Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/EED5PEY1a1IMhSE0BwQBTJLp1mc.roa
File: EED5PEY1a1IMhSE0BwQBTJLp1mc.roa (raw, json)
Hash identifier: elqOAc4bpv6jCN5g6K4Rk1qf2TmccJP7YVS2HbgSYS8=
Subject key identifier: 10:40:F9:3C:46:35:6B:52:0C:85:21:34:07:04:01:4C:92:E9:D6:67
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019E6B0ABFDB22EF6C7BA63C61BE7FD63003
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/EED5PEY1a1IMhSE0BwQBTJLp1mc.roa
Signing time: Wed 27 May 2026 20:05:27 +0000
ROA not before: Wed 27 May 2026 20:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 31.40.192.0/24 maxlen: 24
31.40.194.0/24 maxlen: 24
45.154.120.0/22 maxlen: 24
77.83.48.0/24 maxlen: 24
77.83.49.0/24 maxlen: 24
77.83.50.0/23 maxlen: 24
80.243.230.0/23 maxlen: 24
86.62.53.0/24 maxlen: 24
86.62.54.0/24 maxlen: 24
86.62.55.0/24 maxlen: 24
88.218.81.0/24 maxlen: 24
88.218.82.0/23 maxlen: 24
91.132.126.0/24 maxlen: 24
91.132.127.0/24 maxlen: 24
91.245.238.0/24 maxlen: 24
93.177.92.0/24 maxlen: 24
93.177.93.0/24 maxlen: 24
95.214.244.0/22 maxlen: 24
176.113.40.0/23 maxlen: 24
185.155.100.0/24 maxlen: 24
185.177.78.0/23 maxlen: 24
193.9.56.0/24 maxlen: 24
193.9.57.0/24 maxlen: 24
193.9.58.0/24 maxlen: 24
193.9.59.0/24 maxlen: 24
193.31.124.0/23 maxlen: 24
193.47.36.0/22 maxlen: 24
193.160.74.0/24 maxlen: 24
193.160.75.0/24 maxlen: 24
194.53.188.0/22 maxlen: 24
194.104.4.0/24 maxlen: 24
194.104.7.0/24 maxlen: 24
194.124.41.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
213.109.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6b:0a:bf:db:22:ef:6c:7b:a6:3c:61:be:7f:d6:30:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: May 27 20:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1040f93c46356b520c8521340704014c92e9d667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:a3:ca:01:8a:67:aa:eb:1d:81:58:3b:ec:
6c:01:5b:35:38:67:f7:a4:ab:e6:8b:f3:cc:cb:96:
ee:d1:b8:a4:d9:b2:c0:9a:ac:b1:3b:9a:47:62:44:
ce:2f:68:1b:75:a9:89:fe:1a:12:3e:d7:a4:ae:e5:
d3:b4:7f:bc:a8:e8:20:11:58:3a:7c:9c:c3:b6:c6:
51:fb:56:77:a9:94:4d:d7:20:be:86:51:68:77:b9:
4b:30:cc:17:6d:c6:2e:dc:99:3d:ec:2c:16:65:34:
be:58:7e:4b:b7:d9:8f:24:76:32:e4:80:79:1e:81:
48:5e:f5:44:6e:ab:10:ae:62:6b:c4:be:79:f5:1b:
dd:33:ce:fc:a4:3f:ec:f5:5a:6a:19:aa:72:9d:d7:
53:ea:ce:99:1d:70:27:6e:15:cc:45:47:65:a0:bc:
a6:89:60:01:96:4a:e5:a0:ea:15:87:e9:b4:52:0a:
cf:16:03:b7:a8:42:e7:1f:f0:0e:eb:42:3c:b1:12:
58:06:b6:e0:4a:ad:77:3c:8d:55:00:70:87:64:3d:
cd:a5:50:da:dd:c7:b7:96:e4:33:0f:eb:69:42:f0:
88:5b:0c:27:97:d9:85:52:2b:e6:a0:14:df:7b:e3:
a8:31:e0:c8:2c:8d:f5:e3:cf:f0:5c:1d:f9:bb:9f:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:40:F9:3C:46:35:6B:52:0C:85:21:34:07:04:01:4C:92:E9:D6:67
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/EED5PEY1a1IMhSE0BwQBTJLp1mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.192.0/24
31.40.194.0/24
45.154.120.0/22
77.83.48.0/22
80.243.230.0/23
86.62.53.0-86.62.55.255
88.218.81.0-88.218.83.255
91.132.126.0/23
91.245.238.0/24
93.177.92.0/23
95.214.244.0/22
176.113.40.0/23
185.155.100.0/24
185.177.78.0/23
193.9.56.0/22
193.31.124.0/23
193.47.36.0/22
193.160.74.0/23
194.53.188.0/22
194.104.4.0/24
194.104.7.0/24
194.124.41.0/24
212.69.133.0/24
213.109.188.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:9e:74:85:60:93:12:7a:11:ee:31:ac:22:ea:65:61:9c:0e:
44:bf:98:43:72:30:02:00:b5:f0:54:49:19:66:fa:77:e6:c0:
f2:e3:a0:e7:04:80:53:0f:15:d6:b6:bf:f2:fa:fa:21:41:13:
bd:80:d5:71:36:d2:e9:8f:05:0e:2e:16:0e:19:a0:18:83:bc:
71:54:19:d0:5e:1f:29:c3:f0:e4:2a:f0:a1:18:48:be:14:e2:
45:15:e3:72:48:ff:39:f6:13:aa:cc:a8:04:a7:a7:96:9c:56:
13:92:47:60:2c:a4:e2:83:1e:5e:1a:86:2b:35:2f:46:de:11:
a6:95:7f:bb:fa:ff:55:87:17:01:68:a1:95:c5:98:95:cb:be:
16:9c:0d:43:59:23:fd:c4:05:bd:f7:8f:e5:f7:fd:13:50:cd:
b2:fc:12:a4:b3:ec:54:31:e7:29:8a:20:f6:42:b1:0b:bd:7a:
d7:8d:92:c0:ef:e2:65:0f:ae:63:f5:c9:2d:a8:3b:bd:ba:bd:
01:b9:56:3d:cd:fb:79:35:26:4c:29:23:a4:ce:f4:60:50:b4:
81:e1:74:96:3f:13:e6:ca:07:80:74:49:31:a9:05:e9:2b:d5:
8b:d1:1c:81:88:50:e1:e2:59:9d:4d:5a:a8:9e:a7:ee:50:62:
b6:40:bb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:01:29 2026 by rpki-client