Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/56UV3dmZd6L7a1EEbhnlkQGlQqU.roa
File: 56UV3dmZd6L7a1EEbhnlkQGlQqU.roa (raw, json)
Hash identifier: iXVsroKD30ZYmhZFV9knb8fHuVKnNjiDnYvFlpMVSIU=
Subject key identifier: E7:A5:15:DD:D9:99:77:A2:FB:6B:51:04:6E:19:E5:91:01:A5:42:A5
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 019E8DB59C60CAE2589E73E4B20AEEE4ACAD
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/56UV3dmZd6L7a1EEbhnlkQGlQqU.roa
Signing time: Wed 03 Jun 2026 13:39:10 +0000
ROA not before: Wed 03 Jun 2026 13:39:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24685
IP address blocks: 31.172.136.0/23 maxlen: 32
31.172.136.0/24 maxlen: 32
31.172.137.0/24 maxlen: 32
31.172.140.0/24 maxlen: 32
31.172.141.0/24 maxlen: 32
80.92.231.0/24 maxlen: 32
80.92.233.0/24 maxlen: 32
80.92.234.0/24 maxlen: 32
80.92.235.0/24 maxlen: 32
82.117.229.0/24 maxlen: 32
82.117.244.0/24 maxlen: 32
85.90.211.0/24 maxlen: 32
85.90.223.0/24 maxlen: 32
91.226.1.0/24 maxlen: 32
92.60.178.0/23 maxlen: 32
92.60.179.0/24 maxlen: 32
128.0.170.0/24 maxlen: 32
128.0.172.0/24 maxlen: 32
128.0.174.0/24 maxlen: 32
185.38.209.0/24 maxlen: 32
185.39.196.0/24 maxlen: 32
185.45.244.0/22 maxlen: 32
185.45.245.0/24 maxlen: 32
185.45.246.0/24 maxlen: 32
185.170.195.0/24 maxlen: 32
193.111.0.0/24 maxlen: 32
193.111.48.0/23 maxlen: 32
212.110.134.0/23 maxlen: 32
212.110.152.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:b5:9c:60:ca:e2:58:9e:73:e4:b2:0a:ee:e4:ac:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Jun 3 13:39:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7a515ddd99977a2fb6b51046e19e59101a542a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:4b:e3:98:e2:11:0e:a6:af:9c:7a:75:9b:
d6:a5:12:c4:29:a5:4a:73:4b:2a:1e:34:22:a8:c1:
2b:6e:45:38:c9:ff:15:4e:88:3a:e1:74:74:d5:d4:
02:7a:5c:36:6b:74:55:74:b2:f0:1e:0c:c9:80:42:
a4:d6:a7:8d:d8:d5:21:00:55:0b:f6:09:c3:8e:2b:
a6:78:f1:2b:a3:24:56:aa:35:85:32:44:76:a6:a0:
8c:ae:e0:53:e9:23:0c:8c:85:1a:4f:de:9c:30:a7:
4f:9f:5c:37:04:99:17:df:a9:a5:d4:9f:b0:20:ec:
70:74:bf:39:34:ce:93:16:c7:1d:7a:70:1f:63:39:
1e:5f:c7:5d:06:1e:29:dd:24:f4:46:1f:1b:8b:67:
3c:58:2f:de:37:a6:21:58:34:ca:3c:3c:5a:67:6d:
45:f0:bc:b3:99:c6:bb:a0:f9:63:35:93:4c:0d:43:
d9:04:38:05:36:bd:c5:b8:ee:9d:f3:bf:34:0e:1f:
02:a3:77:bf:71:d7:2e:b6:92:f0:67:88:ce:6e:a0:
ab:33:38:d4:db:fb:38:14:8d:04:0a:c3:bf:82:f3:
2e:7e:e0:b1:ae:88:f3:73:17:a0:e7:08:9c:57:26:
4d:49:a4:9f:df:b7:8d:9f:76:91:a8:e9:f3:b7:7d:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A5:15:DD:D9:99:77:A2:FB:6B:51:04:6E:19:E5:91:01:A5:42:A5
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/56UV3dmZd6L7a1EEbhnlkQGlQqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.136.0/23
31.172.140.0/23
80.92.231.0/24
80.92.233.0-80.92.235.255
82.117.229.0/24
82.117.244.0/24
85.90.211.0/24
85.90.223.0/24
91.226.1.0/24
92.60.178.0/23
128.0.170.0/24
128.0.172.0/24
128.0.174.0/24
185.38.209.0/24
185.39.196.0/24
185.45.244.0/22
185.170.195.0/24
193.111.0.0/24
193.111.48.0/23
212.110.134.0/23
212.110.152.0/23
Signature Algorithm: sha256WithRSAEncryption
21:a8:52:d3:53:db:96:51:ad:4b:2d:8c:c5:26:1d:c2:e6:3f:
69:35:63:e6:fa:4d:ea:d4:db:22:53:d9:39:55:08:00:23:d7:
d8:2f:81:a6:9f:39:7b:33:9c:61:7d:54:fa:a4:cb:2c:ae:6b:
d0:2c:1a:f7:75:e5:ba:b4:0a:cb:8a:a6:05:2e:84:2b:51:02:
86:b7:13:06:c6:07:0a:1d:3a:92:c2:a0:d8:93:66:4e:08:ce:
b8:21:02:47:74:e0:18:a4:6e:a8:6f:20:df:62:33:6c:14:06:
47:f8:4e:24:05:68:38:6b:de:9c:95:76:16:3d:ae:e0:d3:e6:
82:26:e6:8a:5c:b8:0e:66:29:52:eb:b2:bd:11:d4:10:a1:10:
8e:fe:42:e3:fb:7f:d4:52:44:09:5b:db:75:e8:eb:b8:ea:9a:
1a:ee:d5:e8:d5:17:df:97:3f:8d:7e:b9:d7:6c:5b:a8:68:5a:
71:b4:ec:e7:6b:34:41:7f:af:69:95:2d:0d:ff:58:8f:d5:16:
e2:e1:29:e4:a8:9a:54:68:c7:62:07:6b:0b:94:e0:fa:5f:c6:
26:f4:85:4c:09:d2:0e:fe:40:ac:31:14:d6:82:db:b7:66:0b:
6d:a8:e7:48:2d:7c:c7:5e:05:55:20:b1:82:42:3e:a8:a2:a1:
c5:4c:8f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:01:34 2026 by rpki-client