Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/o31BSq-rRnHViRiC-_Ud150_mJc.roa
File: o31BSq-rRnHViRiC-_Ud150_mJc.roa (raw, json)
Hash identifier: Rf2/syfOSyAUdXoIr5yBGEXQEkq2PNlzQ7fNzAdPxDg=
Subject key identifier: A3:7D:41:4A:AF:AB:46:71:D5:89:18:82:FB:F5:1D:D7:9D:3F:98:97
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019DCE8419E685331C25450ADC7EB01BE909
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/o31BSq-rRnHViRiC-_Ud150_mJc.roa
Signing time: Mon 27 Apr 2026 10:37:36 +0000
ROA not before: Mon 27 Apr 2026 10:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 80.97.54.0/24 maxlen: 24
81.180.37.0/24 maxlen: 24
81.180.173.0/24 maxlen: 24
81.181.172.0/24 maxlen: 24
81.181.175.0/24 maxlen: 24
81.181.236.0/22 maxlen: 22
85.120.128.0/22 maxlen: 22
85.120.132.0/22 maxlen: 22
85.122.176.0/22 maxlen: 22
194.102.122.0/23 maxlen: 23
194.102.217.0/24 maxlen: 24
217.156.29.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:84:19:e6:85:33:1c:25:45:0a:dc:7e:b0:1b:e9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 27 10:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a37d414aafab4671d5891882fbf51dd79d3f9897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:5f:e8:50:9f:11:37:66:e0:13:cb:32:2d:
f6:eb:d5:93:e0:b3:a4:cc:cd:51:f4:16:03:d2:54:
ab:fc:25:3e:95:d5:a5:fc:71:3f:38:06:a5:dd:f7:
c0:20:ac:73:f2:88:29:d9:39:57:5f:51:18:62:d3:
ca:86:5f:ae:5f:52:41:d6:ad:09:88:ca:84:53:4e:
a9:86:d4:b0:05:e5:4f:c3:2b:71:84:2d:21:91:33:
f4:b3:e0:a4:bc:9a:ba:16:38:81:97:04:2d:d2:e2:
ba:b8:5d:78:b8:93:b6:db:56:2b:70:61:1f:e6:35:
8a:da:d0:2c:a2:c3:3c:a0:10:94:43:c4:18:96:73:
f1:dc:1d:07:c3:4c:ce:98:c7:6d:7b:6d:4f:eb:5f:
c7:c1:04:00:b8:4d:c6:2b:32:bb:de:1f:4e:15:e6:
94:de:d2:3c:36:75:b7:bb:4f:69:f2:14:42:f6:85:
9e:b4:e1:f5:11:a7:f2:d6:db:a9:50:65:a9:b6:f1:
aa:6e:26:df:d8:93:0a:7a:30:84:a8:02:18:f0:86:
f0:9d:bf:5c:c3:bd:8c:40:bf:84:22:f5:08:9f:a7:
64:02:88:87:b8:0a:f6:94:43:77:14:5e:0d:1c:0e:
c8:aa:29:00:9e:1e:86:00:50:f7:9f:70:b6:11:6b:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7D:41:4A:AF:AB:46:71:D5:89:18:82:FB:F5:1D:D7:9D:3F:98:97
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/o31BSq-rRnHViRiC-_Ud150_mJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.54.0/24
81.180.37.0/24
81.180.173.0/24
81.181.172.0/24
81.181.175.0/24
81.181.236.0/22
85.120.128.0/21
85.122.176.0/22
194.102.122.0/23
194.102.217.0/24
217.156.29.0/24
217.156.57.0/24
217.156.112.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:4e:3e:28:50:b4:3c:67:6d:b9:da:8a:f4:29:51:d5:52:70:
1d:ec:a6:83:aa:9e:b3:6d:03:44:69:93:d3:d1:8b:54:a9:c1:
25:2c:0a:e2:e3:f7:4e:e2:b7:ba:88:5a:d5:90:dc:c5:3b:8f:
58:8d:1b:c2:90:71:4c:42:2f:48:07:00:fa:d2:db:c4:d5:17:
a6:34:a9:c7:aa:25:cd:02:99:80:54:05:05:12:c6:7a:79:a4:
31:1b:9a:f7:50:85:04:a2:41:a5:c9:87:87:97:51:86:ff:47:
7d:fe:7a:f6:f6:72:94:5d:e0:b9:53:fb:c7:e0:1e:bc:2b:8f:
8d:a2:dd:f4:5a:67:1d:30:18:e2:62:38:6e:72:af:fa:a8:1f:
c6:e1:d8:09:cb:16:7b:87:7b:f8:da:26:78:8e:3b:74:a1:23:
6f:b5:7b:2f:0a:d9:0c:d1:bd:26:fb:5b:35:da:5f:56:1a:9c:
2c:5b:4e:48:a2:a6:dc:14:4c:33:21:0b:e8:f2:61:20:78:32:
9c:31:73:68:94:89:86:76:09:45:8e:50:10:f1:51:c4:8b:7f:
60:49:c9:76:b2:31:2e:bf:41:61:53:f2:ad:be:14:6a:3f:f4:
72:d9:5f:1f:0c:94:46:bb:75:52:c6:9c:02:77:ae:fa:6e:7d:
a5:32:51:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:02:19 2026 by rpki-client