Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/Eiim02ghBCwS5ot2vJXFepCzz9U.roa
File: Eiim02ghBCwS5ot2vJXFepCzz9U.roa (raw, json)
Hash identifier: /907tU35HYtvqYYUjHp1pohLa92BU9Q56ucgrNUsIGE=
Subject key identifier: 12:28:A6:D3:68:21:04:2C:12:E6:8B:76:BC:95:C5:7A:90:B3:CF:D5
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 019DAA27AF53548077815F7CAA0F9DEB409E
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/Eiim02ghBCwS5ot2vJXFepCzz9U.roa
Signing time: Mon 20 Apr 2026 09:10:20 +0000
ROA not before: Mon 20 Apr 2026 09:10:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24685
IP address blocks: 31.172.136.0/23 maxlen: 32
31.172.136.0/24 maxlen: 32
31.172.137.0/24 maxlen: 32
31.172.140.0/24 maxlen: 32
31.172.141.0/24 maxlen: 32
80.92.231.0/24 maxlen: 32
80.92.233.0/24 maxlen: 32
80.92.234.0/24 maxlen: 32
80.92.235.0/24 maxlen: 32
82.117.229.0/24 maxlen: 32
82.117.244.0/24 maxlen: 32
85.90.211.0/24 maxlen: 32
85.90.223.0/24 maxlen: 32
91.226.1.0/24 maxlen: 32
92.60.178.0/23 maxlen: 32
92.60.178.0/24 maxlen: 32
92.60.179.0/24 maxlen: 32
128.0.170.0/24 maxlen: 32
128.0.172.0/24 maxlen: 32
128.0.174.0/24 maxlen: 32
185.38.209.0/24 maxlen: 32
185.39.196.0/24 maxlen: 32
185.45.244.0/22 maxlen: 32
185.45.245.0/24 maxlen: 32
185.45.246.0/24 maxlen: 32
185.170.195.0/24 maxlen: 32
193.111.0.0/24 maxlen: 32
193.111.48.0/23 maxlen: 32
212.110.134.0/23 maxlen: 32
212.110.152.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:27:af:53:54:80:77:81:5f:7c:aa:0f:9d:eb:40:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Apr 20 09:10:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1228a6d36821042c12e68b76bc95c57a90b3cfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:89:f9:79:02:fb:d9:15:c9:ca:c1:5c:ba:
e9:56:1e:14:23:40:c5:95:58:a2:dc:ab:de:90:e5:
da:0c:05:5d:4e:e1:76:5f:41:0d:aa:ff:e1:a4:1d:
2a:e6:46:03:15:be:fa:5e:c1:f4:db:99:e1:a7:e7:
0e:d0:e0:c2:23:2c:84:78:aa:6f:ef:f5:76:c5:e0:
c4:11:69:0c:c3:e4:4f:d2:2d:8e:7d:01:2e:b2:68:
55:28:c7:59:37:2a:b2:0f:88:0a:32:ba:d5:36:e3:
98:1b:14:fc:d3:3e:fd:90:18:5e:92:6c:7e:60:59:
8e:1f:ea:4d:7e:64:de:1b:a4:bb:ac:56:eb:90:90:
2b:91:14:f6:d6:ab:98:9f:e6:e3:65:d1:73:32:bf:
07:94:99:bc:63:ce:1e:1b:52:81:2a:65:43:89:a8:
77:90:4d:26:7a:0a:06:1b:23:1e:5e:d0:bb:68:de:
bc:ad:dc:72:c1:15:77:cf:58:29:1a:0d:e7:b9:b4:
9c:73:c7:c1:a2:19:c2:d6:02:14:a6:13:30:35:99:
4b:5e:c3:91:6f:4e:da:aa:5e:f1:11:2b:31:11:66:
63:3b:ff:20:56:44:11:8b:3a:82:78:62:3d:90:9c:
19:a7:e5:e3:73:72:68:ab:93:30:c2:01:b3:e8:0d:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:28:A6:D3:68:21:04:2C:12:E6:8B:76:BC:95:C5:7A:90:B3:CF:D5
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/Eiim02ghBCwS5ot2vJXFepCzz9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.136.0/23
31.172.140.0/23
80.92.231.0/24
80.92.233.0-80.92.235.255
82.117.229.0/24
82.117.244.0/24
85.90.211.0/24
85.90.223.0/24
91.226.1.0/24
92.60.178.0/23
128.0.170.0/24
128.0.172.0/24
128.0.174.0/24
185.38.209.0/24
185.39.196.0/24
185.45.244.0/22
185.170.195.0/24
193.111.0.0/24
193.111.48.0/23
212.110.134.0/23
212.110.152.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:c7:8d:35:fe:d4:c3:d1:75:d3:5b:5b:4d:e3:44:25:fb:0d:
0e:b0:bb:a7:07:79:4b:b1:ee:16:94:23:37:1a:08:6e:36:bc:
7a:5e:3c:b2:b2:51:96:7c:0e:ee:97:5c:60:c7:62:5c:ce:bb:
87:94:31:db:91:53:14:bf:49:94:ff:01:47:b9:bb:30:6f:cd:
9d:e8:d0:9b:7b:d5:5c:2f:8a:27:f1:86:fb:e2:28:27:96:dc:
ac:43:bb:9f:f5:43:1d:8b:12:6d:5d:ba:ba:e9:7a:58:32:d7:
6e:ab:c9:a4:6b:e4:ed:ea:b0:16:7d:1f:05:ad:0e:d4:92:6e:
c2:a1:0d:7d:13:fa:05:1c:70:95:21:88:e0:30:12:b0:4e:f3:
21:31:46:e2:06:25:26:3a:6a:44:88:ef:e8:54:ac:df:f7:31:
20:cc:a8:77:7d:2f:06:4f:8f:4f:be:2f:31:91:9e:d2:fe:ea:
18:c6:34:52:fc:2c:ca:77:03:f4:34:fc:0a:a8:89:e7:81:a8:
a9:20:d9:31:e0:23:b3:14:34:4e:ee:b5:97:91:3a:da:5e:b9:
ea:f4:0d:33:44:72:85:d6:8a:ac:9c:41:07:a3:7a:78:b5:fa:
33:2b:96:51:bf:68:5b:ba:1b:3b:7c:7a:a8:e1:68:11:c5:7a:
f7:ff:e3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:34 2026 by rpki-client