Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-in6fcWIaPM9o0JaQgI896hF-zw.roa
File: 1-in6fcWIaPM9o0JaQgI896hF-zw.roa (raw, json)
Hash identifier: +9m5BgtCfpchHYPV7/EjyZt6YHGzYJDxbgj6oT6HF5k=
Subject key identifier: FA:29:FA:7D:C5:88:68:F3:3D:A3:42:5A:42:02:3C:F7:A8:45:FB:3C
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019ECBE181685276E63B8BAA3A9EFAC4AE8B
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-in6fcWIaPM9o0JaQgI896hF-zw.roa
Signing time: Mon 15 Jun 2026 15:23:34 +0000
ROA not before: Mon 15 Jun 2026 15:23:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46475
IP address blocks: 31.40.195.0/24 maxlen: 24
37.72.141.0/24 maxlen: 24
45.141.128.0/24 maxlen: 24
45.159.21.0/24 maxlen: 24
45.159.22.0/24 maxlen: 24
46.253.131.0/24 maxlen: 24
62.204.49.0/24 maxlen: 24
77.83.24.0/24 maxlen: 24
77.83.25.0/24 maxlen: 24
77.83.26.0/24 maxlen: 24
77.83.27.0/24 maxlen: 24
83.97.116.0/24 maxlen: 24
83.97.117.0/24 maxlen: 24
83.97.118.0/23 maxlen: 24
88.218.45.0/24 maxlen: 24
88.218.47.0/24 maxlen: 24
91.246.51.0/24 maxlen: 24
91.247.163.0/24 maxlen: 24
94.154.113.0/24 maxlen: 24
146.19.44.0/24 maxlen: 24
176.126.104.0/24 maxlen: 24
178.20.28.0/24 maxlen: 24
178.20.29.0/24 maxlen: 24
178.20.30.0/24 maxlen: 24
178.20.31.0/24 maxlen: 24
185.202.108.0/24 maxlen: 24
185.212.115.0/24 maxlen: 24
193.31.126.0/24 maxlen: 24
193.42.245.0/24 maxlen: 24
193.151.189.0/24 maxlen: 24
193.151.190.0/24 maxlen: 24
193.151.191.0/24 maxlen: 24
193.163.89.0/24 maxlen: 24
193.163.92.0/24 maxlen: 24
193.163.207.0/24 maxlen: 24
194.70.234.0/24 maxlen: 24
194.99.24.0/24 maxlen: 24
194.99.26.0/24 maxlen: 24
212.18.113.0/24 maxlen: 24
212.18.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:e1:81:68:52:76:e6:3b:8b:aa:3a:9e:fa:c4:ae:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jun 15 15:23:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa29fa7dc58868f33da3425a42023cf7a845fb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:fd:ab:3a:07:f9:4c:3d:02:4c:7e:8a:be:
1d:c2:6d:d1:d5:16:72:70:d5:b6:61:48:94:c1:44:
de:08:1a:d5:27:4c:6d:1e:23:22:10:57:c7:f3:76:
c0:f8:54:b9:57:f6:28:df:ee:3b:88:27:3d:27:32:
43:ee:e2:88:55:e7:26:0a:21:b6:10:15:cd:6c:29:
1d:5f:23:e0:69:b5:cc:0e:47:a9:fe:56:f4:4b:92:
56:4d:97:86:7b:f0:2f:1c:3f:fc:bc:b4:c5:06:40:
97:1d:d1:30:b6:3d:83:b5:67:84:f4:e4:bc:15:81:
d0:7b:16:48:63:7d:64:6c:b8:f5:c2:0d:cf:3f:09:
9f:a5:26:ca:93:76:32:99:56:09:bb:35:7a:a5:7d:
c4:b3:93:28:17:2f:8e:cb:8d:19:d6:82:19:2d:ba:
38:f2:a7:65:6c:34:1e:f1:18:5a:2b:9f:97:58:b7:
18:04:dc:17:f0:50:4c:59:e1:9d:22:74:c4:3f:b8:
39:89:49:d7:53:bd:74:ae:67:3b:11:8b:33:87:f2:
70:db:20:c6:c8:b1:87:9c:42:86:e7:c7:2a:c0:f6:
2e:6a:28:47:d4:df:7f:16:fd:72:93:07:d6:97:7d:
83:d9:e4:87:eb:a7:86:d4:8d:b0:2b:db:86:60:01:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:29:FA:7D:C5:88:68:F3:3D:A3:42:5A:42:02:3C:F7:A8:45:FB:3C
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-in6fcWIaPM9o0JaQgI896hF-zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.195.0/24
37.72.141.0/24
45.141.128.0/24
45.159.21.0-45.159.22.255
46.253.131.0/24
62.204.49.0/24
77.83.24.0/22
83.97.116.0/22
88.218.45.0/24
88.218.47.0/24
91.246.51.0/24
91.247.163.0/24
94.154.113.0/24
146.19.44.0/24
176.126.104.0/24
178.20.28.0/22
185.202.108.0/24
185.212.115.0/24
193.31.126.0/24
193.42.245.0/24
193.151.189.0-193.151.191.255
193.163.89.0/24
193.163.92.0/24
193.163.207.0/24
194.70.234.0/24
194.99.24.0/24
194.99.26.0/24
212.18.113.0/24
212.18.127.0/24
Signature Algorithm: sha256WithRSAEncryption
01:aa:4a:ca:cc:bc:00:1c:14:40:c8:02:0e:96:ff:d9:e7:25:
84:d0:f1:b0:c4:8c:cc:b8:4a:49:81:16:69:27:0d:05:f8:f3:
ac:ac:de:62:6a:f6:55:87:f9:ff:85:e5:57:08:d8:2c:10:4a:
d5:89:1f:5d:a1:08:98:76:b9:c6:43:eb:e4:59:a7:8d:67:f5:
c4:47:49:9d:3d:00:82:06:cb:cd:d2:50:5b:b0:3f:02:c2:f2:
18:f5:c9:f0:71:93:58:46:d0:3d:e4:4d:7e:ab:cc:78:6e:fe:
e7:a2:e7:e0:e8:dd:80:e9:03:e5:19:0c:a4:3b:e8:3e:d8:2b:
2a:1e:e1:e0:78:28:4f:4e:68:45:e8:2f:b9:79:f0:3c:1d:e0:
07:9d:ec:be:41:4a:83:dd:a2:dd:db:62:6c:b1:7c:6e:25:d3:
e6:63:b5:f5:a8:36:af:b5:1e:d1:d0:c7:ef:22:7e:bb:7a:c6:
ec:da:d8:7a:8f:10:05:c0:fb:fe:fb:fe:ab:73:3d:fe:54:1a:
13:66:69:ff:f9:36:7d:00:ee:07:4d:0b:cf:49:21:11:25:5a:
f0:41:3e:6d:38:cf:7c:c3:8b:5a:aa:0c:5e:9f:f0:ee:65:e7:
8b:a6:37:e0:b3:d8:e5:38:bc:b8:b5:6d:ca:94:57:b0:74:31:
73:fc:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:07:54 2026 by rpki-client