Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/G2OFpfa1J1UED7EhV9_Ey2WJa30.roa
File: G2OFpfa1J1UED7EhV9_Ey2WJa30.roa (raw, json)
Hash identifier: Qm5YypiChtpU49wgI6/BP99C+XkqUrO71U6Go/O5Cdk=
Subject key identifier: 1B:63:85:A5:F6:B5:27:55:04:0F:B1:21:57:DF:C4:CB:65:89:6B:7D
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A17876F9882D74B74024C8998EACF01E57
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/G2OFpfa1J1UED7EhV9_Ey2WJa30.roa
Signing time: Mon 26 Oct 2026 13:47:05 +0000
ROA not before: Mon 26 Oct 2026 13:47:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 31.42.88.0/23 maxlen: 24
88.135.152.0/22 maxlen: 24
109.229.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:76:f9:88:2d:74:b7:40:24:c8:99:8e:ac:f0:1e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Oct 26 13:47:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b6385a5f6b52755040fb12157dfc4cb65896b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:90:3e:00:de:e7:00:68:bb:f7:b8:0e:e2:
80:a5:67:1b:0b:57:bf:51:94:0c:cc:7e:41:24:75:
d5:65:4a:5b:a1:3d:4b:23:58:44:21:7f:e3:e1:63:
de:9b:eb:14:c0:65:7a:98:ac:37:4b:54:43:f0:bf:
a0:57:46:7f:3a:5d:38:99:19:44:dd:e3:55:0d:65:
9c:ef:ff:4e:49:77:6d:88:a8:99:2b:ad:02:09:c0:
a4:68:4a:b4:b6:84:bd:fd:d6:52:d5:04:50:c4:64:
e9:61:01:6e:97:5c:22:31:4b:de:24:37:5b:d0:7d:
8c:c0:40:76:fa:f8:c4:d5:0f:08:21:0a:ec:8f:47:
87:77:a3:16:49:58:e6:f7:8d:7f:db:7b:9b:9c:ea:
5c:af:7b:2f:c1:a7:5d:27:7f:da:32:6c:06:c1:3e:
99:85:09:6e:14:46:1f:7d:d4:04:6f:42:48:04:4e:
64:ac:ae:9a:75:a9:7f:84:cc:85:9b:c3:b2:05:23:
1b:64:82:a6:ef:55:4e:58:ad:46:eb:2c:96:3c:05:
4d:ce:a5:a7:a0:a7:fd:a1:5a:c4:aa:3f:a1:4a:a9:
ac:65:7b:d3:08:01:08:12:9b:5c:71:d6:b1:22:ed:
9b:f4:a3:2e:b3:4f:d8:4e:05:ce:40:7c:7d:33:df:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:63:85:A5:F6:B5:27:55:04:0F:B1:21:57:DF:C4:CB:65:89:6B:7D
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/G2OFpfa1J1UED7EhV9_Ey2WJa30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.88.0/23
88.135.152.0/22
109.229.220.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:82:c8:e3:82:8c:83:bc:64:f9:3d:3c:98:1e:7b:4c:ad:ea:
72:d7:a0:db:c9:eb:05:6f:e1:7c:d3:9e:d0:18:27:3e:fc:f5:
54:6e:48:89:54:6a:ab:7e:cc:f6:a7:af:2d:fa:1d:b3:87:28:
e9:4f:f9:0b:ff:ed:c0:bf:99:cc:e2:24:0e:4e:ff:3a:fa:5c:
eb:d1:51:be:2d:89:87:8d:da:83:6f:50:cb:71:4b:86:9e:f7:
15:a7:e1:44:4d:07:e5:82:5f:e0:c1:6f:8a:45:a8:06:d2:61:
1e:dd:a3:8a:8a:31:9a:2a:ac:5c:1c:2d:c5:b1:cd:b9:81:64:
07:f3:e3:8f:72:f1:0b:27:27:5c:8f:33:ea:cf:19:5a:76:a4:
91:45:04:32:a5:5a:62:ff:35:bc:24:71:ea:b6:bc:c4:ee:fe:
96:cd:78:d0:28:c6:bb:30:70:9b:c7:bb:3b:1e:de:35:50:3a:
96:64:26:b9:f3:f6:c2:a9:ec:97:b6:c5:f7:b6:6a:38:b4:5e:
49:2c:1b:82:44:81:ab:c2:72:d6:db:1e:1b:8b:20:c8:2f:ab:
e6:32:db:12:04:08:72:18:65:3c:3e:5d:a3:cb:92:99:aa:f3:
49:2b:b5:2b:c1:b1:c6:e8:4e:e5:b0:4a:a0:c1:3d:5f:d2:b0:
98:a5:30:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:46 2026 by rpki-client