Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/eQm7ECQvHhq1dyKk8vMd04vqJAc.roa
File: eQm7ECQvHhq1dyKk8vMd04vqJAc.roa (raw, json)
Hash identifier: CmWXX4RJjI+TQOnk4iGUT3yi0OCbnJ7wMFgBAsopRvw=
Subject key identifier: 79:09:BB:10:24:2F:1E:1A:B5:77:22:A4:F2:F3:1D:D3:8B:EA:24:07
Certificate issuer: /CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Certificate serial: 019FF1D847D76CB5FDA490F9D9918B93B00B
Authority key identifier: 1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/eQm7ECQvHhq1dyKk8vMd04vqJAc.roa
Signing time: Tue 11 Aug 2026 17:21:50 +0000
ROA not before: Tue 11 Aug 2026 17:21:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 31.186.32.0/24 maxlen: 24
31.186.33.0/24 maxlen: 24
31.186.34.0/23 maxlen: 23
31.186.36.0/23 maxlen: 23
185.4.168.0/23 maxlen: 23
185.4.170.0/23 maxlen: 23
185.180.132.0/24 maxlen: 24
185.180.133.0/24 maxlen: 24
185.180.134.0/24 maxlen: 24
185.180.135.0/24 maxlen: 24
185.194.15.0/24 maxlen: 24
188.116.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:d8:47:d7:6c:b5:fd:a4:90:f9:d9:91:8b:93:b0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Validity
Not Before: Aug 11 17:21:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7909bb10242f1e1ab57722a4f2f31dd38bea2407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:47:23:36:3b:cb:95:c7:c7:35:dc:0a:34:
8e:2c:50:5d:e2:ea:b6:22:46:e4:3e:27:e8:52:1c:
06:0b:a6:b5:b7:9a:3f:43:46:d5:ee:ca:d8:b1:e6:
f8:b9:f3:96:20:d2:3d:24:3d:27:75:09:6e:b3:26:
40:76:80:0a:91:9e:c6:cd:75:38:23:71:c8:d7:3c:
8d:18:67:c3:9c:5c:af:35:10:db:8a:13:14:ee:0d:
cb:d7:51:f0:ba:94:10:c8:3e:7c:41:cf:07:d6:c6:
85:e1:a0:9f:9f:3a:49:fb:3f:43:96:47:93:07:c1:
1d:a0:2a:41:b9:0b:82:64:9d:41:3c:17:a2:fb:90:
ce:a8:1d:db:03:c6:13:a3:7d:62:b1:71:0f:5a:75:
31:9e:86:43:2d:de:b9:b4:16:80:d7:9a:b2:97:70:
73:54:28:12:1b:10:6a:ee:15:ab:b0:d3:62:2b:f5:
f7:dd:72:57:df:68:05:18:13:08:a0:af:47:3f:38:
4f:4f:a1:8d:79:de:1c:2a:2e:46:31:3d:30:b5:61:
1c:06:00:b7:fc:72:bf:1b:a4:ca:7b:21:88:6b:48:
c1:3e:1e:13:46:76:6c:83:07:e7:b4:03:5e:45:2c:
a8:80:45:4b:77:9b:4a:37:0a:c1:fe:de:72:35:e8:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:BB:10:24:2F:1E:1A:B5:77:22:A4:F2:F3:1D:D3:8B:EA:24:07
X509v3 Authority Key Identifier:
keyid:1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/eQm7ECQvHhq1dyKk8vMd04vqJAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.32.0-31.186.37.255
185.4.168.0/22
185.180.132.0/22
185.194.15.0/24
188.116.2.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:1f:2a:ce:9b:39:61:98:19:a4:56:a7:fe:36:fa:21:9e:f5:
dc:dc:f8:ab:01:dc:81:15:e3:b0:a0:57:88:78:1f:51:dd:78:
19:d9:90:40:ca:cb:af:bc:81:0f:de:49:99:67:d9:9f:a1:ae:
b9:ac:67:05:33:5b:58:47:5b:90:cf:9f:a0:be:66:2c:67:d8:
f0:b4:04:53:f7:e8:0a:bd:e2:09:71:e4:3c:42:8c:43:b3:2b:
1f:08:eb:76:84:04:b8:5d:39:d9:2d:ea:9f:8d:ae:16:60:13:
fa:46:d8:35:87:d8:a5:fe:b8:a8:14:b9:b1:0e:b9:3b:6b:ba:
4d:06:3f:76:43:19:31:a5:b3:95:cb:a2:63:6f:ac:81:68:e6:
3a:47:c3:7a:a7:f6:6e:89:3b:8d:e6:18:2c:78:b8:70:44:b7:
4b:c3:14:9c:3d:83:7d:24:c2:95:55:ac:86:02:02:78:d8:0c:
49:e1:5d:a1:81:39:b7:4a:38:a8:26:47:58:48:33:aa:65:14:
a7:d7:77:c3:b9:5a:a1:cf:c6:52:8b:6b:19:d5:6c:19:e8:ce:
5a:36:6e:87:22:98:b5:cc:dd:b3:17:c2:1e:a5:5f:12:09:41:
8c:f1:62:af:41:45:7d:da:2b:ee:b2:9f:c5:f5:cc:a8:5b:39:
14:0c:92:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 18:10:50 2026 by rpki-client