Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/uD6dbhGtWmQBHOm5TaZwxI2bxHo.roa
File: uD6dbhGtWmQBHOm5TaZwxI2bxHo.roa (raw, json)
Hash identifier: 7o9gHm9m9ldUHt+wJFO9pLkudQkTXM6nXZhqiV90Zdg=
Subject key identifier: B8:3E:9D:6E:11:AD:5A:64:01:1C:E9:B9:4D:A6:70:C4:8D:9B:C4:7A
Certificate issuer: /CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Certificate serial: 019B7D5BFB322D34019A4230B07DDEF85CBF
Authority key identifier: 79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/uD6dbhGtWmQBHOm5TaZwxI2bxHo.roa
Signing time: Fri 02 Jan 2026 06:18:58 +0000
ROA not before: Fri 02 Jan 2026 06:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197651
IP address blocks: 31.177.16.0/22 maxlen: 22
31.177.18.0/24 maxlen: 24
31.177.19.0/24 maxlen: 24
185.217.104.0/22 maxlen: 22
185.217.105.0/24 maxlen: 24
185.217.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:fb:32:2d:34:01:9a:42:30:b0:7d:de:f8:5c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Validity
Not Before: Jan 2 06:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b83e9d6e11ad5a64011ce9b94da670c48d9bc47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:ad:e5:9b:d3:be:d4:67:44:bb:cd:81:19:
c6:da:53:9b:a0:d5:c6:79:43:28:32:9c:84:d7:fd:
fe:3f:a3:e7:67:e3:90:b5:a6:78:ee:46:cc:3c:d0:
45:f1:4c:7d:79:bb:dc:32:3b:3c:ac:a8:62:9a:7f:
45:0d:04:2f:29:01:03:53:7c:3b:44:d5:ac:9a:04:
63:26:af:61:48:a4:35:7a:22:5a:b9:ab:90:a0:de:
32:65:32:34:a3:ae:86:0c:b5:c4:f6:0c:73:73:07:
57:85:8c:24:5a:b9:37:0a:11:e4:bd:f8:f3:df:c4:
c6:78:e5:10:83:49:41:83:34:78:17:a1:8e:60:74:
8c:fe:db:44:c4:4f:9d:bb:92:93:7f:ca:60:a4:4b:
c0:88:8c:35:90:fe:d0:bc:67:f2:c4:52:cf:14:12:
ad:52:49:78:47:fb:1c:0a:c5:0b:8c:b9:69:32:38:
99:9e:bf:e0:0c:08:14:91:a0:28:cf:4e:df:03:a5:
11:6a:73:41:0a:24:01:f7:94:e4:5b:49:e8:69:82:
63:5d:6f:5a:ed:63:61:c3:39:af:a1:58:97:5a:a0:
f3:0b:bc:5b:e6:36:8e:f3:18:c5:1d:fc:a2:69:4b:
af:8b:38:e8:3c:16:5c:6e:38:22:1e:99:ea:ba:89:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3E:9D:6E:11:AD:5A:64:01:1C:E9:B9:4D:A6:70:C4:8D:9B:C4:7A
X509v3 Authority Key Identifier:
keyid:79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/uD6dbhGtWmQBHOm5TaZwxI2bxHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.16.0/22
185.217.104.0/22
Signature Algorithm: sha256WithRSAEncryption
77:f7:b7:e2:9e:fc:c1:e9:68:1c:5d:9b:bd:7f:3c:55:66:3d:
ef:49:2c:58:47:ec:61:65:ec:80:a9:a7:61:5b:ec:98:6a:81:
