Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/Ub5JBZXVKjE9Tp-yHvK7wsgxNaY.roa
File: Ub5JBZXVKjE9Tp-yHvK7wsgxNaY.roa (raw, json)
Hash identifier: CJSj4176CqNLEYzKOcP2UmnT4AeroK2Iqsxrcvctjz0=
Subject key identifier: 51:BE:49:05:95:D5:2A:31:3D:4E:9F:B2:1E:F2:BB:C2:C8:31:35:A6
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 01A03D937E0949B47C86F09C235C9621858D
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/Ub5JBZXVKjE9Tp-yHvK7wsgxNaY.roa
Signing time: Wed 26 Aug 2026 10:17:51 +0000
ROA not before: Wed 26 Aug 2026 10:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21057
IP address blocks: 31.187.68.0/24 maxlen: 24
80.84.128.0/22 maxlen: 22
80.84.132.0/22 maxlen: 22
80.84.133.0/24 maxlen: 24
80.84.137.0/24 maxlen: 24
80.84.138.0/23 maxlen: 23
80.84.138.0/24 maxlen: 24
80.84.139.0/24 maxlen: 24
80.84.140.0/23 maxlen: 23
80.84.140.0/24 maxlen: 24
80.84.141.0/24 maxlen: 24
80.84.148.0/24 maxlen: 24
80.84.150.0/23 maxlen: 23
80.84.152.0/22 maxlen: 22
80.84.156.0/23 maxlen: 23
80.84.158.0/23 maxlen: 23
80.84.159.0/24 maxlen: 24
178.249.8.0/22 maxlen: 22
178.249.11.0/24 maxlen: 24
178.249.12.0/22 maxlen: 22
178.249.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:93:7e:09:49:b4:7c:86:f0:9c:23:5c:96:21:85:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: Aug 26 10:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51be490595d52a313d4e9fb21ef2bbc2c83135a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:4f:ad:63:06:35:08:2d:47:33:25:b7:93:
da:61:fd:c3:80:c6:1d:f4:27:76:83:a3:25:66:85:
08:c9:c8:5d:3d:5f:3b:55:02:da:76:bd:49:6a:5d:
4f:7c:55:40:d2:a6:ba:8d:6c:75:44:38:30:18:5c:
e7:4c:c5:5f:90:15:e6:b4:88:29:ab:66:3e:98:0f:
48:26:a0:cb:7a:c6:c9:da:c2:0d:3d:5d:73:c2:aa:
b0:18:4d:38:73:56:06:31:5b:dc:cf:36:61:03:8a:
bc:a3:e9:6a:a6:3a:c8:27:4c:ad:f7:65:1d:cc:7f:
39:1d:29:03:24:ff:02:04:9d:e7:ed:cc:c6:c8:25:
3e:a3:52:9e:7b:ab:d1:91:ae:3e:a1:37:02:e5:c9:
a5:22:14:ee:7f:b7:49:79:14:71:b2:5f:a5:76:ca:
d3:d1:86:dc:db:1e:94:fd:ac:51:17:33:b6:b8:0f:
7d:3c:c7:84:ec:10:51:e9:77:85:4c:99:4c:f8:ec:
8a:16:e0:41:25:f7:02:33:3d:4f:91:c7:2b:04:e1:
ca:47:a0:8e:cc:d0:ef:81:7d:65:bf:78:6f:26:1b:
8b:09:7c:53:fc:f8:34:b2:00:7c:74:a8:4a:ac:98:
b6:e4:f2:28:08:07:48:bc:2f:4c:99:5e:9b:f1:8a:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BE:49:05:95:D5:2A:31:3D:4E:9F:B2:1E:F2:BB:C2:C8:31:35:A6
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/Ub5JBZXVKjE9Tp-yHvK7wsgxNaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.68.0/24
80.84.128.0/21
80.84.137.0-80.84.141.255
80.84.148.0/24
80.84.150.0-80.84.159.255
178.249.8.0/21
Signature Algorithm: sha256WithRSAEncryption
89:36:b4:14:81:15:4c:66:30:98:36:80:b9:67:75:77:ca:b1:
ab:31:c6:b5:26:f5:d2:ad:a2:c0:92:7e:6a:0c:2a:65:9e:b2:
13:0f:5e:e7:7b:df:1c:f2:b9:2c:ac:4e:e5:db:60:4a:60:15:
68:b9:2b:49:8b:16:77:1a:cd:d3:83:0a:2b:5e:0a:ca:dd:12:
5a:f6:42:07:b5:3b:be:53:de:53:8e:be:ee:a8:5b:61:c8:41:
d2:1c:55:90:54:dd:6d:0e:8e:70:ee:f9:f4:d7:f1:b9:b1:ca:
a2:f6:be:64:81:7e:f0:66:3e:82:e0:6d:1f:83:ff:cb:ab:a7:
f4:98:5e:64:05:5d:c7:cb:15:bf:90:41:6c:af:a0:e5:96:74:
8c:2b:0d:19:97:a5:e9:6d:cc:83:c8:fc:64:bf:60:1e:1e:72:
d1:ab:92:e1:b4:e1:8f:01:9d:5a:26:07:bd:65:b4:d4:34:56:
4d:cb:4e:29:c1:67:bd:7f:ea:8f:d0:9d:63:9a:61:83:b6:60:
a3:0e:5c:32:64:26:af:ed:d2:8a:40:47:88:7b:6e:b6:81:42:
be:60:aa:df:fd:a8:a6:fb:15:64:a1:e9:81:6d:a3:d8:cc:5d:
20:7b:f1:52:e0:ab:3a:a2:18:41:6f:0d:4b:fc:e9:c3:19:ad:
e8:c9:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:31:14 2026 by rpki-client