71:2d:1a:3c:
09:e9:43:84:73:3c:4b:61:36:90:5d:ec:7a:0f:83:
2f:d4:ba:46:6d:eb:36:74:9c:1f:00:4d:d3:fa:b6:
0a:7c:ea:ba:c7:86:f4:56:18:c6:4f:b6:c3:ea:5a:
4c:21:24:af:12:3e:a5:38:e8:19:08:82:a1:8f:bb:
bb:57:11:1c:e7:0d:3d:ed:fe:ee:d6:c0:77:f0:be:
ca:71:76:a1:c5:9e:f5:04:7d:cd:72:18:9e:40:3d:
d2:28:21:8b:6a:0d:9b:0d:3e:82:46:87:5a:a0:e7:
46:24:fa:17:f6:f5:da:d6:22:cd:50:49:5d:2b:60:
7e:e3:19:66:2b:68:89:44:9c:c3:96:ac:90:41:5e:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AD:32:DA:A8:14:F5:21:F7:6B:11:FE:DF:0E:B6:7A:F5:E6:B1:D5
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/6a0y2qgU9SH3axH-3w62evXmsdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.192.0/24
31.40.194.0/24
45.130.184.0/23
45.140.7.0/24
45.152.138.0/24
45.154.120.0/22
77.83.21.0-77.83.22.255
77.83.48.0/22
80.243.230.0/23
84.252.64.0/23
86.62.53.0-86.62.55.255
88.218.81.0-88.218.83.255
91.132.126.0/23
91.245.238.0/23
95.214.93.0-95.214.95.255
95.214.244.0/22
176.113.40.0-176.113.42.255
176.118.188.0/24
176.118.190.0/23
185.155.100.0/24
185.177.77.0-185.177.79.255
193.9.56.0/22
193.31.124.0/23
193.47.36.0/22
193.160.69.0/24
193.160.74.0/23
193.228.48.0/22
194.53.188.0/22
194.104.4.0/24
194.104.7.0/24
194.124.41.0/24
212.69.133.0/24
213.109.188.0/22
Signature Algorithm: sha256WithRSAEncryption
99:39:b5:db:39:35:e3:4f:ae:97:9e:d4:32:ef:0f:9c:fb:9d:
8f:b9:ff:98:1f:52:5d:67:9c:74:d9:98:f2:41:e8:f4:ec:64:
2b:f0:d4:9c:9d:74:4d:ab:fe:62:6a:a5:79:33:eb:2f:ac:b4:
8d:22:bb:25:03:d1:76:96:6a:73:67:3a:2e:76:3e:66:f3:7f:
61:75:38:cd:79:35:a4:9d:64:51:42:30:4e:ea:31:28:05:83:
e9:bb:40:3e:97:83:da:13:27:ef:52:16:0f:70:0f:af:17:8f:
a6:f2:34:17:50:d7:e4:11:11:21:fb:99:ec:29:00:53:76:c8:
94:2f:ed:34:f7:ef:c3:f6:66:06:79:c4:ce:29:16:0d:bf:72:
19:4e:3e:2f:a5:6a:6e:bd:e9:ec:b5:e2:68:45:7b:56:db:77:
85:8e:0d:5f:f7:25:5e:69:3c:b9:47:98:44:38:4f:ef:d6:27:
95:2f:31:a0:74:ef:06:5d:ef:ec:86:72:6b:3a:e3:96:27:b7:
69:1e:fd:7e:2c:66:c6:a4:28:aa:db:6c:2c:64:fc:1f:c8:ee:
c3:86:a0:66:b9:b2:f9:a5:2e:cb:31:06:c3:3d:69:e2:a4:9c:
02:62:91:b0:cd:84:c7:73:50:e1:c5:ec:d9:41:2c:39:f7:38:
36:c9:81:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:08:14 2026 by rpki-client