Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/AlFYMOjZpKOHDgU1608i7q53bsQ.roa
File: AlFYMOjZpKOHDgU1608i7q53bsQ.roa (raw, json)
Hash identifier: jhj5FGNbh0sN8+PHNc4X8lPETOP0sBCPRbpPz3x6rIA=
Subject key identifier: 02:51:58:30:E8:D9:A4:A3:87:0E:05:35:EB:4F:22:EE:AE:77:6E:C4
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F236943BEFDABCB2246B03F1F1CD931BA
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/AlFYMOjZpKOHDgU1608i7q53bsQ.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34744
IP address blocks: 31.133.28.0/22 maxlen: 22
77.36.0.0/23 maxlen: 23
77.36.16.0/21 maxlen: 21
77.232.216.0/22 maxlen: 22
91.246.172.0/22 maxlen: 22
93.120.47.0/24 maxlen: 24
109.197.232.0/22 maxlen: 22
176.115.232.0/22 maxlen: 22
2a01:7d8::/48 maxlen: 48
2a01:7d8:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:43:be:fd:ab:cb:22:46:b0:3f:1f:1c:d9:31:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02515830e8d9a4a3870e0535eb4f22eeae776ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:a1:72:fe:00:49:34:22:af:68:b1:fd:dc:
c6:c0:de:dc:dc:31:ed:18:2c:9e:5f:b2:a5:88:99:
55:c2:7d:60:45:d4:7f:81:05:44:1e:1d:09:b2:8a:
dd:98:bf:29:52:bc:87:c4:eb:07:ee:7a:9f:fb:e1:
98:f4:13:2a:7c:7f:5a:a2:91:49:49:55:7b:7d:35:
a8:91:05:e4:09:4f:4e:23:ff:40:8b:6c:c5:7d:ee:
9d:a5:40:3a:96:55:a3:4e:80:24:d2:d3:55:36:cd:
c9:58:44:c1:33:24:4e:99:be:74:73:6b:bc:9e:18:
f2:71:f9:7c:d8:2b:9e:29:b8:e0:77:da:07:00:cc:
e0:11:4f:e8:09:bd:4c:2e:77:28:80:7e:93:c1:f8:
14:ed:78:69:6b:78:d9:f5:34:d0:c8:af:a6:6a:6c:
32:ad:22:4e:f1:85:51:e0:28:47:cc:9a:f0:8e:1b:
5c:a1:fa:fe:62:9e:7d:a0:89:38:d3:58:43:7f:9a:
29:c8:00:c8:95:f1:df:3c:36:e3:96:ca:db:5f:ee:
23:50:7a:1e:05:4e:44:55:19:95:34:dd:c5:b6:3b:
f8:4c:9c:c7:44:cc:07:a6:38:f9:b2:19:96:db:26:
22:b5:c2:e5:90:1c:4e:3d:88:e1:b0:1d:d5:70:3c:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:51:58:30:E8:D9:A4:A3:87:0E:05:35:EB:4F:22:EE:AE:77:6E:C4
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/AlFYMOjZpKOHDgU1608i7q53bsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.28.0/22
77.36.0.0/23
77.36.16.0/21
77.232.216.0/22
91.246.172.0/22
93.120.47.0/24
109.197.232.0/22
176.115.232.0/22
IPv6:
2a01:7d8::/47
Signature Algorithm: sha256WithRSAEncryption
ae:e4:46:50:e6:33:b7:e5:e8:c6:93:6c:53:73:78:2c:c9:a6:
f0:81:89:8c:37:eb:5d:a9:7f:af:77:dd:34:68:36:fe:bc:c3:
49:ad:5d:cf:4c:52:94:cd:03:16:96:8f:b9:61:36:dc:fe:91:
b2:0d:fa:e6:e2:44:cb:ae:2e:7e:cf:c6:62:39:0a:d8:db:a4:
50:99:c8:b4:7e:9f:49:24:99:6a:47:af:0d:2f:f7:d3:28:54:
6b:fd:7d:48:6c:6e:ed:d6:fd:57:84:19:9e:dc:59:97:f6:6c:
03:39:aa:42:46:e3:1f:13:4c:06:e3:2e:17:7c:6c:79:80:9c:
c1:21:1a:b0:69:03:f1:5e:2d:18:0c:68:09:84:3b:69:c0:a1:
3f:01:cc:66:9c:48:82:90:89:60:77:4c:c0:4c:53:f0:c6:f8:
c7:dd:c9:6c:7c:06:57:f1:7d:40:c9:bb:68:a7:3e:b0:11:64:
7b:88:54:c2:3e:db:f4:bb:47:86:93:89:a9:0c:b6:c0:02:13:
7f:6e:85:d6:ec:23:e7:3a:30:86:13:77:cb:33:89:b5:10:63:
5e:47:2a:70:25:4e:aa:4e:0a:aa:0b:d7:6b:9a:91:3a:23:99:
6b:0a:d2:f6:84:e8:42:5f:87:29:68:ed:de:1c:0c:28:83:3e:
4c:54:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:23:03 2026 by rpki-client