Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/G7LeYd0fXrMm-2duJDxHCF2Mid0.roa
File: G7LeYd0fXrMm-2duJDxHCF2Mid0.roa (raw, json)
Hash identifier: 7ZmxQO/JbegguZNq5XpK/SxY6WA8hbHx/FN0cGaqvAc=
Subject key identifier: 1B:B2:DE:61:DD:1F:5E:B3:26:FB:67:6E:24:3C:47:08:5D:8C:89:DD
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A016716FBF31595C8388D777DAAE58B9B2
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/G7LeYd0fXrMm-2duJDxHCF2Mid0.roa
Signing time: Tue 18 Aug 2026 19:55:27 +0000
ROA not before: Tue 18 Aug 2026 19:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 93.177.111.0/24 maxlen: 24
185.240.87.0/24 maxlen: 24
193.42.246.0/24 maxlen: 24
194.62.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:71:6f:bf:31:59:5c:83:88:d7:77:da:ae:58:b9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Aug 18 19:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bb2de61dd1f5eb326fb676e243c47085d8c89dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:bd:12:81:9c:8a:98:17:e0:b4:7f:fc:e8:
76:d9:f6:42:88:ef:93:c7:63:43:ea:00:79:f2:b3:
46:95:a9:8b:72:df:29:7b:0b:64:47:f0:7a:fd:00:
68:43:db:ca:ef:1e:3e:02:16:67:ad:53:e9:c6:56:
1c:69:7f:34:0c:eb:a5:b2:01:ec:b5:17:c9:13:91:
a3:70:a1:6b:70:f3:aa:df:3b:9e:b3:d0:05:7d:dd:
8e:62:8d:d2:64:0a:74:ac:9f:8d:1a:82:54:1c:c1:
fc:d4:bc:a9:61:c5:c2:4b:39:93:d7:f5:b4:cc:6b:
e1:90:e1:62:03:bd:6f:34:f0:ca:5b:3c:01:7e:bf:
2b:cb:1f:86:c8:96:39:bf:84:c0:c9:50:ae:5f:4e:
64:7f:bc:e0:12:18:fa:f9:29:a5:4b:82:c9:5d:98:
08:e2:88:b4:8c:00:53:e8:13:69:5b:d2:6a:31:ae:
17:ae:d8:36:10:0e:61:78:9f:c1:7e:3e:ee:9c:91:
8c:3c:6e:74:45:50:4e:54:a1:2f:4e:4d:86:6f:2a:
81:15:b5:98:7b:81:9a:4c:24:c1:59:c6:cb:fb:f3:
94:b0:da:11:d8:0e:b2:f5:11:cb:a0:bd:b7:6e:bd:
12:c9:5a:96:7f:d5:b6:75:f9:16:d8:f1:9b:88:74:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B2:DE:61:DD:1F:5E:B3:26:FB:67:6E:24:3C:47:08:5D:8C:89:DD
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/G7LeYd0fXrMm-2duJDxHCF2Mid0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.111.0/24
185.240.87.0/24
193.42.246.0/24
194.62.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:44:93:ee:f2:98:50:c4:38:23:54:25:9f:a0:00:ee:ee:1b:
1d:31:08:21:b9:c2:f3:1a:5a:03:e8:62:3b:04:10:8b:33:9a:
38:ee:19:9b:77:c1:2d:75:4b:89:7a:f0:22:e2:78:3a:dd:ac:
eb:e5:63:e9:9e:3e:46:f8:55:2a:1d:50:1f:a0:28:e5:71:2c:
9d:ac:55:3d:ee:2f:bf:85:c0:40:6f:6a:9e:b9:7a:7d:e9:b0:
09:7f:cf:9d:b7:8f:fe:97:eb:6a:04:f5:e6:01:55:6f:2c:39:
b6:e9:6e:35:1c:38:a2:05:1f:26:a1:86:3b:9c:ee:b3:e1:59:
81:6a:5d:ef:20:52:6c:23:8e:be:f1:e9:c5:0b:0a:15:84:07:
ec:ef:b3:12:cd:c9:b8:a4:58:b9:d9:28:83:ad:20:e2:a0:39:
b8:d8:a7:68:3d:ef:cc:c9:26:09:5d:24:a2:4b:eb:92:00:e7:
8b:e3:4c:0f:43:8f:20:bc:f6:e3:ad:50:9f:60:b2:b9:2b:a3:
63:5f:39:61:fe:a3:d5:00:7e:75:bc:7b:d5:5d:b7:d2:c2:ee:
81:24:18:2e:35:d3:33:d1:9e:bf:ac:6a:b4:4a:1b:39:f2:8e:
cc:9e:73:29:3f:80:bf:c5:4f:d6:e9:cb:c3:a7:a0:75:76:73:
44:9c:66:23
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaAWcW+/MVlcg4jXd9quWLmyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjYwODE4MTk1NTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmIyZGU2MWRkMWY1ZWIzMjZmYjY3NmUyNDNjNDcwODVkOGM4OWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMi9EoGcipgX4LR//Oh22fZCiO+T
x2ND6gB58rNGlamLct8pewtkR/B6/QBoQ9vK7x4+AhZnrVPpxlYcaX80DOulsgHs
tRfJE5GjcKFrcPOq3zues9AFfd2OYo3SZAp0rJ+NGoJUHMH81LypYcXCSzmT1/W0
zGvhkOFiA71vNPDKWzwBfr8ryx+GyJY5v4TAyVCuX05kf7zgEhj6+SmlS4LJXZgI
4oi0jABT6BNpW9JqMa4Xrtg2EA5heJ/Bfj7unJGMPG50RVBOVKEvTk2GbyqBFbWY
e4GaTCTBWcbL+/OUsNoR2A6y9RHLoL23br0SyVqWf9W2dfkW2PGbiHRvyQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBuy3mHdH16zJvtnbiQ8RwhdjIndMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvRzdMZVlkMGZYck1tLTJkdUpEeEhDRjJNaWQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXbFvAwQA
ufBXAwQAwSr2AwQAwj6lMA0GCSqGSIb3DQEBCwUAA4IBAQA8RJPu8phQxDgjVCWf
oADu7hsdMQghucLzGloD6GI7BBCLM5o47hmbd8EtdUuJevAi4ng63azr5WPpnj5G
+FUqHVAfoCjlcSydrFU97i+/hcBAb2qeuXp96bAJf8+dt4/+l+tqBPXmAVVvLDm2
6W41HDiiBR8moYY7nO6z4VmBal3vIFJsI46+8enFCwoVhAfs77MSzcm4pFi52SiD
rSDioDm42KdoPe/MySYJXSSiS+uSAOeL40wPQ48gvPbjrVCfYLK5K6NjXzlh/qPV
AH51vHvVXbfSwu6BJBguNdMz0Z6/rGq0Shs58o7MnnMpP4C/xU/W6cvDp6B1dnNE
nGYj
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:21 2026 by rpki-client