Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/tvjO7d2OruGUM05e3v_9VK0Tnvg.roa
File: tvjO7d2OruGUM05e3v_9VK0Tnvg.roa (raw, json)
Hash identifier: av53I/iTLdQRU3qkC6MQBoQi4smDbLlIv8oPMv9ZXBY=
Subject key identifier: B6:F8:CE:ED:DD:8E:AE:E1:94:33:4E:5E:DE:FF:FD:54:AD:13:9E:F8
Certificate issuer: /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial: 019F6B489510272AB28E6753849A19ECC254
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/tvjO7d2OruGUM05e3v_9VK0Tnvg.roa
Signing time: Thu 16 Jul 2026 14:15:46 +0000
ROA not before: Thu 16 Jul 2026 14:15:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8426
IP address blocks: 31.3.136.0/21 maxlen: 21
46.18.128.0/21 maxlen: 21
62.240.224.0/19 maxlen: 19
79.99.32.0/21 maxlen: 21
89.185.32.0/19 maxlen: 19
91.208.181.0/24 maxlen: 24
94.198.144.0/21 maxlen: 21
94.198.146.0/24 maxlen: 24
95.131.136.0/21 maxlen: 24
146.185.40.0/21 maxlen: 24
185.7.36.0/22 maxlen: 24
185.29.40.0/22 maxlen: 22
185.29.43.0/24 maxlen: 24
185.88.104.0/22 maxlen: 22
185.93.36.0/22 maxlen: 22
194.146.172.0/22 maxlen: 22
212.43.192.0/18 maxlen: 18
2001:a70::/32 maxlen: 32
2a01:4580::/29 maxlen: 29
2a02:1f8::/32 maxlen: 32
2a02:c70::/32 maxlen: 32
2a02:2328::/32 maxlen: 32
2a03:7300::/32 maxlen: 32
2a03:7300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:48:95:10:27:2a:b2:8e:67:53:84:9a:19:ec:c2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
Validity
Not Before: Jul 16 14:15:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6f8ceeddd8eaee194334e5edefffd54ad139ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:f8:89:94:33:12:e9:6e:d6:20:5b:90:23:
23:de:41:05:89:a8:91:2e:88:61:cd:17:af:56:b6:
e2:85:25:c7:01:e0:be:ba:24:bb:de:f3:7d:ae:f4:
d9:fe:6a:46:79:37:bb:64:72:29:7c:bc:45:4a:24:
93:a4:87:d2:8e:57:fd:c2:7e:36:1e:05:59:21:40:
7b:89:1f:97:33:2f:9b:3c:21:e9:b6:fc:3d:78:1b:
97:70:0d:40:cd:55:71:10:d4:23:43:9a:aa:75:63:
f0:0d:a1:da:06:62:24:bd:75:a7:99:5a:91:c9:28:
76:b1:d1:8d:81:fe:76:88:b9:a4:87:71:27:98:0d:
e2:cd:d0:97:5d:bb:c2:b1:fb:ab:c3:60:c0:22:f5:
7a:17:1d:06:a3:ba:0e:2e:1c:3f:86:96:97:d0:f9:
f7:1b:e0:a4:2f:d3:e7:d1:20:15:f7:c5:87:93:34:
1e:5c:67:f4:c5:43:27:39:b4:53:86:b9:e7:69:39:
04:ac:4a:fb:47:bf:36:71:9d:6f:01:55:54:a9:07:
f8:73:ec:50:07:2f:7d:22:fc:f1:d0:57:7b:48:6b:
1d:5d:0a:50:2e:af:6d:ca:5d:be:e5:ee:19:f6:d9:
34:e8:26:2c:95:a7:05:67:8b:4f:8c:3a:9a:0e:15:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F8:CE:ED:DD:8E:AE:E1:94:33:4E:5E:DE:FF:FD:54:AD:13:9E:F8
X509v3 Authority Key Identifier:
keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/tvjO7d2OruGUM05e3v_9VK0Tnvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.136.0/21
46.18.128.0/21
62.240.224.0/19
79.99.32.0/21
89.185.32.0/19
91.208.181.0/24
94.198.144.0/21
95.131.136.0/21
146.185.40.0/21
185.7.36.0/22
185.29.40.0/22
185.88.104.0/22
185.93.36.0/22
194.146.172.0/22
212.43.192.0/18
IPv6:
2001:a70::/32
2a01:4580::/29
2a02:1f8::/32
2a02:c70::/32
2a02:2328::/32
2a03:7300::/32
Signature Algorithm: sha256WithRSAEncryption
00:36:79:87:68:7f:f9:ab:be:3d:1e:4c:67:4f:42:0d:4f:b1:
3c:9f:d0:ee:2b:f7:90:ff:30:41:4f:bf:80:b7:71:77:8f:97:
83:cd:06:5c:a8:5f:a5:02:5b:f9:65:e4:66:e3:81:db:83:a8:
f2:5c:bf:d1:da:e0:a5:a8:db:3a:db:e9:21:2d:43:f3:67:d7:
6d:6e:c8:1b:ce:b6:56:7b:e9:a3:77:c5:13:3c:a9:4c:a3:ef:
d6:2e:ef:59:9a:91:07:f1:0d:5f:88:30:a3:66:62:06:b2:02:
1b:b3:e9:df:42:79:7b:d2:52:82:9f:5e:9f:14:7c:ed:a4:11:
df:a0:6a:ec:4f:62:78:9b:ea:78:57:1d:4d:55:6f:c2:2d:05:
4b:b8:f0:8d:af:1b:55:2a:84:c3:a6:96:56:e5:77:a4:d0:8e:
d5:1c:ef:83:3c:8f:92:7d:31:88:25:43:83:82:93:21:72:fc:
83:db:9e:0a:be:c8:0b:19:bc:0f:b9:a0:f7:ae:0a:62:ba:22:
c7:89:c7:ab:ab:8e:b7:22:b5:a0:26:8a:75:09:83:b3:45:df:
3c:6e:06:93:b2:76:f4:99:ee:64:6a:19:16:35:a9:c4:b1:2f:
39:08:ea:e0:e3:dd:6a:f3:3b:0f:38:86:53:c8:73:51:1e:d5:
35:35:1d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:54 2026 by rpki-client