Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/gHV84Ce0tQPq0MuD_bkU9QPAns4.roa
File: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (raw, json)
Hash identifier: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=
Subject key identifier: 80:75:7C:E0:27:B4:B5:03:EA:D0:CB:83:FD:B9:14:F5:03:C0:9E:CE
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 019E7FBEBCA8133714DBD7316F6B3D9726FA
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/gHV84Ce0tQPq0MuD_bkU9QPAns4.roa
Signing time: Sun 31 May 2026 20:34:26 +0000
ROA not before: Sun 31 May 2026 20:34:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56815
IP address blocks: 81.31.228.0/24 maxlen: 24
81.31.230.0/24 maxlen: 24
81.31.238.0/24 maxlen: 24
2a05:a6c7:ffff:ff00::/56 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7f:be:bc:a8:13:37:14:db:d7:31:6f:6b:3d:97:26:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: May 31 20:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80757ce027b4b503ead0cb83fdb914f503c09ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:a9:5e:f3:ff:87:6e:26:5f:3e:e7:0d:bc:
ed:9e:5c:74:b5:1e:23:5a:99:fb:3c:16:ad:bb:be:
b1:7f:85:bf:d6:0b:35:6e:b1:77:f1:ba:a7:21:5b:
91:9e:39:50:09:f6:66:0c:48:b7:68:c4:3d:48:36:
29:d4:88:98:a5:fd:3a:4d:09:32:f8:2e:a8:a0:8e:
0a:6b:1f:94:18:24:b7:ed:57:de:d9:f0:d7:97:38:
6e:bf:67:ab:69:2d:8f:bd:b0:c3:d5:6d:33:ce:92:
90:c9:5f:a9:80:2c:cc:6f:5a:34:f5:86:c3:b8:24:
40:2f:70:c0:92:33:63:13:af:04:f4:1d:f1:f7:ed:
c7:92:82:d0:3d:d7:e5:94:84:5f:fe:7e:92:d4:1c:
c0:e6:49:59:3a:a3:c1:2b:a0:37:f5:b5:ae:92:f3:
44:92:13:92:33:61:28:40:1d:3b:5d:a5:fb:d2:ea:
bc:3a:77:5c:af:61:08:85:17:e0:5a:e6:1f:41:e2:
1a:b3:18:23:16:e3:c6:e2:b7:80:0c:b6:78:31:56:
e8:af:1f:c3:1d:a0:f0:3c:c1:82:34:cd:e9:bf:e3:
5f:9b:f9:b3:3b:dc:3d:fe:86:04:08:97:be:06:e1:
c2:0e:eb:e9:db:0b:b1:df:0a:38:21:c4:fa:15:b3:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:75:7C:E0:27:B4:B5:03:EA:D0:CB:83:FD:B9:14:F5:03:C0:9E:CE
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/gHV84Ce0tQPq0MuD_bkU9QPAns4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.228.0/24
81.31.230.0/24
81.31.238.0/24
IPv6:
2a05:a6c7:ffff:ff00::/56
Signature Algorithm: sha256WithRSAEncryption
58:ee:c7:6a:b4:23:48:5a:60:e6:a0:38:e0:25:fa:07:c7:87:
1e:7f:2e:a5:40:80:31:44:79:df:9b:c4:7b:ab:8b:c0:0a:09:
15:93:78:5c:64:ed:40:6f:0c:cb:0e:5a:00:cd:14:57:4d:af:
ff:a2:ab:ca:2f:11:ef:2e:1d:26:fa:a5:11:ab:a1:73:f3:40:
ec:0b:97:d2:f1:3c:47:1e:79:15:05:5d:87:87:74:da:69:67:
31:b1:df:6c:55:6d:4d:7f:52:cc:aa:cf:a4:45:93:a4:30:85:
0e:e4:14:45:92:ca:49:b4:31:c1:d8:3d:1e:72:cc:41:d0:6a:
48:f5:dd:25:8b:38:4d:fc:37:a0:84:21:da:d1:6d:9e:34:fa:
70:00:c0:43:de:30:3e:60:0f:8e:da:5b:bf:12:0f:74:43:2b:
b5:65:72:e0:5c:04:69:4d:d7:25:c2:01:17:86:d2:51:6d:76:
9d:ea:94:1e:94:8a:09:50:25:3c:b3:e9:e4:e5:9f:f3:82:56:
33:18:2c:c6:29:12:70:74:c7:6b:df:1d:63:6e:28:0a:7b:cc:
98:b7:36:d9:4f:38:2d:26:0f:2e:10:aa:37:f2:bd:e3:3a:62:
08:22:b4:7f:90:7a:16:e5:3c:88:dc:02:d1:54:54:d7:42:b3:
0e:5a:8a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:00:00 2026 by rpki-client