Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/P-rkE4O7iR4e1UXGuc5nw5D-0iQ.roa
File: P-rkE4O7iR4e1UXGuc5nw5D-0iQ.roa (raw, json)
Hash identifier: kwSolCI1i5SEsXLmpOVpr3miFk/oLqZA/poLLHS6OIg=
Subject key identifier: 3F:EA:E4:13:83:BB:89:1E:1E:D5:45:C6:B9:CE:67:C3:90:FE:D2:24
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 01A13E535DE74B03E83D03C9F52DC6FD7593
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/P-rkE4O7iR4e1UXGuc5nw5D-0iQ.roa
Signing time: Thu 15 Oct 2026 06:50:13 +0000
ROA not before: Thu 15 Oct 2026 06:50:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 31.133.28.0/22 maxlen: 22
64.43.104.0/22 maxlen: 22
64.43.112.0/22 maxlen: 22
64.43.124.0/22 maxlen: 22
77.36.120.0/22 maxlen: 22
91.229.18.0/23 maxlen: 23
91.245.92.0/22 maxlen: 22
93.120.24.0/23 maxlen: 23
109.207.129.0/24 maxlen: 24
176.102.124.0/22 maxlen: 22
176.103.124.0/22 maxlen: 22
185.55.4.0/22 maxlen: 22
185.55.4.0/23 maxlen: 23
185.55.6.0/23 maxlen: 23
185.55.140.0/22 maxlen: 22
185.55.140.0/23 maxlen: 23
185.55.142.0/23 maxlen: 23
192.162.184.0/23 maxlen: 23
193.36.203.0/24 maxlen: 24
193.36.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:53:5d:e7:4b:03:e8:3d:03:c9:f5:2d:c6:fd:75:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Oct 15 06:50:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3feae41383bb891e1ed545c6b9ce67c390fed224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:ce:3d:9a:64:bb:5a:91:95:e7:5e:4e:72:
70:46:cc:94:cd:21:1f:54:12:76:9e:68:de:3d:f9:
33:c3:c7:76:b4:12:c4:48:50:0c:b9:c5:c6:d5:85:
98:65:48:d7:6c:d9:1c:a6:18:86:0d:1e:34:9e:79:
68:42:c3:f7:c7:fc:2e:a1:48:28:53:69:11:c8:14:
c1:86:3b:4b:12:b5:1d:8a:34:09:6b:80:75:c2:1c:
b4:10:f8:21:b5:74:53:29:7e:d8:48:09:93:ab:cc:
b3:87:10:c7:8a:de:98:65:5f:19:0b:ca:3d:0a:ac:
31:f0:ec:16:69:2e:ab:38:e2:7f:21:65:ed:64:9b:
d1:92:8a:d4:c8:6d:85:ca:d1:16:c5:69:d9:40:ca:
3b:94:24:40:68:64:f2:37:09:94:f9:97:c5:3e:c3:
c0:0e:7a:ec:03:1f:0f:0f:da:54:90:46:f3:fe:af:
e1:06:fb:95:e8:fc:a2:5b:50:8d:80:1e:bb:ab:8e:
00:70:25:c3:1e:f0:f5:2a:98:36:7a:62:d7:d3:34:
76:c8:b5:ef:d4:dc:c6:37:60:ab:78:7b:04:0b:b0:
a3:0d:c0:1f:41:9e:11:cc:a0:fe:fa:f5:a0:66:42:
03:09:6a:6c:f0:64:ed:b2:a0:7b:95:82:b9:c6:79:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EA:E4:13:83:BB:89:1E:1E:D5:45:C6:B9:CE:67:C3:90:FE:D2:24
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/P-rkE4O7iR4e1UXGuc5nw5D-0iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.28.0/22
64.43.104.0/22
64.43.112.0/22
64.43.124.0/22
77.36.120.0/22
91.229.18.0/23
91.245.92.0/22
93.120.24.0/23
109.207.129.0/24
176.102.124.0/22
176.103.124.0/22
185.55.4.0/22
185.55.140.0/22
192.162.184.0/23
193.36.203.0-193.36.207.255
Signature Algorithm: sha256WithRSAEncryption
9f:0f:43:bd:ac:5d:e2:3d:bd:0a:09:76:84:0e:f3:07:f4:78:
9c:b5:0e:8a:f8:a1:1e:9c:cf:f9:62:58:58:d2:4e:29:de:87:
53:59:2c:be:d8:54:7b:88:a2:c7:37:c1:ea:5f:c1:e6:63:d4:
ec:e3:02:1f:4b:b7:78:33:5c:b4:d4:d3:c3:16:96:4d:a7:86:
b8:6d:68:ee:36:11:d2:c5:8a:f7:c0:49:51:e6:1e:ba:04:cc:
c6:eb:6c:3b:25:e9:05:4b:1b:e3:a6:fc:5d:eb:13:46:42:9a:
c7:d1:05:65:b0:5f:22:61:48:24:30:8d:a6:1b:35:5c:ae:2e:
20:76:a8:c4:bf:2e:6c:98:e5:07:d0:2e:87:82:0b:a1:1a:48:
2e:2c:eb:69:81:de:c0:9b:52:83:04:c4:e1:e2:56:51:b0:c4:
66:58:11:6c:5c:04:09:31:df:e4:cf:06:d9:26:68:52:30:3e:
9b:7e:66:cb:e3:97:05:51:53:d5:aa:f1:58:2e:3b:33:86:d3:
45:26:0d:31:59:4e:44:17:4e:88:26:65:f8:d8:15:ea:6a:2b:
1c:6b:fc:5b:b1:34:65:63:52:32:e1:c4:47:1b:0e:3a:b9:10:
7d:7c:9f:e2:c9:1b:03:f7:ad:4b:c8:70:b5:83:28:01:9e:27:
d4:0c:1c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:08 2026 by rpki-client