Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/en1z5XqwuXZZwPfsnhC232LgQj8.roa
File: en1z5XqwuXZZwPfsnhC232LgQj8.roa (raw, json)
Hash identifier: FK4NsqAvy93+OyrIGQKop4SYMauqR9aBZWHN6A3oaMA=
Subject key identifier: 7A:7D:73:E5:7A:B0:B9:76:59:C0:F7:EC:9E:10:B6:DF:62:E0:42:3F
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A160161A201B29D31DA90FE6CF3EBF396C
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/en1z5XqwuXZZwPfsnhC232LgQj8.roa
Signing time: Wed 21 Oct 2026 20:10:23 +0000
ROA not before: Wed 21 Oct 2026 20:10:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 31.40.205.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
212.87.196.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:16:1a:20:1b:29:d3:1d:a9:0f:e6:cf:3e:bf:39:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Oct 21 20:10:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a7d73e57ab0b97659c0f7ec9e10b6df62e0423f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:32:34:2d:e7:9d:31:75:7a:5e:25:13:e1:
e5:44:b6:fc:0c:18:0e:fc:09:13:84:9c:7e:18:71:
2d:ad:2f:84:06:35:84:5b:5e:9f:4d:b4:31:ab:4e:
e6:17:40:79:9e:9e:ec:9c:1c:5f:80:8e:b6:7a:8c:
29:c7:06:d9:93:1e:90:2c:55:60:61:ae:6b:a9:76:
5b:37:26:ef:97:9b:78:3d:33:bc:cb:9c:e5:52:3a:
e0:11:9a:bd:e5:b4:d9:de:d5:c3:d0:f4:aa:8b:85:
c3:59:66:ed:10:f2:38:27:53:41:92:65:3f:94:98:
40:1d:40:f1:b1:82:2a:27:4e:08:d2:f0:1b:cb:25:
20:ae:2d:dc:00:32:6d:30:71:01:bb:c1:f8:4e:fc:
d8:db:ef:80:be:15:52:7e:ae:84:f1:46:59:19:26:
36:3c:be:23:34:89:38:1a:af:d7:a7:df:19:b0:b9:
9f:b2:3c:e3:ee:51:96:6b:22:9b:ef:d7:df:22:2f:
ea:bb:9d:d5:36:d1:49:18:9d:b2:02:41:5a:e6:41:
37:53:81:35:53:17:c4:71:f8:69:d9:8e:66:22:8a:
63:4b:6a:b3:7f:60:41:cc:b6:3a:a4:9b:31:93:18:
ac:03:2f:62:19:82:51:09:2b:b9:d3:b4:27:b0:08:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7D:73:E5:7A:B0:B9:76:59:C0:F7:EC:9E:10:B6:DF:62:E0:42:3F
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/en1z5XqwuXZZwPfsnhC232LgQj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.205.0/24
85.235.73.0-85.235.74.255
193.111.79.0/24
212.87.196.0/24
217.18.208.0/24
Signature Algorithm: sha256WithRSAEncryption
51:28:db:ec:c8:c0:b8:b7:d8:68:c6:d4:f4:ae:ec:10:54:33:
a2:41:ce:9e:11:d9:56:a2:d1:de:70:9c:8d:85:af:43:0d:f8:
e3:c8:b7:22:64:c6:00:ae:2a:37:f6:cc:fb:09:1e:a9:4c:56:
8f:b4:10:82:ed:8e:dd:c8:f1:73:e2:55:4d:d7:28:ac:5e:46:
68:df:5e:ce:e6:a8:79:a9:7e:92:7f:7a:84:fe:ad:31:0e:9b:
59:d5:6d:ef:e9:72:c0:dd:a0:b1:03:8c:ee:70:77:02:ae:70:
b3:0f:da:b8:67:55:f8:c4:bf:bc:1b:27:80:8a:e5:3e:d3:50:
1f:92:9d:b0:49:ad:51:22:45:61:48:4a:e8:1d:46:a6:6c:1d:
26:74:4d:a4:a2:ab:83:9b:96:f7:37:3e:05:1d:29:39:5a:0c:
43:62:7d:19:1b:39:36:ba:23:ba:87:d0:9f:a5:f9:a7:be:e1:
ec:b9:46:6c:ce:00:19:0d:da:f8:15:fc:c3:f8:98:ee:4e:24:
b2:2e:d0:f5:6a:cb:6a:4a:d2:c4:9e:45:44:23:f4:33:c0:9b:
ae:c5:7e:a4:e1:a2:30:f3:61:12:37:3a:ee:1d:5d:46:21:5d:
f4:30:5c:ce:0b:75:91:fc:84:50:fa:36:10:5b:3b:8e:73:57:
45:d6:4e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:54:53 2026 by rpki-client