Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/GopW9XoJL6Ypu9PWinwmSTBcV5k.roa
File: GopW9XoJL6Ypu9PWinwmSTBcV5k.roa (raw, json)
Hash identifier: 7tI9fa5JE+5E+2k/J0Jt01aGm4si+69+ihdJ7wHZgjw=
Subject key identifier: 1A:8A:56:F5:7A:09:2F:A6:29:BB:D3:D6:8A:7C:26:49:30:5C:57:99
Certificate issuer: /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial: 019F22DEF1DBBBB845E8C6815C67D4704FE1
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/GopW9XoJL6Ypu9PWinwmSTBcV5k.roa
Signing time: Thu 02 Jul 2026 12:47:43 +0000
ROA not before: Thu 02 Jul 2026 12:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34766
IP address blocks: 31.22.84.0/24 maxlen: 24
95.142.110.0/24 maxlen: 24
178.237.34.0/24 maxlen: 24
185.138.56.0/22 maxlen: 22
185.138.56.0/24 maxlen: 24
185.138.57.0/24 maxlen: 24
185.138.58.0/24 maxlen: 24
185.138.59.0/24 maxlen: 24
193.202.88.0/24 maxlen: 24
2a07:a80::/29 maxlen: 29
2a07:a80::/40 maxlen: 40
2a07:a80:100::/40 maxlen: 40
2a07:a80:200::/40 maxlen: 40
2a07:a80:300::/40 maxlen: 40
2a07:a80:b00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:de:f1:db:bb:b8:45:e8:c6:81:5c:67:d4:70:4f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Validity
Not Before: Jul 2 12:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a8a56f57a092fa629bbd3d68a7c2649305c5799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:06:cb:92:df:50:13:ca:0f:dc:bc:c1:58:d2:
33:71:69:2e:90:62:c4:38:17:f9:9b:4d:77:5b:7f:
28:2f:f5:72:53:59:86:e9:e4:ea:44:13:97:a2:fa:
9c:d0:67:c4:44:13:c1:8b:90:55:b3:24:b4:58:01:
d9:f7:cb:1d:61:84:38:14:e2:cc:81:39:ab:ee:c7:
4c:1d:0c:8a:f1:ee:32:7f:a8:83:f0:15:7d:9b:a3:
d6:0b:62:bf:38:dd:1a:1a:c9:d2:ae:88:03:0c:73:
5c:e5:00:d2:12:ff:71:7b:a0:c2:92:b6:bb:b8:ff:
c3:f1:1b:61:99:78:70:19:e3:f0:a7:9d:57:15:af:
9f:ba:3c:70:d0:87:63:48:f2:f7:44:14:52:e4:11:
d6:88:4c:78:7e:a9:16:33:45:6d:b4:b7:18:f1:c1:
12:af:7b:6c:03:f4:95:89:3b:57:5e:41:4b:08:1a:
c4:c3:06:6d:70:fa:b5:db:b9:ad:99:11:73:c0:eb:
1c:0a:43:c8:41:0d:b5:6c:13:09:67:74:bd:87:a3:
e2:a2:a4:c5:68:1d:e7:7b:a0:63:50:d5:9b:04:3a:
13:99:14:97:0d:df:35:7c:c7:11:12:6b:a3:f2:9d:
66:d2:12:66:89:f2:37:65:b9:c2:ef:bc:10:75:c0:
bc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8A:56:F5:7A:09:2F:A6:29:BB:D3:D6:8A:7C:26:49:30:5C:57:99
X509v3 Authority Key Identifier:
keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/GopW9XoJL6Ypu9PWinwmSTBcV5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.84.0/24
95.142.110.0/24
178.237.34.0/24
185.138.56.0/22
193.202.88.0/24
IPv6:
2a07:a80::/29
Signature Algorithm: sha256WithRSAEncryption
9a:1b:42:45:55:2b:60:69:6f:dd:0b:49:1d:e9:a6:6c:9c:ad:
fb:de:d7:af:07:6d:4c:f4:f1:50:9a:06:43:66:e2:ca:13:9b:
97:e8:37:de:7d:74:36:7a:0e:de:66:0f:6b:96:4e:22:37:ac:
61:b3:25:02:e2:31:0a:c9:cb:c6:06:01:64:a1:9b:36:2d:6a:
87:ef:2b:5e:a3:84:eb:c3:58:94:ed:83:51:cd:5c:97:9b:c7:
43:1e:36:77:e9:5e:49:67:bf:17:63:e4:18:52:79:e2:6e:c8:
cc:41:e3:de:79:21:bb:8f:5c:00:ac:26:d7:75:67:6d:29:c1:
ae:ff:12:33:6e:f3:d1:1f:9f:c4:8c:d2:01:61:d2:78:92:3b:
7e:9b:bd:cf:37:20:25:2b:91:2e:7d:26:d9:d8:a8:f2:3c:63:
73:fa:c5:db:29:ed:b9:dd:75:02:44:8f:cf:18:7a:0b:ad:24:
67:fd:d3:f6:0c:f1:8c:c7:bc:fe:70:6e:c1:a7:95:36:b5:ce:
85:d0:4c:60:c0:84:69:6d:c1:86:70:2d:77:c3:19:41:c7:5b:
e7:cf:00:e6:dc:35:6f:94:34:b9:32:84:e3:7b:2f:e6:d9:51:
bc:97:4a:01:e1:38:3c:c2:33:52:7d:7a:32:a7:8f:49:e3:e5:
47:b3:74:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:10 2026 by rpki-client