Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/MR_WWabOjbaD5Mj0B9qpiV19gvE.roa
File: MR_WWabOjbaD5Mj0B9qpiV19gvE.roa (raw, json)
Hash identifier: 9sUkJjmHz8rfNkqGVSSONlc5MfW4R236Pz0xtOtiNP0=
Subject key identifier: 31:1F:D6:59:A6:CE:8D:B6:83:E4:C8:F4:07:DA:A9:89:5D:7D:82:F1
Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial: 019FF1BA119203699895818C623722B51ECB
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/MR_WWabOjbaD5Mj0B9qpiV19gvE.roa
Signing time: Tue 11 Aug 2026 16:48:51 +0000
ROA not before: Tue 11 Aug 2026 16:48:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202045
IP address blocks: 31.177.0.0/22 maxlen: 22
31.177.0.0/23 maxlen: 23
31.177.2.0/23 maxlen: 23
31.177.4.0/24 maxlen: 24
31.177.5.0/24 maxlen: 24
31.177.6.0/23 maxlen: 23
45.145.122.0/23 maxlen: 23
94.199.5.0/24 maxlen: 24
95.111.132.0/24 maxlen: 24
95.111.138.0/24 maxlen: 24
95.111.139.0/24 maxlen: 24
95.111.146.0/24 maxlen: 24
95.111.147.0/24 maxlen: 24
171.22.144.0/24 maxlen: 24
185.180.152.0/22 maxlen: 22
193.138.240.0/24 maxlen: 24
193.138.241.0/24 maxlen: 24
2a13:7500:1000::/36 maxlen: 36
2a13:7500:1000::/48 maxlen: 48
2a13:7500:1200::/44 maxlen: 44
2a13:7500:1241::/48 maxlen: 48
2a13:7500:1242::/48 maxlen: 48
2a13:7500:1248::/48 maxlen: 48
2a13:7500:1320::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:ba:11:92:03:69:98:95:81:8c:62:37:22:b5:1e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
Validity
Not Before: Aug 11 16:48:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=311fd659a6ce8db683e4c8f407daa9895d7d82f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2f:78:7c:a9:79:eb:81:64:6e:77:75:9c:fa:
91:9b:b7:2b:d7:b4:9a:34:48:eb:6b:e5:23:a7:94:
29:26:9a:30:13:7d:6b:dd:9a:14:b2:4e:33:36:07:
60:12:77:c7:69:05:25:0f:33:50:09:fe:ab:18:3e:
d9:21:31:16:ac:c0:e9:2b:4f:e8:c4:e6:61:8c:0b:
5b:f2:18:af:41:f0:db:89:64:98:d1:23:46:4f:e0:
ca:1d:c9:98:81:86:70:0e:9c:10:da:d3:32:71:43:
d7:bc:da:f5:95:3f:03:57:82:3c:0e:c2:74:70:07:
c0:87:cb:47:ac:e2:4b:22:0d:db:43:87:9d:75:ff:
8e:ef:2d:42:3e:e9:a5:93:89:36:b4:45:0e:71:84:
4c:d9:5a:2e:6a:e9:60:fb:f3:55:fc:e2:ed:69:91:
72:63:d8:52:14:b0:1a:48:c1:7f:f4:de:10:ac:49:
38:da:aa:15:9e:9d:f8:1a:38:b4:f3:f9:01:22:61:
92:e5:3c:8b:a3:bd:c3:1d:ef:c4:59:b0:93:6b:32:
6b:76:d7:56:f2:f3:57:ec:d9:01:b2:48:7b:34:60:
45:c7:b2:bc:1d:ad:b7:5d:fe:ed:c3:2d:42:b1:ae:
52:26:5b:cd:28:07:d6:b5:99:1b:ed:64:b7:bc:c8:
95:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1F:D6:59:A6:CE:8D:B6:83:E4:C8:F4:07:DA:A9:89:5D:7D:82:F1
X509v3 Authority Key Identifier:
keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/MR_WWabOjbaD5Mj0B9qpiV19gvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.0.0/21
45.145.122.0/23
94.199.5.0/24
95.111.132.0/24
95.111.138.0/23
95.111.146.0/23
171.22.144.0/24
185.180.152.0/22
193.138.240.0/23
IPv6:
2a13:7500:1000::/36
Signature Algorithm: sha256WithRSAEncryption
4d:71:0f:c9:9d:78:f2:51:5e:07:fd:49:dd:1f:64:e5:b0:b8:
9c:5a:f7:fe:6a:5c:7c:5f:fc:8f:6c:a3:df:7d:36:dc:a5:ea:
05:28:b0:de:78:9d:b6:5c:49:8b:ad:03:a0:fc:89:1b:fa:c2:
e4:4c:9a:a9:3b:ea:3c:06:93:4b:fa:6d:b3:6c:51:bf:e6:a0:
5d:d1:2f:a0:fe:28:a1:03:0a:1a:fd:02:81:d6:80:e3:de:28:
8d:e5:0b:17:6f:42:5c:d0:f9:a8:b4:ab:1e:63:7b:0c:9d:ea:
56:e6:3b:6b:9f:04:bc:0b:5d:5b:8d:4e:33:ac:95:73:95:84:
91:1e:13:55:e4:36:ce:35:e8:1e:66:32:d5:34:bb:e5:fe:c6:
51:5b:80:da:6a:c4:24:7e:1a:f0:3b:f3:75:68:c8:fb:d0:b6:
9d:69:96:d4:bc:7b:02:6b:15:e9:cf:d6:7c:dc:32:64:cb:0c:
79:06:63:05:4b:af:03:d5:c2:18:b1:01:4c:50:82:a7:c0:6e:
bc:d1:31:46:c9:b1:88:db:ef:b0:d4:02:0e:a4:d8:77:c9:72:
c1:d0:7a:81:28:2a:d7:d7:a6:cc:7a:02:c8:a8:85:ef:72:39:
2b:f9:81:13:b3:9e:94:97:8b:59:ad:6e:c3:7d:a2:bf:f2:af:
23:6c:18:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:07 2026 by rpki-client