Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/GO-d2Wh9QMmrYUtLnGnz133HNZg.roa
File: GO-d2Wh9QMmrYUtLnGnz133HNZg.roa (raw, json)
Hash identifier: xFp07iitJni/qMpmHXkgYii0ns8yCXMQvZmN2wMYF3g=
Subject key identifier: 18:EF:9D:D9:68:7D:40:C9:AB:61:4B:4B:9C:69:F3:D7:7D:C7:35:98
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 019FEB0E9CED30F053A4F09CAE51756C3476
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/GO-d2Wh9QMmrYUtLnGnz133HNZg.roa
Signing time: Mon 10 Aug 2026 09:43:51 +0000
ROA not before: Mon 10 Aug 2026 09:43:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211757
IP address blocks: 31.43.172.0/24 maxlen: 24
31.43.173.0/24 maxlen: 24
85.137.128.0/24 maxlen: 24
85.137.129.0/24 maxlen: 24
85.137.130.0/24 maxlen: 24
85.137.131.0/24 maxlen: 24
85.137.132.0/24 maxlen: 24
85.137.133.0/24 maxlen: 24
85.137.134.0/24 maxlen: 24
85.137.135.0/24 maxlen: 24
85.137.136.0/24 maxlen: 24
85.137.137.0/24 maxlen: 24
85.137.138.0/24 maxlen: 24
85.137.139.0/24 maxlen: 24
85.137.140.0/24 maxlen: 24
85.137.141.0/24 maxlen: 24
85.137.142.0/24 maxlen: 24
85.137.143.0/24 maxlen: 24
85.137.144.0/24 maxlen: 24
85.137.145.0/24 maxlen: 24
85.137.146.0/24 maxlen: 24
85.137.147.0/24 maxlen: 24
85.137.148.0/24 maxlen: 24
85.137.149.0/24 maxlen: 24
85.137.150.0/24 maxlen: 24
85.137.151.0/24 maxlen: 24
85.137.152.0/24 maxlen: 24
85.137.153.0/24 maxlen: 24
85.137.154.0/24 maxlen: 24
85.137.155.0/24 maxlen: 24
85.137.156.0/24 maxlen: 24
85.137.157.0/24 maxlen: 24
85.137.158.0/24 maxlen: 24
85.137.159.0/24 maxlen: 24
141.138.152.0/24 maxlen: 24
141.138.153.0/24 maxlen: 24
141.138.154.0/24 maxlen: 24
141.138.155.0/24 maxlen: 24
141.138.156.0/24 maxlen: 24
141.138.157.0/24 maxlen: 24
141.138.158.0/24 maxlen: 24
141.138.159.0/24 maxlen: 24
185.242.186.0/24 maxlen: 24
2a10:9840:1172::/48 maxlen: 48
2a10:9840:1173::/48 maxlen: 48
2a10:9840:2152::/48 maxlen: 48
2a10:9840:2153::/48 maxlen: 48
2a10:9840:2154::/48 maxlen: 48
2a10:9840:2155::/48 maxlen: 48
2a10:9840:2156::/48 maxlen: 48
2a10:9840:2157::/48 maxlen: 48
2a10:9840:2158::/48 maxlen: 48
2a10:9840:2159::/48 maxlen: 48
2a10:9840:3186::/48 maxlen: 48
2a10:9840:4128::/48 maxlen: 48
2a10:9840:4129::/48 maxlen: 48
2a10:9840:4130::/48 maxlen: 48
2a10:9840:4131::/48 maxlen: 48
2a10:9840:4132::/48 maxlen: 48
2a10:9840:4133::/48 maxlen: 48
2a10:9840:4134::/48 maxlen: 48
2a10:9840:4135::/48 maxlen: 48
2a10:9840:4136::/48 maxlen: 48
2a10:9840:4137::/48 maxlen: 48
2a10:9840:4138::/48 maxlen: 48
2a10:9840:4139::/48 maxlen: 48
2a10:9840:4140::/48 maxlen: 48
2a10:9840:4141::/48 maxlen: 48
2a10:9840:4142::/48 maxlen: 48
2a10:9840:4143::/48 maxlen: 48
2a10:9840:4144::/48 maxlen: 48
2a10:9840:4145::/48 maxlen: 48
2a10:9840:4146::/48 maxlen: 48
2a10:9840:4147::/48 maxlen: 48
2a10:9840:4148::/48 maxlen: 48
2a10:9840:4149::/48 maxlen: 48
2a10:9840:4150::/48 maxlen: 48
