Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/gHMPiXlYiR1x4sp7jOG4nP5jGK0.roa
File: gHMPiXlYiR1x4sp7jOG4nP5jGK0.roa (raw, json)
Hash identifier: 5XQJ6M+b3MHT2W1uXJ+885106HdpcwsdlORrc/CZ+DA=
Subject key identifier: 80:73:0F:89:79:58:89:1D:71:E2:CA:7B:8C:E1:B8:9C:FE:63:18:AD
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019C629405461AED94166558825C274FE9C5
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/gHMPiXlYiR1x4sp7jOG4nP5jGK0.roa
Signing time: Sun 15 Feb 2026 18:33:13 +0000
ROA not before: Sun 15 Feb 2026 18:33:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 31.40.194.0/24 maxlen: 24
45.154.120.0/22 maxlen: 24
77.83.48.0/24 maxlen: 24
77.83.49.0/24 maxlen: 24
77.83.50.0/23 maxlen: 24
80.243.230.0/23 maxlen: 24
86.62.53.0/24 maxlen: 24
86.62.54.0/24 maxlen: 24
86.62.55.0/24 maxlen: 24
88.218.81.0/24 maxlen: 24
88.218.82.0/23 maxlen: 24
91.132.126.0/24 maxlen: 24
91.132.127.0/24 maxlen: 24
91.245.238.0/24 maxlen: 24
93.177.92.0/24 maxlen: 24
93.177.93.0/24 maxlen: 24
95.214.244.0/22 maxlen: 24
176.113.40.0/23 maxlen: 24
185.155.100.0/24 maxlen: 24
185.177.78.0/23 maxlen: 24
193.9.56.0/24 maxlen: 24
193.9.57.0/24 maxlen: 24
193.9.58.0/24 maxlen: 24
193.9.59.0/24 maxlen: 24
193.31.124.0/23 maxlen: 24
193.47.36.0/22 maxlen: 24
193.160.74.0/24 maxlen: 24
193.160.75.0/24 maxlen: 24
194.53.188.0/22 maxlen: 24
194.104.4.0/24 maxlen: 24
194.104.7.0/24 maxlen: 24
194.124.41.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
213.109.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:62:94:05:46:1a:ed:94:16:65:58:82:5c:27:4f:e9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Feb 15 18:33:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80730f897958891d71e2ca7b8ce1b89cfe6318ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:27:0a:b7:5f:f1:d1:88:b6:ee:0f:e9:6d:
d8:6a:89:45:f4:4d:dd:2a:23:67:23:83:4d:49:f6:
58:68:75:80:6e:0b:3d:cd:54:ae:01:cc:5d:b6:ca:
69:b3:78:be:02:bd:f9:86:1c:ec:45:f7:be:71:f9:
49:68:83:71:0e:94:a7:46:0c:4d:59:bc:f1:62:97:
2b:72:e8:6e:e7:69:83:94:ca:0e:df:bd:c7:d3:94:
02:03:66:ec:99:30:57:91:62:c7:e5:95:de:d9:4c:
8d:30:11:7d:c8:6e:46:8b:94:0f:5e:62:9c:1f:f9:
78:e9:1b:46:83:18:ef:5a:7a:4a:71:0f:ee:f0:18:
7e:69:66:33:67:64:f2:20:d4:c8:f7:dd:80:62:b1:
e3:49:36:46:82:d9:fc:4b:36:37:6d:62:dd:7e:58:
08:49:eb:f2:11:f1:4a:d7:f6:98:3f:34:3a:e3:4e:
06:2b:bd:fa:11:0b:a9:74:6d:09:e8:3e:ba:cd:9c:
32:ec:1f:40:99:e8:93:1c:c9:30:90:06:50:08:fe:
09:cf:a2:f7:48:5a:48:5e:e8:72:04:dc:c1:10:25:
39:be:bb:2e:70:1d:67:c6:3b:74:e5:2d:0f:e4:81:
89:ed:08:91:ba:c8:14:b3:60:71:92:dd:da:36:6a:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:73:0F:89:79:58:89:1D:71:E2:CA:7B:8C:E1:B8:9C:FE:63:18:AD
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/gHMPiXlYiR1x4sp7jOG4nP5jGK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.194.0/24
45.154.120.0/22
77.83.48.0/22
80.243.230.0/23
86.62.53.0-86.62.55.255
88.218.81.0-88.218.83.255
91.132.126.0/23
91.245.238.0/24
93.177.92.0/23
95.214.244.0/22
176.113.40.0/23
185.155.100.0/24
185.177.78.0/23
193.9.56.0/22
193.31.124.0/23
193.47.36.0/22
193.160.74.0/23
194.53.188.0/22
194.104.4.0/24
194.104.7.0/24
194.124.41.0/24
212.69.133.0/24
213.109.188.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:02:96:c3:2a:b9:14:63:be:ad:ab:d6:49:26:11:a1:8c:34:
a0:f0:65:22:c5:1d:9a:df:7e:65:fd:c7:c0:a0:ad:df:4b:b6:
1e:85:62:7a:6e:67:12:34:bb:60:b9:d4:52:e3:46:17:d1:35:
cd:9a:f0:22:76:fb:22:6b:29:35:5e:f8:2d:df:58:a5:90:9e:
14:0e:3b:70:a0:e4:37:eb:b0:5c:5d:1f:7b:a5:ae:87:aa:a9:
38:4d:62:77:a3:05:93:32:dd:db:fa:a2:4f:50:8e:65:f0:cd:
66:1d:35:d9:5c:be:2a:02:7b:a7:50:ab:b4:e2:20:b6:6f:47:
b0:f2:f7:fb:1a:a6:c6:70:ae:d0:8f:bb:2b:32:4c:4e:83:38:
28:8e:0d:97:1e:fe:5d:10:5b:72:bc:8e:6f:f0:00:e7:9c:04:
da:0a:82:ec:2c:09:71:ad:7e:eb:ec:c2:d4:69:84:74:98:52:
be:46:b3:8b:ff:3d:0c:b3:28:17:9c:0b:d3:ba:77:ce:d2:a9:
1c:84:b2:bb:94:a1:66:56:1f:c7:92:e4:57:6e:b6:68:96:e7:
4c:f6:0f:d9:5a:fe:1e:a8:bf:33:3f:37:e2:c8:07:29:a9:b5:
b3:2a:1d:44:e2:32:1b:f6:df:6e:0e:1d:b7:b1:93:2d:3e:e2:
41:f3:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:19:47 2026 by rpki-client