Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/cE-3JlgsaW1G6uxzWM25DW-c8rQ.roa
File: cE-3JlgsaW1G6uxzWM25DW-c8rQ.roa (raw, json)
Hash identifier: M9oUYIkckIDsB1IKjs8KpGweqbN0nhGBpxFT1OmCdQY=
Subject key identifier: 70:4F:B7:26:58:2C:69:6D:46:EA:EC:73:58:CD:B9:0D:6F:9C:F2:B4
Certificate issuer: /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial: 01A0C2F7123AF6C6955A91F0DAEA9B699C0E
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/cE-3JlgsaW1G6uxzWM25DW-c8rQ.roa
Signing time: Mon 21 Sep 2026 07:56:06 +0000
ROA not before: Mon 21 Sep 2026 07:56:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35790
IP address blocks: 185.31.140.0/22 maxlen: 24
185.57.84.0/22 maxlen: 24
185.105.244.0/22 maxlen: 24
185.217.224.0/22 maxlen: 24
213.204.192.0/20 maxlen: 24
213.204.208.0/20 maxlen: 24
213.204.224.0/20 maxlen: 24
213.204.240.0/21 maxlen: 24
213.204.248.0/22 maxlen: 24
213.204.252.0/22 maxlen: 24
2a0b:cdc0::/29 maxlen: 29
2a0b:cdc0::/32 maxlen: 32
2a0b:cdc1::/32 maxlen: 32
2a0b:cdc2::/32 maxlen: 32
2a0b:cdc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:f7:12:3a:f6:c6:95:5a:91:f0:da:ea:9b:69:9c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Validity
Not Before: Sep 21 07:56:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=704fb726582c696d46eaec7358cdb90d6f9cf2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:55:cd:c4:6d:a1:cf:e2:e6:50:76:25:71:
76:84:f5:d4:43:9e:2d:85:1b:99:28:6c:a8:0d:05:
b1:4c:56:d7:b0:bf:af:8a:4b:53:dc:41:5e:f0:29:
22:ae:f1:24:1e:25:5a:9d:30:21:ee:45:a8:b7:29:
6b:75:6d:e5:11:6f:0c:e2:1a:a2:e3:b6:2a:74:79:
17:c4:25:8c:55:1d:51:e2:6f:83:e1:42:2b:c9:62:
98:55:0a:b8:9b:f0:dc:c4:8a:8c:76:ec:d7:18:c6:
7d:75:e7:3a:da:13:94:41:75:54:2f:23:1a:ec:20:
92:a0:d1:b9:c2:e4:2f:04:f3:3e:bd:4e:f6:7f:2f:
05:ac:9a:2b:7a:7e:90:63:7b:c7:b3:09:0a:5a:90:
ed:c4:da:95:23:28:0d:68:5d:08:13:dc:d3:c4:12:
55:c1:00:b0:66:25:12:6a:b7:b2:f8:1f:78:7f:cc:
93:92:02:b7:f3:ba:ea:49:24:91:21:1b:d9:28:c7:
d2:cf:28:05:64:47:e1:ef:d3:a1:a1:a8:8d:cb:10:
f1:74:63:1a:0b:30:b5:72:46:78:65:3d:4f:f0:eb:
33:53:e8:36:a9:ab:f5:f6:37:ff:95:06:38:2e:79:
9b:b0:c2:16:6b:73:a8:6a:4b:41:33:70:0b:82:e6:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4F:B7:26:58:2C:69:6D:46:EA:EC:73:58:CD:B9:0D:6F:9C:F2:B4
X509v3 Authority Key Identifier:
keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/cE-3JlgsaW1G6uxzWM25DW-c8rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.140.0/22
185.57.84.0/22
185.105.244.0/22
185.217.224.0/22
213.204.192.0/18
IPv6:
2a0b:cdc0::/29
Signature Algorithm: sha256WithRSAEncryption
27:c5:25:11:4f:8e:e4:01:19:d5:57:2d:1a:a5:34:8b:d0:9e:
04:2e:07:72:61:9c:e1:c3:f9:45:0c:a4:85:e0:14:9c:97:f5:
64:f5:fa:34:6f:c2:8f:fd:20:c7:52:0f:15:53:ed:15:6e:8c:
9a:cb:db:d2:8f:4f:5c:58:8a:29:b5:fc:87:97:49:44:1d:4b:
46:90:96:2e:85:74:85:f2:86:eb:40:d9:9d:ed:95:7a:9a:20:
26:41:23:df:cb:a4:02:3f:92:b3:69:5a:b0:90:55:a5:f8:fe:
41:c4:39:42:92:41:ae:5e:14:9a:c2:67:d5:6a:ea:87:a3:3a:
ae:83:1e:45:6c:d8:01:1c:f3:b1:26:1c:11:df:31:60:73:c3:
40:41:9c:ef:2c:e1:c7:bc:6d:e7:ad:b3:8a:ca:85:e4:d9:ba:
d8:4d:e4:76:36:ea:b7:97:aa:38:52:74:f2:41:1b:fd:4f:be:
d7:e0:86:41:e5:e2:d6:af:75:bc:b1:32:76:74:6a:6b:0c:ef:
c5:cd:5d:49:11:11:da:15:ec:a1:a9:2c:b6:dd:fc:54:19:ef:
b7:24:91:24:20:8b:34:7d:e4:63:28:8e:93:7e:a6:51:ce:32:
01:c7:7d:8a:ea:15:21:e5:89:10:b2:68:b6:d0:49:5c:d2:40:
04:14:cb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:47:35 2026 by rpki-client