Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/CMxieIWzuvBMVzCARtV2MhWe2uY.roa
File: CMxieIWzuvBMVzCARtV2MhWe2uY.roa (raw, json)
Hash identifier: JXWtEiMWVrAljafWdKP/Hej6xHfWwOka3jW686hdirY=
Subject key identifier: 08:CC:62:78:85:B3:BA:F0:4C:57:30:80:46:D5:76:32:15:9E:DA:E6
Certificate issuer: /CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Certificate serial: 019E1C507B1CE41460B30BC3D78FCA682A54
Authority key identifier: 79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/CMxieIWzuvBMVzCARtV2MhWe2uY.roa
Signing time: Tue 12 May 2026 13:11:36 +0000
ROA not before: Tue 12 May 2026 13:11:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197651
IP address blocks: 31.177.16.0/22 maxlen: 22
31.177.18.0/24 maxlen: 24
31.177.19.0/24 maxlen: 24
185.217.104.0/22 maxlen: 22
185.217.104.0/24 maxlen: 24
185.217.105.0/24 maxlen: 24
185.217.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:50:7b:1c:e4:14:60:b3:0b:c3:d7:8f:ca:68:2a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Validity
Not Before: May 12 13:11:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08cc627885b3baf04c57308046d57632159edae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:e9:d8:74:de:c7:ca:05:53:3a:f4:ec:c5:
ba:c0:aa:d1:e4:a2:73:57:07:94:87:4e:cb:68:68:
77:81:f0:cc:4e:6e:b4:c9:86:bb:13:5f:f1:c0:31:
93:f6:bc:bb:a4:cb:85:b6:5e:4c:ac:84:1a:a3:68:
7e:89:68:e5:c5:15:78:a3:f7:2b:b6:69:ea:6a:81:
d1:4c:e2:7c:51:7a:ea:cd:0f:b2:14:a3:bc:a1:d6:
db:38:a9:10:30:9b:1c:e3:58:3a:db:14:af:bd:f4:
f6:1a:a4:1d:1f:3c:b9:d9:d7:b1:d6:71:fa:88:af:
b2:91:3b:51:1f:21:af:49:01:a0:7c:54:9f:cc:16:
10:18:2e:da:0f:b3:06:77:fb:5a:60:ca:02:c4:a3:
5f:41:4f:ba:98:1c:97:f1:c5:04:f8:3a:b9:db:e3:
98:ce:a2:0a:7f:b5:73:a4:b9:a2:62:59:a4:20:67:
9c:77:a3:88:14:fd:ad:6c:aa:7d:64:97:9c:43:c3:
30:d9:b0:6c:de:42:6b:bc:26:ec:12:e8:7b:75:8d:
a4:d0:0b:8a:5f:9d:67:8b:70:ee:60:a2:20:34:34:
4b:76:56:f8:27:ee:f4:ce:31:84:08:0e:18:e5:16:
d0:f3:81:10:44:ff:b6:45:39:a4:91:da:0d:78:f8:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CC:62:78:85:B3:BA:F0:4C:57:30:80:46:D5:76:32:15:9E:DA:E6
X509v3 Authority Key Identifier:
keyid:79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/CMxieIWzuvBMVzCARtV2MhWe2uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.16.0/22
185.217.104.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:73:d5:bb:01:01:9f:40:f8:5c:58:3f:bb:c4:48:8a:ca:e0:
7c:df:b7:27:ec:de:a0:7d:d7:55:98:da:a5:74:01:89:10:6c:
c6:9f:dc:b5:82:66:b6:6c:85:a9:2b:9f:24:97:a9:e7:9b:22:
a0:eb:01:21:4e:43:cd:5e:c1:ba:0c:18:a5:c8:d9:2e:97:4f:
34:c3:6c:92:0d:f6:1a:2b:6f:07:81:88:c4:e8:cf:f1:09:c9:
f9:01:24:4d:dd:28:6e:e8:1b:97:ed:c5:ae:b9:c2:20:e1:6a:
c3:1f:5c:5a:7f:fb:12:41:09:cf:2e:16:a7:22:3f:60:c9:dd:
9c:0e:52:cd:08:0d:7e:02:5b:4b:49:71:e6:68:e8:42:d8:4e:
8a:ef:38:ce:41:03:8d:c7:10:fb:e5:86:4a:b3:cf:57:c3:8c:
56:48:40:cb:84:73:98:87:c0:16:aa:00:a2:52:0b:e1:4e:a8:
7e:33:4b:19:37:51:ff:5c:28:52:a4:b0:56:29:f3:fe:27:df:
33:1b:c0:b1:d2:1c:13:d2:c7:66:75:0b:31:c2:a9:4d:55:42:
dc:d9:38:f8:c2:3e:f7:a3:f9:32:d8:02:ae:a2:ea:64:79:59:
ca:ac:85:69:9d:59:29:76:b9:ab:db:56:55:19:f5:1d:d3:e2:
b1:92:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:19 2026 by rpki-client