Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/em-wCAvCHoRc_h-xPjZ1v-f-PJU.roa
File: em-wCAvCHoRc_h-xPjZ1v-f-PJU.roa (raw, json)
Hash identifier: PgYRRROxFEoYAKT7r9ipsKpTh4ssV5nRRFlWjSGCkb0=
Subject key identifier: 7A:6F:B0:08:0B:C2:1E:84:5C:FE:1F:B1:3E:36:75:BF:E7:FE:3C:95
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 019F6B91D2FCD81305FB4F89D0E0D763E59D
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/em-wCAvCHoRc_h-xPjZ1v-f-PJU.roa
Signing time: Thu 16 Jul 2026 15:35:46 +0000
ROA not before: Thu 16 Jul 2026 15:35:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39318
IP address blocks: 31.210.174.0/23 maxlen: 24
46.247.42.0/23 maxlen: 24
82.115.48.0/23 maxlen: 24
82.115.48.0/24 maxlen: 24
82.115.49.0/24 maxlen: 24
85.202.192.0/23 maxlen: 24
194.238.42.0/24 maxlen: 24
213.155.22.0/23 maxlen: 23
213.155.22.0/24 maxlen: 24
213.155.23.0/24 maxlen: 24
2a00:5da0:2000::/36 maxlen: 48
2a00:5da0:3000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:91:d2:fc:d8:13:05:fb:4f:89:d0:e0:d7:63:e5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Jul 16 15:35:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a6fb0080bc21e845cfe1fb13e3675bfe7fe3c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:89:db:1e:27:f0:7f:a6:c1:4f:e1:ca:4e:45:
c4:a8:75:8f:4a:df:c2:d0:a6:3f:98:aa:6c:2b:49:
e6:2c:6d:27:14:e0:78:cc:a6:0e:e6:6a:fe:40:ae:
d5:00:6b:b3:07:36:ca:24:f1:c5:ef:28:c1:9c:48:
15:f1:92:c1:be:41:89:dc:ee:8a:61:62:3c:55:4d:
a0:b7:a1:f5:b1:bf:f9:78:1a:a4:22:31:13:fc:29:
98:d0:ee:1e:31:c6:b8:80:23:26:f5:0f:81:fb:42:
26:29:3e:fa:ca:ac:92:ac:da:9e:c3:99:60:5a:d5:
aa:16:c2:5e:d9:a8:10:15:af:b0:a1:87:b5:bc:57:
ad:ba:13:bd:81:a4:9a:18:f2:87:f1:e1:ee:1a:7b:
82:a0:81:06:f6:cc:2c:e6:58:52:41:fd:00:68:f1:
0a:02:5d:98:7d:cd:c4:a0:21:02:e9:b9:03:17:3e:
c7:c6:b0:a6:2d:1f:9e:8d:f9:e6:4f:2b:39:d3:26:
f1:ee:6f:cc:ff:95:5d:93:3d:90:93:f9:f7:1f:d3:
86:8b:1f:e9:b2:14:7c:83:7e:5f:c1:99:10:e6:6f:
60:11:ad:17:1e:79:2c:36:3b:cd:2b:23:d6:00:1e:
a0:25:80:c1:d3:15:d7:48:59:b3:d3:eb:40:5a:e5:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6F:B0:08:0B:C2:1E:84:5C:FE:1F:B1:3E:36:75:BF:E7:FE:3C:95
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/em-wCAvCHoRc_h-xPjZ1v-f-PJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.174.0/23
46.247.42.0/23
82.115.48.0/23
85.202.192.0/23
194.238.42.0/24
213.155.22.0/23
IPv6:
2a00:5da0:2000::/35
Signature Algorithm: sha256WithRSAEncryption
41:5c:b6:4f:3a:63:d8:ad:81:a0:07:56:fc:2b:ff:06:54:1b:
e0:23:5a:81:2a:23:db:ea:f6:ca:fe:1b:5a:60:e4:5f:54:a1:
69:15:16:d1:79:2c:2c:f0:f8:cb:9a:85:f4:fa:9b:7a:e4:86:
b2:f0:7c:19:e3:0a:9f:bb:ab:ae:df:dc:80:67:66:49:b9:4c:
15:d3:49:37:67:75:b8:97:f4:ad:77:fb:1d:10:c6:69:d7:c0:
d6:83:61:d2:3c:d2:6e:5b:36:33:b3:4b:74:17:7e:35:68:34:
c1:e2:8e:c8:d5:bc:6c:65:df:69:4b:0f:5d:2b:7d:47:d7:65:
16:39:ae:57:1b:32:aa:f9:a1:cc:b6:d8:51:60:8b:54:35:65:
ac:4b:10:90:c8:0f:bc:99:6b:44:55:8d:69:e5:89:b8:47:53:
57:fc:3c:58:ad:0c:99:52:2e:58:e8:58:2a:03:21:37:98:a2:
3f:c9:16:85:48:76:f2:4e:07:50:40:33:8b:1b:4c:d8:bf:c3:
7d:79:8a:3d:8b:60:aa:85:95:74:ac:98:96:00:63:e6:be:9f:
21:a3:81:93:7c:0f:ee:ac:bc:c4:59:91:aa:d3:8e:f7:31:00:
e2:82:13:11:7a:7c:ea:fc:59:35:30:74:96:43:07:6d:93:ab:
af:ca:e6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:14:08 2026 by rpki-client