66:62:d9:d5:a0:58:d3:a2:ba:d7:ad:f3:e1:1c:a4:fa:d1:58:
9f:16:75:0d:fe:55:fc:33:ec:18:d2:45:d8:8a:8a:9d:f8:1b:
0a:88:9b:3b:b8:b6:ce:64:42:df:c8:52:58:66:6a:b5:50:f6:
89:6a:3a:36:17:d3:7f:0d:34:54:a7:61:9c:54:72:66:1b:3f:
f1:5d:2f:3a:9a:ed:42:e0:5f:67:a9:ac:9a:91:28:6a:96:fd:
e1:21:8e:4a:c2:e0:44:5a:43:19:bd:99:6b:bd:fd:9d:2b:ed:
1e:ed:26:6a:a6:00:cf:d2:df:51:a5:2a:48:0e:a9:57:4a:f6:
1f:d2:44:97:ef:19:cf:14:72:d6:c0:fb:d2:13:11:98:94:c8:
39:e8:23:23:3d:af:26:c4:6c:92:e3:7b:a2:4a:41:f3:22:9c:
01:bf:0f:d6:73:9b:a5:0e:a6:ab:8d:ec:f7:2b:26:cb:b6:dd:
c1:a9:a8:f0:7b:7b:09:43:5e:6e:a4:7b:55:98:65:ea:fa:43:
45:6d:b1:0d:9f:18:cc:e3:d7:91:4d:7a:bb:be:c0:b4:6e:1d:
f2:f0:f4:46
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt9W/syLTQBmkIwsH3e+Fy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5M2Q5NjY0ZTI5YzBiZWI5MmM1NjczZGI2MDNhYjg0M2Uw
YzRjYWYwHhcNMjYwMTAyMDYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODNlOWQ2ZTExYWQ1YTY0MDExY2U5Yjk0ZGE2NzBjNDhkOWJjNDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzSt5ZvTvtRnRLvNgRnG2lOboNXG
eUMoMpyE1/3+P6PnZ+OQtaZ47kbMPNBF8Ux9ebvcMjs8rKhimn9FDQQvKQEDU3w7
RNWsmgRjJq9hSKQ1eiJauauQoN4yZTI0o66GDLXE9gxzcwdXhYwkWrk3ChHkvfjz
38TGeOUQg0lBgzR4F6GOYHSM/ttExE+du5KTf8pgpEvAiIw1kP7QvGfyxFLPFBKt
Ukl4R/scCsULjLlpMjiZnr/gDAgUkaAoz07fA6URanNBCiQB95TkW0noaYJjXW9a
7WNhwzmvoViXWqDzC7xb5jaO8xjFHfyiaUuvizjoPBZcbjgiHpnquomVrQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLg+nW4RrVpkARzpuU2mcMSNm8R6MB8GA1UdIwQY
MBaAFHk9lmTinAvrksVnPbYDq4Q+DEyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVQyV1pPS2NDLXVTeFdjOXRnT3JoRDRNVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82ZWUwNjUtN2YyZS00MmU2LTliOTIt
Njg2Mzk5MDAwZDNiLzEvdUQ2ZGJoR3RXbVFCSE9tNVRhWnd4STJieEhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82ZWUwNjUtN2YyZS00MmU2LTliOTItNjg2Mzk5MDAwZDNi
LzEvZVQyV1pPS2NDLXVTeFdjOXRnT3JoRDRNVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCH7EQAwQC
udloMA0GCSqGSIb3DQEBCwUAA4IBAQB397finvzB6WgcXZu9fzxVZj3vSSxYR+xh
ZeyAqadhW+yYaoFmYtnVoFjTorrXrfPhHKT60VifFnUN/lX8M+wY0kXYioqd+BsK
iJs7uLbOZELfyFJYZmq1UPaJajo2F9N/DTRUp2GcVHJmGz/xXS86mu1C4F9nqaya
kShqlv3hIY5KwuBEWkMZvZlrvf2dK+0e7SZqpgDP0t9RpSpIDqlXSvYf0kSX7xnP
FHLWwPvSExGYlMg56CMjPa8mxGyS43uiSkHzIpwBvw/Wc5ulDqarjez3KybLtt3B
qajwe3sJQ15upHtVmGXq+kNFbbENnxjM49eRTXq7vsC0bh3y8PRG
-----END CERTIFICATE-----
Generated at Mon Feb 23 00:53:39 2026 by rpki-client