Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EySRNVFJAi7zwLNSVbB7qzjx2t4.roa
File: EySRNVFJAi7zwLNSVbB7qzjx2t4.roa (raw, json)
Hash identifier: 7GrAss9e+GALk7bhXloU1oVz0Cs9fl9Xr322Pq5uw5I=
Subject key identifier: 13:24:91:35:51:49:02:2E:F3:C0:B3:52:55:B0:7B:AB:38:F1:DA:DE
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F236951AF82952950B8B25E36ABF899BE
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EySRNVFJAi7zwLNSVbB7qzjx2t4.roa
Signing time: Thu 02 Jul 2026 15:18:52 +0000
ROA not before: Thu 02 Jul 2026 15:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210878
IP address blocks: 31.135.3.0/24 maxlen: 24
64.43.76.0/24 maxlen: 24
77.36.59.0/24 maxlen: 24
91.235.166.0/24 maxlen: 24
91.237.195.0/24 maxlen: 24
91.246.201.0/24 maxlen: 24
109.207.131.0/24 maxlen: 24
193.36.202.0/24 maxlen: 24
193.221.82.0/24 maxlen: 24
195.80.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:51:af:82:95:29:50:b8:b2:5e:36:ab:f8:99:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=132491355149022ef3c0b35255b07bab38f1dade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:cb:bb:1c:57:54:87:b0:47:57:6e:39:c8:
50:8b:8e:d2:7f:6e:5e:bc:7b:44:aa:fa:0f:ee:16:
dd:24:c2:84:84:dc:56:31:2d:6e:9a:71:05:37:0c:
b6:13:28:a0:8d:f8:ad:10:4a:34:04:03:16:a7:af:
f5:cf:df:4e:38:75:a5:6c:2c:57:07:5c:fc:e0:f7:
9a:41:e3:47:c7:04:b4:b9:8e:17:54:a8:44:de:65:
e7:b8:d2:c6:2a:9b:0e:f6:d7:6e:c5:7d:ab:d9:fd:
10:ee:52:c3:56:9d:72:20:53:f4:52:01:4c:1d:99:
90:7c:a8:9e:42:55:07:d2:fd:55:f9:74:7b:71:e7:
eb:cd:07:42:4b:0a:08:ba:48:c7:50:96:a1:bd:7e:
45:a2:63:3b:33:63:da:16:a6:1e:df:98:b7:74:0d:
a2:ff:f2:b9:e1:9b:ed:d2:66:3e:59:f3:54:70:49:
17:3d:30:6a:47:46:f7:ca:49:ff:a7:8f:bb:af:7c:
96:13:39:73:10:c5:a6:4a:cd:b5:3d:60:27:a9:c9:
94:c8:76:06:53:4b:0c:2f:85:bc:cc:50:7d:f0:bc:
f3:84:2d:88:09:5b:47:ef:53:84:ad:72:5d:b4:9b:
73:d6:9b:e8:4d:2d:5d:db:2a:a6:0c:a7:77:1a:7f:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:24:91:35:51:49:02:2E:F3:C0:B3:52:55:B0:7B:AB:38:F1:DA:DE
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EySRNVFJAi7zwLNSVbB7qzjx2t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.3.0/24
64.43.76.0/24
77.36.59.0/24
91.235.166.0/24
91.237.195.0/24
91.246.201.0/24
109.207.131.0/24
193.36.202.0/24
193.221.82.0/24
195.80.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7c:ff:9c:7d:d2:76:c4:3a:62:e1:85:dc:df:bf:cc:8d:cc:
58:a1:a6:15:95:2f:a3:7b:df:2d:1c:5f:57:be:8e:89:85:07:
9a:be:d8:84:37:d3:c4:6d:b3:1b:22:1d:ba:29:a0:cc:a3:0a:
cc:29:67:2c:11:d0:b9:48:d9:ab:00:5c:dc:05:41:f4:15:9f:
3d:7d:c9:9c:74:9c:e7:bb:15:55:54:d6:4c:a5:f9:1e:9b:75:
fb:be:67:4d:be:fa:1f:00:e9:60:d0:39:de:19:e3:da:87:0e:
09:03:42:d4:58:18:f7:54:83:f7:11:f0:3b:76:e8:4d:20:45:
31:8e:0d:97:4f:fe:69:06:4c:b5:cf:f1:44:92:79:65:1a:6c:
1f:78:66:1a:a5:eb:4a:e2:b6:16:93:de:79:31:11:44:3e:aa:
2b:bd:2c:20:7a:1d:04:6c:5d:b5:94:3a:1e:92:2e:17:92:18:
e3:83:fa:d2:73:d5:95:45:74:06:99:37:fe:07:ec:17:7b:d8:
27:fe:d4:72:0e:dc:00:ef:a8:f4:5f:fb:5d:d9:7b:87:23:e3:
8b:c5:93:10:3a:85:8b:73:99:de:7a:73:9e:5b:b3:b9:a7:9d:
bb:17:8b:c2:4b:9c:0a:b8:d6:d0:26:79:4c:9b:50:60:e2:5f:
18:e0:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:23:02 2026 by rpki-client