Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/E7E1MUUwCZNZruQronTrkhXw868.roa
File: E7E1MUUwCZNZruQronTrkhXw868.roa (raw, json)
Hash identifier: r4LGUUOIYXKCJ1+5boZI3dn9BnUQSvMgkiF8t/zxg3g=
Subject key identifier: 13:B1:35:31:45:30:09:93:59:AE:E4:2B:A2:74:EB:92:15:F0:F3:AF
Certificate issuer: /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial: 01A1200845EBDEAEA80D60803E1F7529F90A
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/E7E1MUUwCZNZruQronTrkhXw868.roa
Signing time: Fri 09 Oct 2026 09:39:35 +0000
ROA not before: Fri 09 Oct 2026 09:39:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43612
IP address blocks: 31.3.93.0/24 maxlen: 24
31.3.94.0/24 maxlen: 24
31.11.64.0/21 maxlen: 21
31.11.80.0/21 maxlen: 21
31.11.120.0/21 maxlen: 21
78.157.0.0/19 maxlen: 22
78.157.16.0/22 maxlen: 22
92.53.0.0/18 maxlen: 23
94.100.96.0/20 maxlen: 20
109.69.40.0/21 maxlen: 22
109.69.40.0/22 maxlen: 22
109.69.44.0/22 maxlen: 22
146.255.73.0/24 maxlen: 24
146.255.74.0/24 maxlen: 24
146.255.75.0/24 maxlen: 24
146.255.94.0/23 maxlen: 23
178.249.112.0/21 maxlen: 21
185.5.4.0/22 maxlen: 22
185.80.164.0/22 maxlen: 22
185.89.244.0/22 maxlen: 22
185.89.246.0/23 maxlen: 24
185.100.244.0/24 maxlen: 24
185.100.245.0/24 maxlen: 24
188.44.2.0/24 maxlen: 24
188.44.6.0/24 maxlen: 24
188.44.7.0/24 maxlen: 24
212.110.92.0/23 maxlen: 23
217.16.88.0/22 maxlen: 22
217.16.92.0/23 maxlen: 23
217.16.94.0/24 maxlen: 24
217.196.192.0/20 maxlen: 20
2a01:b780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:08:45:eb:de:ae:a8:0d:60:80:3e:1f:75:29:f9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Validity
Not Before: Oct 9 09:39:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13b135314530099359aee42ba274eb9215f0f3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:c8:6f:12:89:0d:8e:40:cf:a7:3e:57:4b:
09:1e:6a:8d:a9:3d:a3:9f:ce:09:25:42:63:c7:c7:
ec:dc:39:a5:9a:51:ad:8b:16:15:3f:99:fc:a8:27:
24:cd:d6:b2:57:0c:6a:e0:33:79:63:0e:3b:d8:58:
64:57:29:76:da:77:3b:99:ef:8b:07:fc:23:4c:23:
6a:a2:34:83:47:70:61:12:08:fb:36:64:90:31:e7:
2f:1b:25:ee:67:92:a7:6c:1a:8f:84:14:5c:9c:ed:
cd:91:70:73:63:96:19:48:65:9a:39:83:fe:ad:6a:
1a:a3:ea:c1:a9:05:52:62:15:30:ad:98:c5:c0:ab:
5f:56:5d:34:31:5c:9a:f9:57:1f:a8:32:42:83:70:
77:da:7f:58:7c:cc:d4:c4:ae:22:52:20:2b:05:ad:
1d:3f:96:5e:34:be:c5:cd:4b:04:bc:5f:a1:5f:00:
bc:98:eb:0a:0e:7b:11:e3:55:f6:36:a6:5d:99:e6:
3b:51:ce:13:a4:0a:5d:68:f6:cf:ec:c1:62:b6:6c:
27:fa:06:31:85:7a:3e:08:73:97:75:fe:fb:e8:d4:
d5:d9:e5:f4:9e:e0:ac:bd:bf:06:0c:c8:f6:f8:61:
0b:8d:f6:47:04:fc:4a:45:ec:ef:68:d2:df:0e:2d:
7d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B1:35:31:45:30:09:93:59:AE:E4:2B:A2:74:EB:92:15:F0:F3:AF
X509v3 Authority Key Identifier:
keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/E7E1MUUwCZNZruQronTrkhXw868.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.93.0-31.3.94.255
31.11.64.0/21
31.11.80.0/21
31.11.120.0/21
78.157.0.0/19
92.53.0.0/18
94.100.96.0/20
109.69.40.0/21
146.255.73.0-146.255.75.255
146.255.94.0/23
178.249.112.0/21
185.5.4.0/22
185.80.164.0/22
185.89.244.0/22
185.100.244.0/23
188.44.2.0/24
188.44.6.0/23
212.110.92.0/23
217.16.88.0-217.16.94.255
217.196.192.0/20
IPv6:
2a01:b780::/32
Signature Algorithm: sha256WithRSAEncryption
74:f8:d3:5d:7d:47:f8:3f:b5:b5:e5:b5:2e:cc:22:17:20:d0:
7f:7d:69:2e:94:9e:e4:72:bb:af:19:3c:15:be:00:74:97:a7:
16:c1:e3:53:e2:5b:a0:d6:52:7a:95:6a:e1:4c:06:c8:d8:95:
1f:e1:7f:11:68:53:50:64:21:bf:66:44:e0:ab:53:5f:5b:80:
35:1d:f2:19:38:b1:c6:2d:c0:43:3c:d4:99:42:9d:ab:32:c6:
bd:f9:7b:a2:d9:c7:04:cc:08:37:b4:2e:b8:0a:b9:a3:a4:1e:
54:94:d6:50:69:56:47:f8:7e:27:47:80:6e:32:bb:1c:b8:df:
f7:57:b0:a1:ae:4d:f8:7c:77:c5:80:5d:a8:48:83:49:1e:28:
03:f5:e9:a6:7e:d2:48:0a:b9:c9:50:8e:39:1e:a7:4a:e8:c1:
76:df:88:05:e0:9c:37:63:62:62:29:be:8b:a1:88:86:34:38:
ad:29:07:7a:52:a9:c5:60:c7:dd:5c:4a:24:4f:74:c6:b9:5b:
66:88:7c:54:3f:78:25:5c:16:82:f8:8a:0e:5a:52:11:3b:4a:
49:16:a5:ce:39:e8:32:cc:f3:6c:30:4c:5d:71:9e:e9:8b:a1:
a9:80:9c:bc:73:d6:4e:a5:ee:4e:d4:42:85:bb:1e:9e:7f:ce:
fa:a8:68:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 06:06:35 2026 by rpki-client