Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/1JpN7FHKM4FO6E7uv4B84-IqbP0.roa
File: 1JpN7FHKM4FO6E7uv4B84-IqbP0.roa (raw, json)
Hash identifier: LFF4bpL91df6PUePqFkpslW9FOtrELZ1z7Xtg08v9IQ=
Subject key identifier: D4:9A:4D:EC:51:CA:33:81:4E:E8:4E:EE:BF:80:7C:E3:E2:2A:6C:FD
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 019F9154625FA5F78F18634ACB7340062F4B
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/1JpN7FHKM4FO6E7uv4B84-IqbP0.roa
Signing time: Thu 23 Jul 2026 23:34:14 +0000
ROA not before: Thu 23 Jul 2026 23:34:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34412
IP address blocks: 31.25.90.0/24 maxlen: 24
31.25.91.0/24 maxlen: 24
62.204.61.0/24 maxlen: 24
77.72.80.0/24 maxlen: 24
91.228.192.0/24 maxlen: 24
91.246.44.0/24 maxlen: 24
146.19.217.0/24 maxlen: 24
185.49.231.0/24 maxlen: 24
185.226.140.0/24 maxlen: 24
185.226.141.0/24 maxlen: 24
185.226.142.0/24 maxlen: 24
185.226.143.0/24 maxlen: 24
193.3.182.0/24 maxlen: 24
193.37.37.0/24 maxlen: 24
2a10:5740::/48 maxlen: 48
2a10:5740:1::/48 maxlen: 48
2a10:5740:2::/48 maxlen: 48
2a10:5740:3::/48 maxlen: 48
2a11:9b40::/48 maxlen: 48
2a11:9b40:1::/48 maxlen: 48
2a11:9b40:2::/48 maxlen: 48
2a11:9b40:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:54:62:5f:a5:f7:8f:18:63:4a:cb:73:40:06:2f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Jul 23 23:34:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d49a4dec51ca33814ee84eeebf807ce3e22a6cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:31:97:fb:46:91:e9:8c:9e:01:bb:b0:4c:
f5:4e:98:1d:a3:37:f7:ae:86:3d:46:6d:eb:45:d5:
ae:f1:6e:f5:16:d3:24:68:8e:e4:67:95:70:73:c5:
66:b1:69:9b:b1:4d:e9:99:20:0f:b4:58:ae:9a:bb:
ba:09:d9:ef:c7:72:b9:51:52:9a:40:fc:a3:1e:89:
de:35:e4:e3:e0:70:10:c5:2d:a6:09:0a:b4:a1:22:
4c:4c:51:41:5e:49:84:50:5b:98:26:6d:c4:b4:c8:
32:08:c2:ef:79:b6:13:b5:9d:8f:08:c3:66:1f:28:
41:ee:38:9b:c0:ad:0f:35:6b:16:2d:09:5b:88:4d:
40:0b:cb:20:45:4d:27:37:c2:95:9a:f7:20:62:97:
1c:bc:59:cf:7c:58:d6:50:5b:66:40:79:e8:83:d6:
96:a5:76:51:e4:8e:c1:63:18:19:21:84:7d:d7:35:
78:85:ed:aa:e4:e9:1a:6b:a6:f3:8c:ca:e5:44:34:
12:b9:18:61:b6:54:d0:b8:7c:8c:ab:44:b0:1e:fa:
a5:0d:ff:ca:b6:6f:a2:8f:33:88:27:b8:fa:a6:54:
9d:1d:db:0a:4d:06:b1:0f:f5:27:a2:9c:6e:99:86:
ec:cd:20:4e:18:8b:48:7d:7a:44:39:0f:3b:a5:cf:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9A:4D:EC:51:CA:33:81:4E:E8:4E:EE:BF:80:7C:E3:E2:2A:6C:FD
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/1JpN7FHKM4FO6E7uv4B84-IqbP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.90.0/23
62.204.61.0/24
77.72.80.0/24
91.228.192.0/24
91.246.44.0/24
146.19.217.0/24
185.49.231.0/24
185.226.140.0/22
193.3.182.0/24
193.37.37.0/24
IPv6:
2a10:5740::/46
2a11:9b40::/46
Signature Algorithm: sha256WithRSAEncryption
9c:dd:68:53:0c:20:c9:fd:68:71:2d:62:0b:2a:1a:a6:35:55:
40:4b:e5:20:65:25:84:15:46:d3:c9:c5:9a:d2:a8:48:26:55:
c7:48:22:5f:a8:c0:83:c0:80:a0:82:87:d2:9a:54:b1:d1:71:
fe:8e:31:7f:10:1a:bb:ac:24:b4:de:fe:d3:ce:40:31:1d:69:
aa:97:0e:83:1b:a8:9d:6c:71:4b:52:e8:f1:fe:42:6f:d4:f9:
cf:46:4f:19:86:23:ea:08:0b:21:1a:e3:00:95:88:7c:dc:12:
7c:8a:d5:08:35:3b:d0:fe:a2:b2:6a:c4:f6:bc:a8:16:93:fa:
6b:79:bc:ec:13:a9:c2:8d:b8:20:b2:60:fc:ce:ba:f9:79:00:
73:1a:71:73:b7:ab:82:f6:92:d4:a8:57:00:d5:1c:c1:66:74:
39:85:15:1c:e3:44:cf:c9:48:12:1d:20:95:36:96:80:60:c5:
4d:6d:d8:00:a7:56:ca:48:82:ee:81:0c:0b:46:5d:3d:17:b5:
b1:08:8c:b0:38:07:60:01:77:58:8c:c2:9e:93:6d:cd:77:9d:
44:c9:40:5e:45:be:3b:c3:af:97:da:35:fc:a8:3f:86:bb:09:
dc:33:6a:11:ab:2f:d3:b0:4e:97:22:16:17:08:fe:8b:e8:14:
38:61:1e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:43 2026 by rpki-client