Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/6dRbf3ob-rJEcaa5qh_SL7tiwoc.roa
File: 6dRbf3ob-rJEcaa5qh_SL7tiwoc.roa (raw, json)
Hash identifier: 0jO2tJi6fyA0a7zPC9BKOos/mtYVL+dlaGGBQ2iK3dE=
Subject key identifier: E9:D4:5B:7F:7A:1B:FA:B2:44:71:A6:B9:AA:1F:D2:2F:BB:62:C2:87
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A14E5339793488187413C7C6F2A8535C1F
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/6dRbf3ob-rJEcaa5qh_SL7tiwoc.roa
Signing time: Sun 18 Oct 2026 09:23:59 +0000
ROA not before: Sun 18 Oct 2026 09:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 37.221.108.0/24 maxlen: 24
37.221.110.0/24 maxlen: 24
45.141.131.0/24 maxlen: 24
45.152.139.0/24 maxlen: 24
80.76.44.0/24 maxlen: 24
83.136.49.0/24 maxlen: 24
83.136.50.0/24 maxlen: 24
85.31.53.0/24 maxlen: 24
176.118.189.0/24 maxlen: 24
185.240.84.0/24 maxlen: 24
193.160.71.0/24 maxlen: 24
193.202.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:53:39:79:34:88:18:74:13:c7:c6:f2:a8:53:5c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 18 09:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9d45b7f7a1bfab24471a6b9aa1fd22fbb62c287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:1a:7d:8e:03:d5:9e:50:bf:65:8d:f9:c2:
bf:b5:af:56:0a:99:e2:b6:59:44:d9:8b:48:36:11:
41:57:e7:b3:84:f3:93:71:48:96:ba:f9:44:40:26:
09:31:e6:68:06:a6:a2:4b:8b:b5:ec:1b:04:2f:35:
91:ee:08:1a:3c:13:ad:26:90:c4:f0:19:30:3f:02:
56:cb:de:50:28:eb:02:82:8a:e3:f1:b4:15:a2:94:
ec:07:99:a7:6d:a5:0c:6c:86:bf:fe:d0:53:03:b3:
4a:98:34:af:4b:03:9f:3f:0a:3a:78:d8:93:a9:46:
6f:92:91:39:0b:c7:b4:cd:61:2b:62:2e:89:11:11:
25:c1:bb:42:76:91:1e:d3:80:f4:f8:c1:cd:5a:1d:
d6:53:52:5f:6f:fb:0f:1b:c5:91:be:41:4a:17:fa:
69:f6:81:27:26:d4:a7:69:6a:a0:9e:16:4d:0c:83:
7d:9d:cb:e9:be:2b:d0:03:71:ea:b7:88:94:25:21:
05:0b:82:6e:5f:7c:fe:38:74:ab:de:35:d6:96:8e:
1b:c2:9f:64:78:aa:0d:ad:61:c7:78:7c:ed:8a:ca:
4f:0b:8d:b6:61:15:58:d8:64:f7:58:ab:6b:93:d6:
ce:0d:d6:c6:fc:f6:87:ac:8e:07:c6:3f:90:df:b0:
18:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D4:5B:7F:7A:1B:FA:B2:44:71:A6:B9:AA:1F:D2:2F:BB:62:C2:87
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/6dRbf3ob-rJEcaa5qh_SL7tiwoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.108.0/24
37.221.110.0/24
45.141.131.0/24
45.152.139.0/24
80.76.44.0/24
83.136.49.0-83.136.50.255
85.31.53.0/24
176.118.189.0/24
185.240.84.0/24
193.160.71.0/24
193.202.113.0/24
Signature Algorithm: sha256WithRSAEncryption
63:33:8e:8e:0d:91:b1:2b:85:19:a9:49:1f:ea:ad:1d:6f:9b:
34:2b:81:22:8a:f8:c6:df:89:7c:ac:09:c0:2b:a3:48:1a:40:
bd:a9:83:b1:22:f7:71:2f:dc:f4:6a:bf:46:d0:f8:0d:5d:cd:
bc:8f:20:58:94:71:77:45:fa:e9:f6:9b:19:93:a3:b3:10:77:
bc:9d:11:c1:ec:aa:97:01:5e:e8:0b:20:b3:9f:7d:f6:e7:87:
11:da:37:34:cc:12:89:17:2d:96:2d:83:ec:3c:43:2b:29:53:
90:75:3f:84:e1:0f:6d:17:2b:74:c2:52:8a:96:1e:d2:ca:e8:
e3:81:b8:73:f0:68:4d:87:d9:26:e9:96:4c:9a:57:b9:97:f5:
ca:50:37:48:c7:bf:41:ec:03:ff:fc:70:13:f5:64:b6:17:61:
8b:73:a1:2d:f5:9d:1d:ff:15:f9:b3:f2:1e:c1:35:1f:d7:b2:
0e:7c:b3:79:e4:22:42:a8:ed:c9:6c:32:a4:43:ff:e3:27:b2:
06:d9:a1:b9:56:3f:2a:89:25:69:48:73:5b:59:f2:05:92:37:
4a:86:24:6d:d1:64:13:f1:6f:ba:25:a7:9b:43:ba:79:21:7c:
7b:16:47:f6:ce:24:42:96:0a:ff:9c:ac:af:59:e3:19:cf:85:
23:f0:58:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:11 2026 by rpki-client