Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/fthEES7ULueds3FNvYJDhxIkkoY.roa
File: fthEES7ULueds3FNvYJDhxIkkoY.roa (raw, json)
Hash identifier: an/1lrGy32ibi55SrdxYeDyCH0x0JUXmE2+DfK+SDWY=
Subject key identifier: 7E:D8:44:11:2E:D4:2E:E7:9D:B3:71:4D:BD:82:43:87:12:24:92:86
Certificate issuer: /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial: 019F22DEF1464A1F74EC52E4763EB97CB94A
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/fthEES7ULueds3FNvYJDhxIkkoY.roa
Signing time: Thu 02 Jul 2026 12:47:43 +0000
ROA not before: Thu 02 Jul 2026 12:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8455
IP address blocks: 31.22.80.0/21 maxlen: 21
45.148.184.0/22 maxlen: 22
45.148.187.0/24 maxlen: 24
95.142.96.0/20 maxlen: 20
130.193.4.0/24 maxlen: 24
178.237.32.0/20 maxlen: 20
178.237.42.0/24 maxlen: 24
178.237.43.0/24 maxlen: 24
185.27.16.0/22 maxlen: 22
193.22.161.0/24 maxlen: 24
2a00:1188::/29 maxlen: 29
2a00:1188:8::/48 maxlen: 48
2a00:1188:9::/48 maxlen: 48
2a00:1188:a::/48 maxlen: 48
2a00:1188:b::/48 maxlen: 48
2a00:1188:c::/48 maxlen: 48
2a00:1188:d::/48 maxlen: 48
2a00:1188:e::/48 maxlen: 48
2a00:1188:13::/48 maxlen: 48
2a00:1188:19::/48 maxlen: 48
2a00:1188:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:de:f1:46:4a:1f:74:ec:52:e4:76:3e:b9:7c:b9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Validity
Not Before: Jul 2 12:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ed844112ed42ee79db3714dbd82438712249286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:6d:06:ea:00:3c:06:a3:5f:84:4c:6c:f1:
58:f6:82:0a:dd:4b:91:35:af:ba:ab:bc:d7:be:5a:
ab:27:e4:77:97:a4:f1:d7:47:f8:71:ec:d2:59:d2:
ae:4c:c7:dc:6d:40:4d:78:37:32:aa:a6:6b:6f:78:
44:0d:18:5b:67:c9:2a:24:cf:14:b0:89:08:80:da:
38:cc:56:7b:64:a8:b2:b4:78:7f:0c:8e:14:b3:1b:
2b:f9:83:87:f0:06:fe:f7:90:b7:25:9c:3f:59:7c:
68:ad:79:8b:31:ed:03:92:e5:73:52:c9:2d:15:18:
77:a6:28:5a:56:e3:78:37:d4:93:88:2a:41:5c:8b:
22:73:d0:7a:ab:84:0a:3e:05:61:67:68:a3:b1:40:
2a:19:d6:a4:81:71:50:08:88:55:fa:65:c1:9c:43:
e4:f1:cf:ff:71:94:a3:05:e7:46:06:4e:e7:d2:31:
af:c1:08:35:c3:99:54:f6:43:d5:32:ce:b2:3b:e9:
56:c3:6b:6c:f3:18:b4:34:93:43:dc:0d:8c:56:6c:
76:92:d4:0c:91:d9:8a:ca:76:dd:e0:65:c2:3e:e5:
cb:9f:70:5b:f4:d2:06:9c:20:01:0a:80:d8:7a:cb:
2e:2f:29:25:a1:09:bd:77:a9:71:7a:d6:e8:47:43:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D8:44:11:2E:D4:2E:E7:9D:B3:71:4D:BD:82:43:87:12:24:92:86
X509v3 Authority Key Identifier:
keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/fthEES7ULueds3FNvYJDhxIkkoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.80.0/21
45.148.184.0/22
95.142.96.0/20
130.193.4.0/24
178.237.32.0/20
185.27.16.0/22
193.22.161.0/24
IPv6:
2a00:1188::/29
Signature Algorithm: sha256WithRSAEncryption
3d:fa:69:50:4d:f2:90:7d:82:ae:c9:dd:7f:14:06:3d:96:fa:
da:fe:f4:2b:9f:ad:fa:9d:f9:0a:78:ff:2b:82:cd:f5:3b:17:
64:9c:bc:8d:34:63:67:2a:93:c8:3e:7e:07:6a:42:ba:c9:5b:
f7:6e:28:ee:85:6b:81:34:7b:c8:41:5e:4d:aa:6e:7f:bd:c2:
d5:c4:32:64:14:c6:9e:6c:d3:bb:d8:b7:c6:5b:94:40:fc:d0:
1f:64:bb:df:0e:68:71:5a:53:59:e2:56:34:72:69:74:fc:e2:
3a:de:cd:82:fd:47:46:a8:40:af:84:98:18:20:d2:6e:cc:ce:
a9:cb:1f:dd:75:d4:cb:d7:62:44:db:d1:e1:c6:43:aa:5c:4b:
e8:41:15:e2:09:ea:85:fd:1a:f6:77:3d:09:b5:f0:91:f3:4c:
d0:ba:04:9c:46:0c:af:04:c8:46:36:1d:65:f7:1c:d9:5e:27:
1a:e5:9f:2e:c0:88:6a:a8:67:dd:3d:33:0d:97:24:7c:d8:e1:
01:f3:58:87:9d:e7:5c:ca:3f:05:d7:4e:6f:d1:77:c8:d8:ca:
69:ca:63:f2:84:82:f3:85:60:a7:55:83:2d:ae:34:63:3e:7c:
4c:bc:b3:33:79:64:3c:1b:e8:d8:1f:e0:35:c6:9a:9e:4e:0c:
a8:e9:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:10 2026 by rpki-client