Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/9SQHdV4usxyMqovhsLIv6zEJKOI.roa
File: 9SQHdV4usxyMqovhsLIv6zEJKOI.roa (raw, json)
Hash identifier: V7h4PGYhMzOyOwfIi9SAwhnF0KbbWgTo2Xo5jHPZgNM=
Subject key identifier: F5:24:07:75:5E:2E:B3:1C:8C:AA:8B:E1:B0:B2:2F:EB:31:09:28:E2
Certificate issuer: /CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Certificate serial: 019F236831B96349F8B451A5FFF0ED0B8191
Authority key identifier: 1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/9SQHdV4usxyMqovhsLIv6zEJKOI.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21413
IP address blocks: 31.187.67.0/24 maxlen: 24
31.187.77.0/24 maxlen: 24
31.187.79.0/24 maxlen: 24
37.247.64.0/19 maxlen: 24
46.227.216.0/21 maxlen: 24
77.235.160.0/19 maxlen: 24
80.243.32.0/19 maxlen: 24
83.221.224.0/19 maxlen: 24
85.190.176.0/21 maxlen: 24
87.121.192.0/20 maxlen: 24
87.121.224.0/20 maxlen: 24
89.187.200.0/21 maxlen: 24
93.159.96.0/19 maxlen: 24
94.100.64.0/20 maxlen: 24
176.126.88.0/22 maxlen: 22
185.90.128.0/22 maxlen: 24
185.175.209.0/24 maxlen: 24
193.98.112.0/21 maxlen: 21
212.99.192.0/19 maxlen: 24
2a00:1ca0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:31:b9:63:49:f8:b4:51:a5:ff:f0:ed:0b:81:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f52407755e2eb31c8caa8be1b0b22feb310928e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:99:3d:7a:73:ab:a9:c8:42:d3:83:bc:35:
62:c8:a2:a8:02:a1:3c:24:d8:de:3f:8c:a5:34:76:
1f:1d:ed:88:cc:82:a4:5a:64:20:76:b5:6d:c9:11:
84:8c:f2:fb:4f:9d:10:b0:d8:49:95:86:0e:ab:8c:
5f:9e:fc:f1:5d:de:ec:4b:41:86:71:02:f0:fe:4c:
5c:e2:b8:3b:7c:5e:4b:b3:6e:98:35:45:cd:b3:c6:
6b:06:74:6d:59:c6:8d:42:2a:22:e8:d8:34:dc:35:
59:50:d1:b3:30:df:b6:31:d3:5b:19:c3:85:83:3a:
46:a0:a5:c8:2c:e4:23:02:93:51:ab:12:82:a6:d0:
b7:bc:17:13:6a:fd:20:89:96:40:c5:70:e1:22:59:
e3:1b:82:71:f4:9e:88:ff:9c:f0:0c:d2:0d:b6:ed:
fe:24:d4:db:cf:7f:6f:6e:08:3e:7f:dc:2f:87:81:
89:ac:22:be:bb:15:bd:f6:cf:42:09:f8:bd:e2:0f:
dd:c1:d2:26:f4:a9:d9:a1:ab:c6:08:06:1a:d3:5f:
f9:1f:0a:2d:eb:70:3d:3c:50:2e:39:4b:84:ba:27:
8c:8c:e0:fb:ee:b3:7b:1d:3d:00:7f:ad:6f:78:de:
ed:dc:d2:d6:c8:95:10:1e:23:f3:62:18:cc:81:72:
4a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:24:07:75:5E:2E:B3:1C:8C:AA:8B:E1:B0:B2:2F:EB:31:09:28:E2
X509v3 Authority Key Identifier:
keyid:1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/9SQHdV4usxyMqovhsLIv6zEJKOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.67.0/24
31.187.77.0/24
31.187.79.0/24
37.247.64.0/19
46.227.216.0/21
77.235.160.0/19
80.243.32.0/19
83.221.224.0/19
85.190.176.0/21
87.121.192.0/20
87.121.224.0/20
89.187.200.0/21
93.159.96.0/19
94.100.64.0/20
176.126.88.0/22
185.90.128.0/22
185.175.209.0/24
193.98.112.0/21
212.99.192.0/19
IPv6:
2a00:1ca0::/32
Signature Algorithm: sha256WithRSAEncryption
29:98:7c:ff:e3:a3:aa:6f:3d:7b:7d:ce:b3:d8:6a:43:13:83:
d8:03:06:de:10:a0:a8:22:56:6b:61:ff:7c:d7:3c:1a:2e:e2:
aa:47:59:0d:44:25:33:42:10:d9:c4:cb:ac:d0:03:bc:48:28:
d9:d8:c6:1c:e1:c5:fe:8a:7e:eb:b7:27:a8:c1:16:62:77:db:
f2:b0:e8:58:a0:5a:6d:ff:14:5a:b2:7b:8e:41:39:24:48:fa:
af:72:1e:cd:8c:48:51:d1:f0:cd:2c:dc:8c:f2:a0:66:0c:c5:
8a:86:44:80:d4:f7:be:ec:b0:16:b7:1a:9b:18:3b:fb:6e:4f:
4a:a2:77:6d:9a:45:e5:8a:99:e5:e4:93:39:9d:07:86:38:7b:
ab:00:73:03:73:ea:a0:42:09:0a:bb:8c:6b:a7:8a:0a:d8:ee:
51:5c:11:cf:d8:dd:a6:b4:14:a5:43:c9:b2:f1:50:66:5c:6e:
43:9c:90:c9:80:a3:1b:19:91:26:d8:8a:9d:3a:df:15:43:1e:
62:6c:9b:c6:65:ae:23:f9:8e:1c:67:9e:f3:4e:28:c6:5d:82:
dd:fc:7d:c6:7c:61:97:45:1c:d8:5f:0f:69:ec:f6:42:0e:f7:
b9:e8:c1:09:68:1f:04:a6:8d:96:90:fb:4c:69:56:27:c0:d0:
fb:ce:fd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:37:42 2026 by rpki-client