Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/j4dlKkW7ZyBg8KN9Xqimdrv8ycM.roa
File: j4dlKkW7ZyBg8KN9Xqimdrv8ycM.roa (raw, json)
Hash identifier: 0mOE1/KZeYHqq6fzhNBDFBvmP+UduScHpyZZY8bNL1Y=
Subject key identifier: 8F:87:65:2A:45:BB:67:20:60:F0:A3:7D:5E:A8:A6:76:BB:FC:C9:C3
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694436B7DF33C467FD587325A8EB4A
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/j4dlKkW7ZyBg8KN9Xqimdrv8ycM.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42708
IP address blocks: 31.135.2.0/24 maxlen: 24
64.43.64.0/24 maxlen: 24
176.116.228.0/24 maxlen: 24
193.36.200.0/24 maxlen: 24
193.36.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:44:36:b7:df:33:c4:67:fd:58:73:25:a8:eb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f87652a45bb672060f0a37d5ea8a676bbfcc9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:ac:9d:47:89:83:bf:3d:19:ef:07:a6:62:
a7:b2:11:21:cd:fd:e1:40:e2:1b:40:a8:d9:0e:2e:
44:87:ac:91:4c:74:90:3f:21:3b:19:35:f1:b8:09:
4b:d6:9d:24:68:5e:32:64:be:8b:79:f9:b1:14:9f:
10:27:c3:e6:b1:aa:bf:8e:2e:08:fa:6f:c9:fb:b1:
80:c6:c0:c7:28:cf:b7:d3:23:f9:17:ce:7e:99:28:
d3:40:2d:b5:6c:f7:3a:bf:39:92:bb:5f:1d:53:2d:
1f:0d:65:24:e2:20:d4:36:8a:21:54:37:bc:77:96:
b1:8d:ff:9a:8c:8b:de:24:90:34:2b:ab:57:22:c2:
2c:ef:e6:39:7d:98:b1:03:31:bd:76:6e:b7:e3:3a:
a7:ba:e6:73:07:92:4a:b4:64:3e:0a:ba:47:15:67:
17:6b:3d:df:eb:57:0f:ef:4b:ae:02:5b:cf:43:74:
41:77:2c:e8:f0:6d:2f:9f:71:6c:e4:2c:49:50:2f:
21:64:ec:18:36:30:cf:8b:d2:c0:cd:86:5c:74:bf:
ac:9e:07:a6:b9:33:54:51:3f:76:9c:18:fd:04:d4:
b4:16:d1:3f:52:13:e1:9e:74:03:72:0d:e3:81:4f:
99:0a:3d:09:83:74:9a:17:57:80:7c:bd:99:81:6c:
7d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:87:65:2A:45:BB:67:20:60:F0:A3:7D:5E:A8:A6:76:BB:FC:C9:C3
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/j4dlKkW7ZyBg8KN9Xqimdrv8ycM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.2.0/24
64.43.64.0/24
176.116.228.0/24
193.36.200.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:c6:81:7a:cb:05:5a:a9:b2:65:f6:6f:61:2f:a5:9d:d0:ab:
2c:9e:29:20:49:08:78:30:d3:c6:b6:dd:90:28:4d:d7:b0:ba:
ce:ea:ef:8a:65:19:11:97:9e:15:63:73:13:31:e4:0f:b2:84:
fe:37:5f:5b:a0:46:0f:41:04:4e:4e:0a:01:1d:e5:e2:87:32:
f8:be:e5:1f:96:de:2e:e8:eb:4d:f6:c2:44:91:28:69:1a:0e:
0e:ec:84:b5:cf:9b:e1:4d:f0:de:20:de:a1:f6:3b:24:98:f2:
1e:b2:ef:2e:8c:13:94:54:1a:e3:f6:ab:4a:72:8b:1c:b9:fd:
b3:19:3f:4f:2d:2a:19:58:cc:88:01:2d:6c:0e:cc:38:b5:ce:
cf:d5:97:e0:ee:4f:f5:d7:ce:51:c4:51:2d:c3:ec:5f:e8:de:
7a:a1:45:c1:a8:b9:d5:f8:f8:c5:06:00:81:71:00:3c:16:c4:
28:5b:91:a9:e7:52:a1:8e:29:8b:24:41:62:2e:f2:ef:f7:f7:
5c:2f:4d:dd:85:b5:f9:5f:1c:33:86:ec:9c:05:95:1e:c0:fc:
f4:42:70:c6:3d:92:4c:24:56:63:53:31:5d:b6:5e:d3:c8:c6:
2d:45:9b:08:2f:1f:7b:6c:45:90:1f:c6:8c:20:47:73:c4:b6:
41:72:db:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:23:05 2026 by rpki-client