Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/vuq6nmS2o2IaE2-cQCXY0v0dkjM.roa
File: vuq6nmS2o2IaE2-cQCXY0v0dkjM.roa (raw, json)
Hash identifier: /QlR6UrnyGXIfWBFiHE7gFFLbMr1qU25LazaUkwU8DA=
Subject key identifier: BE:EA:BA:9E:64:B6:A3:62:1A:13:6F:9C:40:25:D8:D2:FD:1D:92:33
Certificate issuer: /CN=cf131e6cf040b0a95f7ec2c93e326a61087d8c6f
Certificate serial: 019F236860A8B6F06C3001B86F421142FF3E
Authority key identifier: CF:13:1E:6C:F0:40:B0:A9:5F:7E:C2:C9:3E:32:6A:61:08:7D:8C:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/vuq6nmS2o2IaE2-cQCXY0v0dkjM.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43197
IP address blocks: 45.81.37.0/24 maxlen: 24
109.68.232.0/21 maxlen: 21
109.68.232.0/24 maxlen: 24
109.68.233.0/24 maxlen: 24
109.68.234.0/24 maxlen: 24
109.68.235.0/24 maxlen: 24
109.68.236.0/24 maxlen: 24
109.68.237.0/24 maxlen: 24
109.68.238.0/24 maxlen: 24
109.68.239.0/24 maxlen: 24
185.105.228.0/22 maxlen: 22
185.105.228.0/24 maxlen: 24
185.105.229.0/24 maxlen: 24
185.105.230.0/24 maxlen: 24
185.105.231.0/24 maxlen: 24
2a0b:6bc0::/32 maxlen: 32
2a0b:6bc0::/48 maxlen: 48
2a0b:6bc0:1::/48 maxlen: 48
2a0b:6bc0:1::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:60:a8:b6:f0:6c:30:01:b8:6f:42:11:42:ff:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf131e6cf040b0a95f7ec2c93e326a61087d8c6f
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=beeaba9e64b6a3621a136f9c4025d8d2fd1d9233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:80:44:28:dd:3b:aa:45:7a:38:97:d8:c6:
e7:50:6f:f7:7c:81:bb:3b:f1:dd:a9:ee:79:10:fe:
61:43:81:d5:63:c8:c0:9a:d9:eb:87:b0:1e:a6:ba:
ac:6a:25:29:bc:a8:65:a1:40:73:8a:99:c7:63:5b:
f2:3a:6f:3c:26:18:f1:55:08:8f:8d:c8:fc:f1:b4:
e9:94:90:57:ce:f1:68:32:11:2a:32:d0:1e:17:97:
f4:2a:79:ca:fa:1d:72:8e:c9:5b:7e:0c:ea:33:79:
c6:a2:36:d7:7d:46:bc:66:ad:d3:70:08:68:0f:d0:
0b:28:38:d0:a4:cb:fb:1d:ef:87:43:91:03:74:b4:
a7:72:d7:4a:d2:7b:48:05:dc:a3:be:64:36:08:86:
34:9f:5d:56:bd:05:56:59:7d:83:fe:be:b2:34:76:
72:47:ff:4b:ae:3a:bb:b2:a0:0c:e7:a2:40:c8:86:
58:f4:2b:7c:38:e8:c7:3e:88:a4:31:14:f3:bf:37:
ab:34:20:da:0e:04:10:c8:a4:06:c7:d6:ad:02:37:
19:03:a1:a3:46:d9:9a:34:83:61:b4:2d:c0:da:b0:
05:a9:f0:a6:ce:0d:02:c8:24:35:cd:09:14:75:20:
84:07:51:91:5f:85:30:a9:52:a8:71:27:9f:0d:f1:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EA:BA:9E:64:B6:A3:62:1A:13:6F:9C:40:25:D8:D2:FD:1D:92:33
X509v3 Authority Key Identifier:
keyid:CF:13:1E:6C:F0:40:B0:A9:5F:7E:C2:C9:3E:32:6A:61:08:7D:8C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/vuq6nmS2o2IaE2-cQCXY0v0dkjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.37.0/24
109.68.232.0/21
185.105.228.0/22
IPv6:
2a0b:6bc0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:f6:83:56:e8:49:12:65:8e:6f:01:00:60:50:cc:29:bb:bb:
cc:39:ce:67:cf:96:28:7b:92:b5:b3:76:29:a9:0a:cb:8d:b2:
eb:08:aa:6d:a3:9d:a8:74:3b:dc:22:37:ce:e6:58:17:75:42:
55:88:4c:e7:96:c3:8e:a4:9d:ed:56:44:05:83:05:a3:b6:4f:
91:26:a4:61:7d:97:5f:eb:63:45:41:32:40:9d:38:f1:69:b3:
a3:c8:24:e6:13:ae:ba:da:30:9a:92:0d:dc:df:ef:7a:ab:f5:
d3:11:d4:b9:87:a6:ab:5b:0a:6b:d7:61:39:40:0c:2b:88:93:
97:55:62:44:76:de:37:56:19:01:73:a6:e2:fe:14:f5:f4:58:
06:eb:28:e1:66:a3:ac:37:d5:6d:f2:74:14:03:b8:6e:ea:5c:
a3:da:f2:42:fa:bc:8e:37:24:88:ef:ff:05:c0:47:eb:7e:ac:
c8:99:25:62:24:fa:e9:52:3a:1f:9e:5e:fe:d6:20:bf:b4:ce:
ef:d3:a6:b0:55:ba:89:83:8b:ee:12:75:a2:69:35:17:18:1c:
e8:5e:aa:7d:ba:42:98:3f:27:0e:de:a8:7d:9a:96:d2:a3:5e:
72:5b:6d:d7:34:0e:d8:5c:0d:2e:a1:56:f4:68:3c:d0:82:8e:
9f:54:2e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:09 2026 by rpki-client