Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/76jVldLImuD83KO3C02sl0DqtlU.roa
File: 76jVldLImuD83KO3C02sl0DqtlU.roa (raw, json)
Hash identifier: hfvfRJaHb6uQq0h56BQbAynDqnCbKcu2SJwjqRKr8ws=
Subject key identifier: EF:A8:D5:95:D2:C8:9A:E0:FC:DC:A3:B7:0B:4D:AC:97:40:EA:B6:55
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 01A152CEEA1A0EFB6532E76467A0DE1C02F5
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/76jVldLImuD83KO3C02sl0DqtlU.roa
Signing time: Mon 19 Oct 2026 06:17:34 +0000
ROA not before: Mon 19 Oct 2026 06:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5606
IP address blocks: 31.14.21.0/24 maxlen: 24
45.14.236.0/24 maxlen: 24
45.14.238.0/24 maxlen: 24
45.14.239.0/24 maxlen: 24
45.67.36.0/24 maxlen: 24
45.67.38.0/24 maxlen: 24
45.67.39.0/24 maxlen: 24
45.82.28.0/23 maxlen: 23
84.247.23.0/24 maxlen: 24
89.34.101.0/24 maxlen: 24
89.39.6.0/24 maxlen: 24
89.39.7.0/24 maxlen: 24
89.42.133.0/24 maxlen: 24
92.114.2.0/24 maxlen: 24
92.114.3.0/24 maxlen: 24
93.174.160.0/24 maxlen: 24
93.174.162.0/24 maxlen: 24
93.174.167.0/24 maxlen: 24
176.223.114.0/24 maxlen: 24
185.220.184.0/24 maxlen: 24
185.220.185.0/24 maxlen: 24
185.220.186.0/24 maxlen: 24
185.248.139.0/24 maxlen: 24
188.240.0.0/24 maxlen: 24
188.241.72.0/24 maxlen: 24
188.241.73.0/24 maxlen: 24
188.241.74.0/23 maxlen: 23
193.16.144.0/24 maxlen: 24
193.200.62.0/24 maxlen: 24
193.200.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:ce:ea:1a:0e:fb:65:32:e7:64:67:a0:de:1c:02:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Oct 19 06:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efa8d595d2c89ae0fcdca3b70b4dac9740eab655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:88:dc:3b:40:b4:c4:91:8d:76:dc:dd:88:
cc:1e:5f:b2:37:1d:e8:65:80:62:3e:93:20:5d:25:
b6:27:9f:96:94:52:98:62:59:89:c6:4a:8e:ab:96:
0e:ec:5a:7a:52:51:31:72:32:80:80:c0:14:9e:1b:
da:96:c5:b1:a9:92:8b:fa:61:b9:51:4f:77:9d:88:
97:f1:26:df:6a:11:1d:eb:1a:2d:90:98:70:cb:1b:
1e:b5:83:2a:e8:2e:4c:05:4e:dd:f9:ed:47:8e:2e:
79:e0:96:db:dd:ba:f8:12:0e:76:67:93:d7:bd:04:
2a:00:2e:0d:c8:21:68:79:e8:40:8f:6b:06:fc:4f:
0c:d6:bf:63:60:11:e7:1e:52:6a:c9:92:d3:a6:a2:
23:b1:fa:7a:10:e2:36:9a:43:77:89:bf:2e:86:61:
8f:7d:4d:da:96:5a:7d:eb:8d:18:32:09:19:3e:89:
b3:78:0c:32:48:0c:0e:1c:a5:82:85:d7:7c:fb:76:
c6:4f:bf:77:20:a6:5f:76:ec:61:a1:54:7a:88:f1:
a3:e2:78:02:af:54:da:88:45:41:ac:38:c0:5c:7f:
53:df:58:de:70:74:48:be:26:1f:ee:7a:e4:8e:9a:
fe:f9:0e:b7:b9:24:fe:95:ba:8e:be:28:ce:37:19:
af:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A8:D5:95:D2:C8:9A:E0:FC:DC:A3:B7:0B:4D:AC:97:40:EA:B6:55
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/76jVldLImuD83KO3C02sl0DqtlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.21.0/24
45.14.236.0/24
45.14.238.0/23
45.67.36.0/24
45.67.38.0/23
45.82.28.0/23
84.247.23.0/24
89.34.101.0/24
89.39.6.0/23
89.42.133.0/24
92.114.2.0/23
93.174.160.0/24
93.174.162.0/24
93.174.167.0/24
176.223.114.0/24
185.220.184.0-185.220.186.255
185.248.139.0/24
188.240.0.0/24
188.241.72.0/22
193.16.144.0/24
193.200.62.0/23
Signature Algorithm: sha256WithRSAEncryption
24:e5:ef:47:35:d3:ed:81:22:da:35:11:66:29:c5:3c:33:17:
bc:1f:a3:b7:32:41:cd:ed:0b:d2:9d:90:ee:9e:86:9a:62:1f:
bd:e8:91:c9:93:e5:e5:ef:12:c5:3b:a6:87:8a:62:00:8a:4f:
70:4f:92:70:2a:9b:12:4c:28:cd:71:87:1f:68:a3:7d:f7:da:
bc:88:08:9c:4d:c9:7a:7a:42:7f:04:e3:26:bc:4e:05:00:52:
88:b2:50:95:95:ba:bf:7a:86:77:54:53:c8:1b:86:22:51:9f:
40:45:f8:31:d5:ae:43:2d:36:fc:db:1a:2e:e8:7c:d1:63:fb:
15:1c:75:10:d8:13:76:0d:8e:a8:53:f4:9d:51:8d:aa:14:94:
d1:09:60:72:d8:b8:b0:ce:fc:cc:9b:08:24:ea:09:af:a3:ad:
d4:4a:49:f5:3c:8e:92:54:e6:a1:e8:73:d9:f4:d8:21:c6:d2:
86:bb:b7:a4:54:b3:7a:e3:96:38:15:65:53:40:2d:c9:21:7a:
e3:fa:49:a7:12:6e:6b:e0:c1:11:b4:98:d3:c9:e1:29:f8:11:
db:20:3b:e9:43:22:8a:e3:10:f3:37:e6:14:cf:20:ca:d4:38:
50:17:c2:15:59:8a:58:f0:14:d9:97:0b:2e:c7:31:22:d3:eb:
c5:6a:5d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:36 2026 by rpki-client