Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/4IET8yl_woCchuqCTBWMPicM5KQ.roa
File: 4IET8yl_woCchuqCTBWMPicM5KQ.roa (raw, json)
Hash identifier: 7K7f9sxo1G7QU9QaeJu7IX3YPOqGh9AR3j3++XJopHY=
Subject key identifier: E0:81:13:F3:29:7F:C2:80:9C:86:EA:82:4C:15:8C:3E:27:0C:E4:A4
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 01A16822CEAAEABA337C5DB3CB0DFC66A3F4
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/4IET8yl_woCchuqCTBWMPicM5KQ.roa
Signing time: Fri 23 Oct 2026 09:41:13 +0000
ROA not before: Fri 23 Oct 2026 09:41:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51007
IP address blocks: 31.187.68.0/24 maxlen: 24
80.84.128.0/21 maxlen: 21
80.84.134.0/23 maxlen: 23
80.84.135.0/24 maxlen: 24
80.84.148.0/24 maxlen: 24
80.84.150.0/23 maxlen: 23
80.84.152.0/22 maxlen: 22
80.84.156.0/23 maxlen: 23
80.84.158.0/23 maxlen: 23
80.84.158.0/24 maxlen: 24
178.249.8.0/22 maxlen: 22
178.249.8.0/24 maxlen: 24
178.249.9.0/24 maxlen: 24
178.249.10.0/24 maxlen: 24
178.249.11.0/24 maxlen: 24
178.249.12.0/22 maxlen: 22
178.249.12.0/24 maxlen: 24
178.249.13.0/24 maxlen: 24
178.249.14.0/23 maxlen: 23
178.249.14.0/24 maxlen: 24
178.249.15.0/24 maxlen: 24
185.100.180.0/24 maxlen: 24
185.100.181.0/24 maxlen: 24
185.100.182.0/23 maxlen: 23
185.100.182.0/24 maxlen: 24
185.100.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:22:ce:aa:ea:ba:33:7c:5d:b3:cb:0d:fc:66:a3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: Oct 23 09:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e08113f3297fc2809c86ea824c158c3e270ce4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:75:26:aa:e4:91:b2:ee:30:2c:64:39:93:
1b:7c:d5:04:15:88:7c:4a:7e:0f:84:17:e2:7f:c5:
9e:7a:30:96:4c:67:95:6b:dd:1d:79:a2:c1:c9:87:
00:54:f8:1e:04:07:c4:5b:58:77:b2:32:78:5e:4d:
3e:d1:10:43:72:79:c9:50:78:63:72:68:f1:5f:e4:
a7:f8:3a:7a:75:40:f9:bd:ae:a8:eb:41:df:6e:a1:
c6:a1:43:2c:91:94:aa:35:90:10:84:ea:61:d9:50:
63:34:24:3e:56:74:a2:5c:86:13:a6:06:3e:dd:6f:
41:e9:e8:d1:6d:d8:9b:37:90:d6:a7:24:f1:81:0f:
bd:fb:c7:e0:02:25:4b:3e:a7:36:1b:b9:47:42:40:
1f:5b:15:a9:4e:b2:63:cd:e1:e8:27:e3:82:e3:35:
c6:cc:41:51:03:79:93:bd:1f:c1:07:92:80:d0:b0:
90:f3:44:02:a6:31:f4:c7:f5:0a:8b:1a:b6:56:8d:
96:96:5c:ba:f4:c0:0b:b6:1c:1a:0e:c5:ee:92:ea:
63:a7:5b:76:e4:14:01:6f:09:5d:0f:0e:10:a3:2f:
8d:39:c9:a7:18:d5:1e:9a:cf:1b:fa:f8:50:f7:b1:
34:55:88:e6:7b:4d:87:4a:a4:2a:70:82:38:1e:f0:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:13:F3:29:7F:C2:80:9C:86:EA:82:4C:15:8C:3E:27:0C:E4:A4
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/4IET8yl_woCchuqCTBWMPicM5KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.68.0/24
80.84.128.0/21
80.84.148.0/24
80.84.150.0-80.84.159.255
178.249.8.0/21
185.100.180.0/22
Signature Algorithm: sha256WithRSAEncryption
94:c1:eb:a4:e4:43:a2:aa:fb:9e:01:9e:5f:4d:22:6f:7d:1d:
1f:be:ed:ab:9f:0f:05:ae:7a:4c:33:7e:b4:e5:d7:4f:79:b0:
05:ff:e1:c9:2a:b4:e0:c0:56:c4:13:60:73:ed:c4:85:f7:68:
99:9c:d8:98:08:3c:23:fd:cf:06:71:f5:84:cb:60:64:c4:ad:
45:6e:20:db:ed:a9:37:79:b8:a9:21:71:3e:f4:8c:66:b8:95:
21:cd:4a:31:a8:b1:16:49:89:8f:3c:cd:51:e8:64:89:cb:22:
88:4a:b0:dd:e1:8b:18:dc:4c:b0:f1:d3:0a:60:ae:a3:2e:0c:
b0:57:28:a2:2c:48:4e:14:a4:28:5a:ac:30:39:68:12:f5:e9:
ed:af:0d:f9:aa:c0:e7:47:24:49:8a:f4:68:e7:7c:d0:aa:bd:
90:3a:90:da:27:1c:81:ae:3a:00:94:47:ac:10:fd:de:47:4f:
2a:34:6c:82:1c:76:9d:68:43:a1:75:4a:a6:dc:73:6d:fe:f9:
86:9c:a7:5d:56:bb:33:9e:2d:56:64:0b:b7:00:5e:73:b6:51:
ad:cd:8a:c6:53:33:d1:78:d2:e2:0b:d7:89:f0:9f:51:3c:1a:
d0:f1:06:13:61:bb:aa:d9:d2:1e:9a:75:7e:f7:3b:87:ad:ab:
d1:27:37:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:47:37 2026 by rpki-client