Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/e0VDraMVbp6hbgi2MMgN_ufZ9Ag.roa
File: e0VDraMVbp6hbgi2MMgN_ufZ9Ag.roa (raw, json)
Hash identifier: yF3EIY5SN06yITcgN88LaWXgWuID454hcpVOXq+lBq8=
Subject key identifier: 7B:45:43:AD:A3:15:6E:9E:A1:6E:08:B6:30:C8:0D:FE:E7:D9:F4:08
Certificate issuer: /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial: 01A0435FE465BE3164328AE383A89F57D11B
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/e0VDraMVbp6hbgi2MMgN_ufZ9Ag.roa
Signing time: Thu 27 Aug 2026 13:19:12 +0000
ROA not before: Thu 27 Aug 2026 13:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201814
IP address blocks: 5.181.188.0/22 maxlen: 22
80.47.0.0/19 maxlen: 19
80.47.0.0/20 maxlen: 20
80.47.16.0/20 maxlen: 20
91.223.3.0/24 maxlen: 24
91.226.198.0/23 maxlen: 23
91.226.198.0/24 maxlen: 24
91.226.199.0/24 maxlen: 24
95.214.52.0/22 maxlen: 23
95.214.52.0/23 maxlen: 23
95.214.54.0/23 maxlen: 23
146.19.24.0/24 maxlen: 24
178.211.139.0/24 maxlen: 24
185.16.36.0/22 maxlen: 24
185.16.36.0/23 maxlen: 23
185.16.38.0/23 maxlen: 23
185.225.191.0/24 maxlen: 24
185.248.24.0/24 maxlen: 24
193.34.212.0/22 maxlen: 22
193.34.212.0/23 maxlen: 23
193.34.214.0/23 maxlen: 23
193.34.215.0/24 maxlen: 24
195.3.220.0/22 maxlen: 22
195.3.220.0/23 maxlen: 23
195.3.222.0/23 maxlen: 23
195.3.222.0/24 maxlen: 24
212.23.222.0/24 maxlen: 24
2a03:cfc0::/32 maxlen: 32
2a03:cfc0::/33 maxlen: 33
2a03:cfc0:8000::/33 maxlen: 33
2a03:cfc0:8000::/34 maxlen: 34
2a09:d580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:5f:e4:65:be:31:64:32:8a:e3:83:a8:9f:57:d1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
Validity
Not Before: Aug 27 13:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b4543ada3156e9ea16e08b630c80dfee7d9f408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:de:53:61:97:61:35:20:1d:f6:da:55:4d:
4d:10:49:28:99:82:19:6a:f2:8a:e5:b5:20:0b:8d:
27:9b:d3:fa:85:22:50:5f:f1:f2:d7:a2:ba:31:b3:
68:e6:a4:e9:62:89:9f:82:08:1c:90:c6:62:80:17:
b7:15:0b:2b:34:4a:30:a0:2c:e9:d4:70:c1:d9:bd:
46:3c:78:3d:6e:46:27:6b:ae:2d:7b:7f:c8:ac:c5:
b6:1e:32:37:7a:a4:c1:57:4e:cc:bc:d7:15:05:9b:
62:4a:50:80:b2:14:c7:a6:9f:a9:0a:89:6d:83:27:
56:3a:9a:60:04:30:a9:b7:ec:12:88:50:80:89:58:
1f:32:93:df:be:bf:6d:a4:9a:cb:8b:c5:e1:46:b5:
6b:b0:d5:5c:68:a5:45:04:13:fe:4b:2f:b4:a9:bc:
79:ef:df:f7:89:f0:cc:d9:c6:fe:6f:ce:0f:7c:65:
35:d0:24:aa:07:e5:9a:0f:9f:d9:8f:7e:77:9f:3b:
46:90:39:4f:41:d7:92:ec:24:ed:f5:2e:45:c5:92:
47:64:a9:74:cc:dd:42:8f:2a:6f:77:d1:22:67:6f:
98:90:f2:a0:24:e4:9d:1b:c6:88:bc:22:3b:10:9c:
6d:be:b6:31:60:56:85:6a:34:4e:ab:da:67:f2:50:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:45:43:AD:A3:15:6E:9E:A1:6E:08:B6:30:C8:0D:FE:E7:D9:F4:08
X509v3 Authority Key Identifier:
keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/e0VDraMVbp6hbgi2MMgN_ufZ9Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.188.0/22
80.47.0.0/19
91.223.3.0/24
91.226.198.0/23
95.214.52.0/22
146.19.24.0/24
178.211.139.0/24
185.16.36.0/22
185.225.191.0/24
185.248.24.0/24
193.34.212.0/22
195.3.220.0/22
212.23.222.0/24
IPv6:
2a03:cfc0::/32
2a09:d580::/29
Signature Algorithm: sha256WithRSAEncryption
3b:f5:03:c1:b4:13:43:24:32:24:d1:38:8c:8c:b6:48:be:c0:
1a:1d:1e:98:42:7f:97:bf:f3:33:a1:ea:9e:27:f3:bd:29:bf:
4f:4b:eb:4f:54:b4:cc:02:6a:91:70:e3:f4:ce:31:1a:e9:d4:
64:e1:17:7f:1c:d8:ef:84:15:56:eb:c8:01:79:2d:99:86:a8:
54:59:18:27:18:fb:2c:ce:21:cb:03:f4:47:11:fa:3e:87:06:
bb:b8:01:da:02:ac:b9:54:6e:10:e5:cd:0d:18:28:74:3d:cf:
0e:ac:b2:7c:6b:9b:17:4e:cd:a9:ca:cb:73:25:40:8a:ee:25:
2c:42:d2:73:3e:7a:ea:13:8a:43:82:b7:d5:e6:34:4f:00:7a:
54:88:64:02:da:af:7e:09:88:8c:33:bd:6e:35:24:86:8d:d7:
5f:1d:50:89:3d:5e:9a:40:d6:bc:9e:72:73:b5:2f:0f:cd:0a:
cf:65:77:df:66:15:94:2a:ae:be:ff:2a:51:47:a5:10:85:f3:
46:1e:bd:41:ec:69:96:4d:38:26:8b:6e:72:82:72:cf:c1:4a:
c3:f4:28:03:3a:56:fc:03:ca:39:c4:fb:dc:24:2e:c8:b5:c4:
a2:43:e1:15:35:07:56:89:1c:00:c9:67:4b:b2:ca:eb:b5:5e:
79:20:8b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:57:17 2026 by rpki-client