Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/rn8xh7KrE-noCmPuIuBIyrHAPJA.roa
File: rn8xh7KrE-noCmPuIuBIyrHAPJA.roa (raw, json)
Hash identifier: aNnfk/W5R104AFRFIhyK+d9zBIZCQDKxCBG6unxwHJk=
Subject key identifier: AE:7F:31:87:B2:AB:13:E9:E8:0A:63:EE:22:E0:48:CA:B1:C0:3C:90
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 019ED0231AAB11E381AA95C9A70D5323B10F
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/rn8xh7KrE-noCmPuIuBIyrHAPJA.roa
Signing time: Tue 16 Jun 2026 11:13:41 +0000
ROA not before: Tue 16 Jun 2026 11:13:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51032
IP address blocks: 31.128.128.0/19 maxlen: 24
31.130.0.0/19 maxlen: 24
85.159.224.0/24 maxlen: 24
85.159.227.0/24 maxlen: 24
89.23.128.0/19 maxlen: 20
89.23.128.0/21 maxlen: 24
89.23.144.0/20 maxlen: 24
89.23.146.0/24 maxlen: 24
89.23.147.0/24 maxlen: 24
89.23.160.0/19 maxlen: 19
89.23.168.0/21 maxlen: 21
89.23.176.0/21 maxlen: 21
91.123.80.0/20 maxlen: 20
91.202.204.0/22 maxlen: 24
93.157.160.0/21 maxlen: 24
93.157.162.0/24 maxlen: 24
93.157.163.0/24 maxlen: 24
178.216.176.0/21 maxlen: 24
2a13:2c80::/29 maxlen: 32
2a13:2c80::/32 maxlen: 48
2a13:2c81::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:23:1a:ab:11:e3:81:aa:95:c9:a7:0d:53:23:b1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jun 16 11:13:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae7f3187b2ab13e9e80a63ee22e048cab1c03c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:df:d5:f9:f1:4f:7c:5b:ce:27:49:e0:37:
62:64:3f:2f:45:dc:99:b9:4b:02:41:f1:f9:6d:fd:
e9:ed:ea:9b:9f:ce:02:cc:14:6c:64:c9:31:7b:86:
79:0f:fb:a2:15:27:03:27:d9:e1:2c:5a:11:38:16:
c3:ef:a7:c3:56:77:ab:b2:9e:db:4e:58:33:66:8a:
b2:6d:15:16:46:58:5d:f5:8f:73:a1:ec:a7:a6:05:
fa:73:4d:f0:77:95:8a:f2:4b:e2:9d:57:4d:f4:41:
9e:2d:78:be:4e:e9:67:11:17:92:a1:9c:98:f4:ca:
0f:44:41:19:2e:05:d0:e7:31:52:55:5e:8d:10:ea:
f2:f4:a8:d6:58:fe:2c:51:51:5e:5f:0f:d1:ce:7c:
f4:d3:82:eb:ce:e4:51:fd:ca:c6:d9:31:a2:c3:55:
2d:55:4b:6c:33:4c:4f:7a:9f:b0:07:7f:07:4a:a9:
35:60:af:74:1b:f8:24:b6:76:30:bd:10:8b:65:de:
db:11:ff:ba:30:7e:80:bb:25:06:d0:46:21:cc:06:
55:81:75:53:a6:d6:f8:95:51:68:68:d6:98:8e:0d:
93:0d:11:01:12:65:cd:cf:ae:c9:b3:f7:23:58:a4:
cf:66:c2:5b:35:af:36:50:fa:d8:7e:76:2a:f7:5f:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7F:31:87:B2:AB:13:E9:E8:0A:63:EE:22:E0:48:CA:B1:C0:3C:90
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/rn8xh7KrE-noCmPuIuBIyrHAPJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.128.0/19
31.130.0.0/19
85.159.224.0/24
85.159.227.0/24
89.23.128.0/18
91.123.80.0/20
91.202.204.0/22
93.157.160.0/21
178.216.176.0/21
IPv6:
2a13:2c80::/29
Signature Algorithm: sha256WithRSAEncryption
1e:18:84:7e:00:10:1b:5b:a6:f3:41:ef:af:54:ac:c3:37:6a:
14:af:07:70:0b:7c:c7:9b:7d:2c:d8:ab:06:3b:1d:2e:4e:cc:
46:73:2f:02:67:b7:23:df:5f:d6:f9:e1:b5:5d:76:fa:ea:66:
3a:ce:0b:63:30:d7:f4:42:a4:71:bd:b7:17:37:ae:50:bf:a0:
f9:7d:3b:6f:47:f7:62:57:b7:14:ea:eb:32:3c:15:10:58:e2:
46:83:35:41:3f:01:ad:0d:64:0d:9d:d2:d5:59:0b:1e:c9:17:
b3:db:dc:d4:2d:55:ae:d4:5e:f5:24:ef:eb:bb:62:b0:11:f9:
e0:7b:8d:2f:3b:0c:d6:49:e8:5c:20:85:dd:17:f4:80:b2:60:
ee:5f:06:7c:96:87:47:17:17:ff:66:db:4b:ab:4e:80:46:28:
86:33:18:db:bd:e1:88:f2:3f:bd:8a:6e:db:80:bb:97:79:10:
a5:b1:f9:52:25:15:cd:65:09:15:19:8d:d2:c6:15:79:de:8d:
74:bd:86:c0:3e:4c:39:7b:db:2d:71:75:10:b5:d2:63:7a:36:
01:d1:ca:bc:cf:12:1a:e4:36:1a:28:1c:88:11:41:dc:83:0b:
16:aa:ac:fc:70:3d:20:9d:15:2e:dd:95:3d:fb:49:6f:4a:84:
00:aa:c3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:13 2026 by rpki-client