Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/PxHWz5moTOIoq7lLr6ZUTCdq4LU.roa
File: PxHWz5moTOIoq7lLr6ZUTCdq4LU.roa (raw, json)
Hash identifier: G/0ObNAWG5S5HRnt08VFe1x59GMhL5BOy9mX5utE8l4=
Subject key identifier: 3F:11:D6:CF:99:A8:4C:E2:28:AB:B9:4B:AF:A6:54:4C:27:6A:E0:B5
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 01A12F42A43E328255A0951C8DAEB3E2A12F
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/PxHWz5moTOIoq7lLr6ZUTCdq4LU.roa
Signing time: Mon 12 Oct 2026 08:37:38 +0000
ROA not before: Mon 12 Oct 2026 08:37:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9145
IP address blocks: 31.150.0.0/16 maxlen: 24
31.184.16.0/20 maxlen: 24
31.184.32.0/20 maxlen: 24
31.184.48.0/20 maxlen: 24
31.187.112.0/20 maxlen: 24
37.138.0.0/16 maxlen: 24
62.89.160.0/19 maxlen: 24
80.66.0.0/19 maxlen: 24
80.228.0.0/16 maxlen: 24
82.149.160.0/19 maxlen: 24
85.8.64.0/18 maxlen: 24
85.16.0.0/16 maxlen: 24
87.245.0.0/18 maxlen: 24
89.166.128.0/17 maxlen: 24
89.233.64.0/19 maxlen: 24
90.153.0.0/17 maxlen: 24
91.96.0.0/15 maxlen: 24
91.248.0.0/15 maxlen: 24
92.252.0.0/17 maxlen: 24
95.33.0.0/16 maxlen: 24
178.142.0.0/16 maxlen: 24
185.61.100.0/22 maxlen: 22
188.118.128.0/18 maxlen: 24
212.6.64.0/18 maxlen: 24
212.68.64.0/19 maxlen: 24
212.95.96.0/19 maxlen: 24
213.168.192.0/19 maxlen: 24
213.170.160.0/19 maxlen: 24
213.182.96.0/19 maxlen: 24
213.183.160.0/19 maxlen: 24
213.252.128.0/18 maxlen: 24
2a00:1470::/32 maxlen: 48
2a01:ac00::/32 maxlen: 48
2a02:8020::/30 maxlen: 48
2a02:8200::/27 maxlen: 48
2a02:8200:1:4001::/64 maxlen: 64
2a02:8200:1:4002::/64 maxlen: 64
2a02:8200:1:4003::/64 maxlen: 64
2a02:8200:1:4004::/64 maxlen: 64
2a02:8200:1:4005::/64 maxlen: 64
2a02:8200:1:4006::/64 maxlen: 64
2a02:8200:1:4007::/64 maxlen: 64
2a02:8200:1:4008::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:42:a4:3e:32:82:55:a0:95:1c:8d:ae:b3:e2:a1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Oct 12 08:37:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f11d6cf99a84ce228abb94bafa6544c276ae0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:fc:d3:26:bd:71:f5:01:24:b0:9c:ff:71:
9c:91:a3:90:8e:bb:1d:fb:9a:ac:37:f8:04:da:1a:
c1:3d:8b:7a:78:55:e6:c2:ff:41:4d:ce:40:74:43:
1c:86:bd:e4:b3:fb:e2:58:7f:41:d3:27:87:fb:c4:
38:bf:79:cf:8c:7c:a2:23:d4:7b:58:90:6a:13:4e:
8a:ca:86:75:f1:67:35:b0:de:db:ad:75:d9:82:89:
e4:04:7f:59:ab:80:7c:47:15:4e:9e:ce:a5:fe:5d:
e4:54:41:cb:a2:f6:6a:6b:de:82:0f:af:9a:9e:2d:
31:dd:2a:90:3e:d6:17:17:d8:5f:07:90:2f:4d:03:
75:08:72:42:10:20:b5:f9:9b:bf:f7:07:f9:29:33:
0b:71:4f:16:7f:33:a0:34:89:62:b5:eb:f5:b2:4c:
79:ba:26:c9:f5:31:f1:a9:61:11:bb:eb:9f:f9:5e:
2f:c5:5d:a0:62:31:24:9f:cf:33:a8:85:26:12:df:
2f:1b:ea:06:6f:38:32:89:78:96:ca:3d:45:49:00:
91:df:9a:cd:c2:db:aa:5a:42:32:8f:aa:3a:3b:28:
31:f5:f6:33:5f:e6:21:87:56:80:01:1c:e5:82:a7:
c7:4a:77:fc:2c:ca:26:39:11:7a:31:91:8b:07:16:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:11:D6:CF:99:A8:4C:E2:28:AB:B9:4B:AF:A6:54:4C:27:6A:E0:B5
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/PxHWz5moTOIoq7lLr6ZUTCdq4LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.150.0.0/16
31.184.16.0-31.184.63.255
31.187.112.0/20
37.138.0.0/16
62.89.160.0/19
80.66.0.0/19
80.228.0.0/16
82.149.160.0/19
85.8.64.0/18
85.16.0.0/16
87.245.0.0/18
89.166.128.0/17
89.233.64.0/19
90.153.0.0/17
91.96.0.0/15
91.248.0.0/15
92.252.0.0/17
95.33.0.0/16
178.142.0.0/16
185.61.100.0/22
188.118.128.0/18
212.6.64.0/18
212.68.64.0/19
212.95.96.0/19
213.168.192.0/19
213.170.160.0/19
213.182.96.0/19
213.183.160.0/19
213.252.128.0/18
IPv6:
2a00:1470::/32
2a01:ac00::/32
2a02:8020::/30
2a02:8200::/27
Signature Algorithm: sha256WithRSAEncryption
69:1f:af:dc:31:a0:b6:a8:6e:ef:3b:0b:f8:01:61:05:ba:8d:
76:2a:d8:25:0a:71:6b:8d:79:aa:d9:be:e7:43:6a:32:44:a2:
47:93:d3:e1:f3:91:96:1b:ef:55:7c:e0:2d:ec:90:a7:a8:8f:
92:3b:19:9b:92:5c:d3:07:d2:e3:5b:03:81:75:54:11:97:9e:
68:43:5c:14:97:20:b5:6a:86:fa:ba:c1:35:54:ce:57:3c:05:
61:a0:9d:df:a8:dd:e1:66:49:ff:9d:4b:8d:4a:ef:7c:b2:f0:
2a:e0:f7:54:24:44:1f:64:11:13:6f:6d:c2:1e:a8:9f:d2:ba:
93:fc:d0:8e:e6:a8:d2:c9:68:95:d2:fd:c5:c0:40:57:6c:65:
b8:11:a4:5c:be:2d:d8:81:fc:aa:02:e7:5b:7e:5e:0e:38:4d:
e7:5b:5d:36:7c:b6:f1:13:92:cc:47:f1:13:54:5b:c0:68:09:
d2:06:47:9e:51:e9:ac:8e:43:67:62:86:d5:d2:97:5e:14:e9:
3b:10:c7:e8:ff:62:08:9e:64:43:34:6d:5c:f3:65:73:fa:3d:
42:38:0c:39:4e:14:99:c0:04:1a:4b:b2:d1:57:d8:fc:93:2f:
20:72:42:5f:d1:eb:65:4e:79:f6:1e:7a:f5:c3:bb:b1:14:9b:
55:ae:6c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:55 2026 by rpki-client