Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/_aGsIkHdm69JuDVPQz7v4_sNbPM.roa
File: _aGsIkHdm69JuDVPQz7v4_sNbPM.roa (raw, json)
Hash identifier: OlUUaLGTOWMuneie8M0isdkVhnsbncnaYj7jEv7cF7I=
Subject key identifier: FD:A1:AC:22:41:DD:9B:AF:49:B8:35:4F:43:3E:EF:E3:FB:0D:6C:F3
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 019ECF256052677395A86B1A7EBD736BAF1A
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/_aGsIkHdm69JuDVPQz7v4_sNbPM.roa
Signing time: Tue 16 Jun 2026 06:36:33 +0000
ROA not before: Tue 16 Jun 2026 06:36:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56694
IP address blocks: 31.177.108.0/22 maxlen: 24
45.154.184.0/22 maxlen: 24
91.219.148.0/22 maxlen: 24
93.184.168.0/21 maxlen: 24
94.198.50.0/23 maxlen: 24
94.198.52.0/22 maxlen: 24
109.238.92.0/23 maxlen: 24
152.89.216.0/22 maxlen: 24
178.255.126.0/23 maxlen: 24
185.9.144.0/22 maxlen: 24
185.130.248.0/22 maxlen: 24
185.217.128.0/24 maxlen: 24
188.127.224.0/20 maxlen: 24
188.127.240.0/22 maxlen: 24
188.127.244.0/23 maxlen: 24
188.127.248.0/22 maxlen: 24
188.127.253.0/24 maxlen: 24
188.127.254.0/23 maxlen: 24
213.171.16.0/21 maxlen: 24
2a06:dd00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:25:60:52:67:73:95:a8:6b:1a:7e:bd:73:6b:af:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Jun 16 06:36:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fda1ac2241dd9baf49b8354f433eefe3fb0d6cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:50:9e:53:97:54:06:9c:ef:c4:ad:e3:14:
d5:dc:e2:65:23:15:e7:e8:8b:ee:6f:df:d8:2e:df:
bd:54:44:72:59:69:42:a4:e5:5e:b5:b3:14:a7:20:
ca:aa:cb:ee:15:34:89:14:73:cc:47:f3:78:c0:2d:
40:bb:35:99:80:1b:53:0c:4a:16:3e:f3:7e:49:15:
5b:be:e7:57:1f:69:16:89:1d:23:39:cc:69:d5:0b:
71:80:1d:75:3a:ff:5a:8b:1a:9d:4f:6c:9d:87:00:
c1:46:6c:35:26:f5:72:9a:dd:de:12:7d:4a:ee:b2:
cd:06:a2:59:b8:8f:bd:e2:54:d8:f8:a7:fb:30:13:
82:41:5a:1a:f5:78:c5:08:3f:50:b8:66:c3:2c:1d:
e0:5e:f0:02:c2:d8:54:f1:56:46:43:b0:75:b7:50:
aa:f2:b5:f3:cb:36:94:1c:95:0e:bf:62:e2:50:6b:
67:f0:7a:9d:93:20:e3:c8:61:bc:4c:a4:b9:b1:a2:
10:57:9a:61:80:67:af:be:b5:c3:56:47:fe:da:f5:
e4:4e:e6:14:45:cc:54:74:61:de:d2:b8:e0:bd:2a:
1d:99:96:43:2d:41:8a:ea:e7:9d:72:d2:04:90:7d:
3c:a3:b1:47:10:ea:5f:b0:36:9d:4a:4d:a8:1e:db:
87:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A1:AC:22:41:DD:9B:AF:49:B8:35:4F:43:3E:EF:E3:FB:0D:6C:F3
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/_aGsIkHdm69JuDVPQz7v4_sNbPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.108.0/22
45.154.184.0/22
91.219.148.0/22
93.184.168.0/21
94.198.50.0-94.198.55.255
109.238.92.0/23
152.89.216.0/22
178.255.126.0/23
185.9.144.0/22
185.130.248.0/22
185.217.128.0/24
188.127.224.0-188.127.245.255
188.127.248.0/22
188.127.253.0-188.127.255.255
213.171.16.0/21
IPv6:
2a06:dd00::/32
Signature Algorithm: sha256WithRSAEncryption
1a:65:e2:9c:4c:e6:18:56:b6:f3:a0:2a:e2:03:bd:6c:12:d3:
3f:39:d4:d9:73:a0:9d:99:7d:36:8e:a8:92:2f:ad:bd:a7:d8:
ec:e3:c1:be:ca:cc:ec:a6:cd:72:ca:7e:1e:4c:7a:d3:76:e4:
4f:a2:44:7b:bf:8d:c0:17:73:65:4b:c4:4d:ab:11:ec:26:b9:
93:95:7e:18:72:f6:40:37:a9:0a:60:38:06:08:97:76:73:cf:
fd:fe:84:fd:ba:5b:d4:06:b6:b9:be:1f:be:72:52:bf:89:fe:
2e:6d:79:d4:29:d3:cc:a1:88:c4:91:5c:a1:e4:1a:23:91:ec:
6a:37:e0:d9:66:c4:c6:d1:35:99:75:60:31:34:f4:72:13:e3:
6c:62:c5:83:4a:cb:26:2a:35:e0:99:9f:40:5b:b5:5c:45:00:
e7:26:07:7d:0c:7c:c3:21:3f:72:fb:0f:54:c9:b5:43:06:61:
44:14:db:f4:b8:98:ed:c1:24:5c:e7:df:13:9d:e7:39:1a:d1:
26:f8:e0:cf:3c:ac:e2:66:3a:d4:4d:59:1d:e8:c4:51:6d:45:
78:01:ea:a2:94:4d:ce:da:55:e1:53:b0:39:b1:1d:54:c4:3d:
42:db:b7:fb:2f:ee:5b:31:f3:ac:fc:e2:9c:07:c3:f7:01:8f:
60:53:3b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:36:32 2026 by rpki-client