Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/etGPt2jesAgywvKvXb4eae0QhGs.roa
File: etGPt2jesAgywvKvXb4eae0QhGs.roa (raw, json)
Hash identifier: O32NEww1ELuE+mxxWCi+G2R5kqYIhKJafeEnMHRBI8I=
Subject key identifier: 7A:D1:8F:B7:68:DE:B0:08:32:C2:F2:AF:5D:BE:1E:69:ED:10:84:6B
Certificate issuer: /CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Certificate serial: 019F236835F64A5FAC2B84BA2C54032A4092
Authority key identifier: 37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/etGPt2jesAgywvKvXb4eae0QhGs.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206943
IP address blocks: 31.42.128.0/20 maxlen: 20
31.42.146.0/23 maxlen: 23
31.42.148.0/22 maxlen: 22
31.42.152.0/24 maxlen: 24
31.42.154.0/23 maxlen: 23
178.159.64.0/20 maxlen: 20
178.218.128.0/22 maxlen: 22
178.218.132.0/22 maxlen: 22
185.171.28.0/23 maxlen: 23
185.171.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:35:f6:4a:5f:ac:2b:84:ba:2c:54:03:2a:40:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ad18fb768deb00832c2f2af5dbe1e69ed10846b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:83:d5:01:89:fb:89:3e:8c:9f:ae:1f:d4:1c:
90:67:38:a9:44:06:50:d8:05:b1:e8:80:66:1b:a5:
13:09:fb:fa:99:ae:4c:b2:f0:db:a3:8e:c8:a0:f5:
44:38:6e:9e:26:9b:13:59:09:03:c9:c6:40:14:1c:
41:99:70:e0:7b:1d:46:9f:f0:29:1b:3a:b3:4e:68:
9d:af:8c:e6:ef:3d:1b:11:97:d2:dd:2f:86:47:88:
33:1b:ff:4b:cb:be:3d:60:14:af:2b:48:39:18:94:
1d:be:cb:f5:e4:75:32:0f:4a:8b:6a:1c:5e:4a:6b:
3a:e5:18:fa:e0:6f:eb:e0:db:49:09:74:f3:02:9a:
8d:2c:a0:c4:99:dc:77:1c:2d:60:e7:06:0f:31:64:
60:83:c7:a7:25:79:45:aa:f1:bd:41:2b:75:6d:1e:
69:24:a5:f0:48:ea:d0:a4:33:4b:3d:50:16:be:34:
34:be:0a:37:08:c4:c4:32:53:c0:30:4f:94:44:f9:
28:fe:a7:60:d1:b8:cf:6f:c4:1a:56:86:03:f4:90:
c2:ad:6f:66:11:5e:cb:d0:c9:f2:cc:dc:dc:96:4b:
d8:f5:7a:b7:97:7a:30:40:d5:ee:be:cc:5a:9b:35:
6b:9e:c0:aa:8b:70:33:60:81:4c:2a:e4:ac:be:dd:
bd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D1:8F:B7:68:DE:B0:08:32:C2:F2:AF:5D:BE:1E:69:ED:10:84:6B
X509v3 Authority Key Identifier:
keyid:37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/etGPt2jesAgywvKvXb4eae0QhGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.128.0/20
31.42.146.0-31.42.152.255
31.42.154.0/23
178.159.64.0/20
178.218.128.0/21
185.171.28.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:df:88:fc:88:3f:64:4f:09:32:97:25:e3:6a:22:9e:f6:18:
bc:33:69:95:46:3e:b6:a9:8b:81:d3:54:6a:28:8f:1f:fb:2c:
3f:93:55:44:51:4f:7b:a2:9c:6f:4b:c2:17:8a:b5:58:dc:59:
f8:f0:9b:59:db:4d:3e:f6:98:2b:2f:71:58:c1:f9:58:ab:98:
e2:b6:cc:91:59:16:eb:c4:3e:fe:0b:90:81:27:2b:c0:dc:73:
ea:a5:20:60:1d:f6:04:f5:ad:f0:e1:81:f6:c9:2c:62:4c:ab:
dd:0a:a9:71:ad:cc:62:ff:b6:d4:28:c2:77:3f:05:c1:87:19:
5b:96:12:da:a1:03:21:5f:0f:73:6d:8c:b8:88:23:b4:71:31:
97:95:f4:e3:2e:ab:fd:4c:92:6c:1c:73:60:d1:59:e8:3e:28:
8d:d7:8c:f2:90:5a:f2:a4:49:17:c2:94:59:bb:b7:2f:91:28:
56:11:f4:95:7f:cb:56:a3:c4:ce:0e:95:27:8e:61:ca:4f:5b:
9e:0c:0b:4b:3b:36:27:a5:fb:94:8c:b6:9b:c3:17:a1:79:b1:
91:77:e1:7f:a4:2f:b4:6f:16:31:50:03:91:ec:aa:34:23:94:
ad:36:e7:a6:10:ab:57:85:32:93:94:48:3c:a2:8b:42:c5:b7:
e7:ec:ed:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:28:35 2026 by rpki-client