2a10:9840:4151::/48 maxlen: 48
2a10:9840:4152::/48 maxlen: 48
2a10:9840:4153::/48 maxlen: 48
2a10:9840:4154::/48 maxlen: 48
2a10:9840:4155::/48 maxlen: 48
2a10:9840:4156::/48 maxlen: 48
2a10:9840:4157::/48 maxlen: 48
2a10:9840:4158::/48 maxlen: 48
2a10:9840:4159::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:0e:9c:ed:30:f0:53:a4:f0:9c:ae:51:75:6c:34:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Aug 10 09:43:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18ef9dd9687d40c9ab614b4b9c69f3d77dc73598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:91:5d:a8:c6:88:af:4a:34:3d:ef:62:b2:
77:6e:2f:8c:89:fa:67:0c:7e:07:10:a4:d7:4c:d2:
b2:57:27:b4:9e:b9:08:45:de:8e:b9:ae:e2:cb:fb:
a0:5b:02:18:57:ac:7a:cd:05:19:8b:40:a8:d7:54:
9a:6f:7e:89:08:48:61:0f:d4:ed:ba:0b:46:e2:43:
fe:dd:14:46:65:29:cb:47:da:db:39:71:33:b2:c5:
6d:69:f1:27:4c:1e:28:f3:a4:23:bd:99:a9:e2:6d:
80:12:34:1f:3d:b6:43:2c:d0:66:62:77:85:cd:e0:
b3:15:4f:6b:0c:7a:ff:a8:e5:e5:a3:51:20:3e:cc:
5e:66:dd:7b:59:29:c9:8c:60:4e:6e:a5:11:26:5c:
eb:d1:84:2b:a8:b4:64:d9:6f:51:0d:00:0c:17:e4:
ed:01:37:b6:ff:13:50:4c:d5:fe:7d:54:97:25:0d:
91:01:92:08:55:79:3d:7a:13:e4:4a:89:77:79:aa:
24:86:dd:2b:fb:19:41:ad:4e:fe:b1:2c:ef:52:33:
80:3d:9e:ac:31:65:ed:29:e6:6c:ee:93:7a:22:ea:
d1:6b:aa:bd:d9:b2:a3:9e:cf:15:d3:33:4d:df:6f:
c7:3e:84:cf:32:98:1b:a7:8d:87:ee:70:86:56:ef:
3e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EF:9D:D9:68:7D:40:C9:AB:61:4B:4B:9C:69:F3:D7:7D:C7:35:98
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/GO-d2Wh9QMmrYUtLnGnz133HNZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.172.0/23
85.137.128.0/19
141.138.152.0/21
185.242.186.0/24
IPv6:
2a10:9840:1172::/47
2a10:9840:2152::-2a10:9840:2159:ffff:ffff:ffff:ffff:ffff
2a10:9840:3186::/48
2a10:9840:4128::/47
2a10:9840:4130::-2a10:9840:4139:ffff:ffff:ffff:ffff:ffff
2a10:9840:4140::-2a10:9840:4149:ffff:ffff:ffff:ffff:ffff
2a10:9840:4150::-2a10:9840:4159:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
00:b6:4e:bf:8e:a0:97:46:fd:bc:87:e5:17:cb:d4:d4:de:ed:
08:3e:2c:73:13:5d:db:d6:de:a9:87:29:82:d4:b3:6c:81:43:
7f:b2:65:bf:df:4a:88:13:4c:35:48:8b:a1:85:80:fe:a7:a7:
d3:0b:57:d4:6d:f6:f8:2c:18:57:fd:38:37:b7:7c:5a:7d:20:
1c:3c:1e:cb:97:40:ff:ad:58:da:7b:98:f1:fd:06:f6:59:36:
6d:46:5d:42:89:07:0b:0b:b0:8b:4c:17:1f:1b:aa:99:0f:3a:
b1:a6:3c:db:a5:02:8c:da:82:fb:8e:a1:6f:4e:0d:50:61:de:
97:2b:a6:01:8b:b0:16:6d:3a:2f:26:91:2e:e0:f6:97:06:9a:
2f:0d:f4:05:91:cc:e4:3b:cc:cf:8f:74:78:3f:14:15:88:7f:
1c:3a:14:ec:a0:4d:83:97:88:c4:62:2b:b6:b4:a3:a8:64:6b:
1e:f6:d2:48:df:ca:1a:70:66:0f:0f:70:0a:50:a1:56:ea:f1:
9d:40:d5:05:11:41:3c:e1:c0:6e:15:17:a1:24:7b:75:d4:31:
3d:32:a4:d6:66:66:a9:65:d1:6e:a0:39:0e:b8:f9:b8:05:c3:
04:66:c5:72:13:b8:a0:a8:81:89:e0:87:e0:cf:98:f6:72:a4:
b2:54:2d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:46 2026 by rpki-client