Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/eFod6uzdySfryPwai9ezZf8hH3Y.roa
File: eFod6uzdySfryPwai9ezZf8hH3Y.roa (raw, json)
Hash identifier: 8/pg0XDQR6OqYJInJaNPwGEDH+vJ9p8yqH6MTL5N8w4=
Subject key identifier: 78:5A:1D:EA:EC:DD:C9:27:EB:C8:FC:1A:8B:D7:B3:65:FF:21:1F:76
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 01A1CB07FB8A26AA7E3A6481BC5B91A772CA
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/eFod6uzdySfryPwai9ezZf8hH3Y.roa
Signing time: Wed 11 Nov 2026 14:34:20 +0000
ROA not before: Wed 11 Nov 2026 14:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56582
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.74.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.79.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.84.0/24 maxlen: 24
31.169.85.0/24 maxlen: 24
31.169.87.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
2a00:5740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:07:fb:8a:26:aa:7e:3a:64:81:bc:5b:91:a7:72:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Nov 11 14:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=785a1deaecddc927ebc8fc1a8bd7b365ff211f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:e2:bc:f4:3c:3c:d9:18:f5:b0:5d:66:0e:
aa:1e:de:be:dd:81:0e:ed:c9:5e:d6:16:d7:12:86:
53:52:7e:0e:ae:b5:e2:3b:22:11:1f:90:3f:b3:1b:
c8:59:85:21:be:cd:2d:7a:8e:3d:2e:6c:e6:e1:9c:
9c:13:cd:13:6e:7f:3e:db:6c:58:cd:e7:93:8a:7b:
61:47:d6:7f:0f:b5:db:63:14:21:56:13:ca:a2:3e:
61:0d:5b:4c:b3:f8:9f:46:f2:33:c5:61:4d:36:2a:
6c:87:01:10:3e:8a:2f:44:a3:af:e2:e4:da:2d:b2:
f2:59:a1:da:6a:b8:14:b5:b4:19:6a:c7:e8:bc:5a:
44:1a:af:1e:fe:c4:d3:81:60:02:8f:4a:32:59:0f:
46:96:3d:f2:c9:20:d4:d6:1a:f1:32:4b:65:d0:9f:
d2:d7:c8:e4:e4:8a:51:a6:70:fc:c0:44:fa:6c:0e:
87:40:bb:10:ab:28:43:2b:5c:8d:13:19:1c:ba:12:
8e:6d:2c:f5:d1:22:88:36:2b:ce:26:14:41:1e:71:
9e:e3:31:56:69:70:cd:9f:67:33:41:9d:8f:5e:4f:
e4:59:c5:6a:40:95:6c:0e:4e:42:bc:d0:af:98:86:
18:9b:2f:47:ec:de:ae:af:68:07:fa:81:84:bd:d9:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:1D:EA:EC:DD:C9:27:EB:C8:FC:1A:8B:D7:B3:65:FF:21:1F:76
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/eFod6uzdySfryPwai9ezZf8hH3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.74.0/24
31.169.76.0/22
31.169.81.0-31.169.82.255
31.169.84.0/23
31.169.87.0-31.169.88.255
31.169.90.0/24
31.169.92.0/22
185.33.63.0/24
IPv6:
2a00:5740::/29
Signature Algorithm: sha256WithRSAEncryption
2d:f4:33:b1:1c:f5:f5:e5:96:35:17:35:b9:1b:b6:88:ce:46:
4b:12:8f:3c:cc:f8:58:c2:bf:4c:89:ec:e3:f9:8b:2b:fd:05:
fa:1f:53:35:13:7d:b7:a0:0c:a4:e3:68:28:a4:69:31:56:43:
3d:a2:95:2f:81:86:fb:6b:88:8f:4f:da:08:5c:45:42:b5:c4:
66:4c:8a:7a:82:13:00:ab:3a:03:98:14:37:e5:20:ad:87:76:
c0:af:2e:2e:a1:b3:57:6a:aa:37:ac:cb:3f:4d:b1:44:88:80:
44:09:4a:33:0c:c7:d5:a8:9c:11:fe:0a:0b:51:3e:8f:7b:cc:
15:11:6c:7a:99:28:0f:2d:78:60:57:be:7b:d4:84:f0:23:55:
ac:54:17:a8:b6:b7:5a:58:d4:03:36:ce:3d:66:1b:f1:da:43:
89:8b:7b:be:41:8c:aa:ac:89:33:77:cb:d4:3c:bc:3b:a8:f6:
14:2a:d9:f9:60:81:ca:ce:7d:db:bc:fe:f0:77:52:01:32:ed:
d6:1f:2f:8b:9e:f7:42:3d:0d:d4:42:2a:f4:dd:9b:3b:71:73:
e4:ae:ca:68:67:2c:ff:25:0d:05:63:8c:08:a2:00:46:25:58:
f7:10:3e:8e:f8:ad:b0:ec:81:2c:7d:b8:83:fb:f4:7a:d9:d2:
c8:cd:cb:5e
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgISAaHLB/uKJqp+OmSBvFuRp3LKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw
ZmM2MmEwHhcNMjYxMTExMTQzNDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODVhMWRlYWVjZGRjOTI3ZWJjOGZjMWE4YmQ3YjM2NWZmMjExZjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumjivPQ8PNkY9bBdZg6qHt6+3YEO
7cle1hbXEoZTUn4OrrXiOyIRH5A/sxvIWYUhvs0teo49Lmzm4ZycE80Tbn8+22xY
zeeTinthR9Z/D7XbYxQhVhPKoj5hDVtMs/ifRvIzxWFNNipshwEQPoovRKOv4uTa
LbLyWaHaargUtbQZasfovFpEGq8e/sTTgWACj0oyWQ9Glj3yySDU1hrxMktl0J/S
18jk5IpRpnD8wET6bA6HQLsQqyhDK1yNExkcuhKObSz10SKINivOJhRBHnGe4zFW
aXDNn2czQZ2PXk/kWcVqQJVsDk5CvNCvmIYYmy9H7N6ur2gH+oGEvdmRuQIDAQAB
o4ICZjCCAmIwHQYDVR0OBBYEFHhaHers3ckn68j8GovXs2X/IR92MB8GA1UdIwQY
MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt
MjYxNzBkYTRhMGIxLzEvZUZvZDZ1emR5U2ZyeVB3YWk5ZXpaZjhoSDNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx
LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQCH6lAMAwD
BAAfqUUDBAAfqUgDBAAfqUoDBAIfqUwwDAMEAB+pUQMEAB+pUgMEAR+pVDAMAwQA
H6lXAwQAH6lYAwQAH6laAwQCH6lcAwQAuSE/MA0EAgACMAcDBQMqAFdAMA0GCSqG
SIb3DQEBCwUAA4IBAQAt9DOxHPX15ZY1FzW5G7aIzkZLEo88zPhYwr9Miezj+Ysr
/QX6H1M1E323oAyk42gopGkxVkM9opUvgYb7a4iPT9oIXEVCtcRmTIp6ghMAqzoD
mBQ35SCth3bAry4uobNXaqo3rMs/TbFEiIBECUozDMfVqJwR/goLUT6Pe8wVEWx6
mSgPLXhgV7571ITwI1WsVBeotrdaWNQDNs49Zhvx2kOJi3u+QYyqrIkzd8vUPLw7
qPYUKtn5YIHKzn3bvP7wd1IBMu3WHy+LnvdCPQ3UQir03Zs7cXPkrspoZyz/JQ0F
Y4wIogBGJVj3ED6O+K2w7IEsfbiD+/R62dLIzcte
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:24:42 2026 by rpki-client