Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/KgUafpKLQn167LugL8OB7NIxPBY.roa
File: KgUafpKLQn167LugL8OB7NIxPBY.roa (raw, json)
Hash identifier: UwTKLcOOmGr1M5MqovXzfh3IyeeIlKdI89ngxjztStc=
Subject key identifier: 2A:05:1A:7E:92:8B:42:7D:7A:EC:BB:A0:2F:C3:81:EC:D2:31:3C:16
Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial: 019F18C788B14947FD10ADB278E6E5DA7844
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/KgUafpKLQn167LugL8OB7NIxPBY.roa
Signing time: Tue 30 Jun 2026 13:45:57 +0000
ROA not before: Tue 30 Jun 2026 13:45:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203532
IP address blocks: 31.43.174.0/23 maxlen: 23
31.43.174.0/24 maxlen: 24
31.43.175.0/24 maxlen: 24
95.111.128.0/23 maxlen: 23
95.111.130.0/24 maxlen: 24
95.111.131.0/24 maxlen: 24
95.111.136.0/24 maxlen: 24
95.111.137.0/24 maxlen: 24
177.222.64.0/19 maxlen: 19
177.222.64.0/20 maxlen: 20
177.222.64.0/21 maxlen: 21
177.222.72.0/21 maxlen: 21
177.222.80.0/22 maxlen: 22
177.222.84.0/22 maxlen: 22
177.222.88.0/24 maxlen: 24
177.222.89.0/24 maxlen: 24
177.222.90.0/24 maxlen: 24
177.222.91.0/24 maxlen: 24
177.222.92.0/24 maxlen: 24
177.222.93.0/24 maxlen: 24
2a13:7500::/36 maxlen: 36
2a13:7500::/48 maxlen: 48
2a13:7500:200::/40 maxlen: 40
2a13:7500:241::/48 maxlen: 48
2a13:7500:242::/48 maxlen: 48
2a13:7500:248::/48 maxlen: 48
2a13:7500:320::/44 maxlen: 44
2a13:7500:8100::/44 maxlen: 44
2a13:7500:8100::/48 maxlen: 48
2a13:7500:8101::/48 maxlen: 48
2a13:7500:8102::/48 maxlen: 48
2a13:7500:8103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:c7:88:b1:49:47:fd:10:ad:b2:78:e6:e5:da:78:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
Validity
Not Before: Jun 30 13:45:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a051a7e928b427d7aecbba02fc381ecd2313c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:05:f8:1e:79:3d:93:fa:b7:30:a9:53:58:
6d:98:cb:6e:78:8c:e7:80:41:7e:90:fa:03:3b:30:
b1:b3:6a:97:c6:66:fb:a0:09:87:a9:54:d8:b8:0e:
0d:e3:d5:c9:6a:62:6f:79:f4:a2:33:14:d2:91:a4:
cb:b4:94:ba:8b:f6:d4:20:6e:93:41:20:89:81:52:
fe:02:19:86:a4:7b:9c:fa:58:2d:cf:67:94:7a:ad:
34:17:29:8d:00:bd:0f:b8:ce:ec:04:41:6f:fe:87:
9c:b5:e2:33:bc:14:64:14:72:90:31:07:c6:29:cc:
c3:01:11:e4:28:76:ed:c6:d4:dc:16:e9:5e:8b:3a:
95:77:aa:b7:ee:6f:48:15:bc:73:31:0e:68:cd:6d:
42:40:71:8e:a1:eb:6a:4d:b4:f9:d4:69:15:e6:09:
71:ae:56:06:56:ec:6d:c4:26:c0:7e:0e:6e:91:bb:
ae:0c:30:11:9c:04:ef:7c:6f:10:63:a8:9c:e1:ab:
a6:ea:45:2e:2b:97:d7:35:00:46:94:4b:bb:7f:db:
da:36:18:0a:7d:6d:33:19:02:03:bf:89:97:4c:4d:
1f:9a:ac:7e:3a:3e:17:67:23:6e:d5:ea:c0:91:5c:
49:84:2b:61:03:2d:6f:b7:26:40:e5:24:5c:ef:d5:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:05:1A:7E:92:8B:42:7D:7A:EC:BB:A0:2F:C3:81:EC:D2:31:3C:16
X509v3 Authority Key Identifier:
keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/KgUafpKLQn167LugL8OB7NIxPBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.174.0/23
95.111.128.0/22
95.111.136.0/23
177.222.64.0/19
IPv6:
2a13:7500::/36
2a13:7500:8100::/44
Signature Algorithm: sha256WithRSAEncryption
14:5b:91:46:08:f2:5e:cb:af:f1:ad:30:54:a8:97:6c:c0:c2:
cd:f3:4c:53:c3:c7:bf:51:bf:81:d6:5c:f4:4c:6f:4c:5b:76:
d4:ef:f2:c1:79:3a:38:a1:d3:93:46:e9:6f:c1:f0:8c:1f:5c:
4e:7a:f9:bb:80:b4:d5:d2:b9:07:38:70:cd:5c:dc:60:bf:60:
ef:c9:58:eb:d1:c9:98:a0:f1:28:32:58:18:53:04:65:a3:f0:
e4:e1:1c:dd:3e:ea:a8:0a:aa:fb:c2:4b:ae:0a:d2:3c:cf:e3:
dd:b4:9b:53:f8:ca:7a:cf:06:50:c3:ba:86:ce:eb:0d:d1:b5:
c9:c9:cb:b2:ae:5f:29:5a:e0:0a:db:c0:75:8e:b9:8f:00:a8:
3a:d9:9d:81:f0:6c:93:07:7b:03:cb:7f:9c:fd:11:7c:8c:99:
a2:23:34:62:21:01:d4:0f:26:6c:6c:03:57:c1:3a:ce:f1:04:
db:99:4e:a3:b9:c5:61:1c:11:b7:42:5a:d2:ab:33:9d:d1:4d:
7d:7b:60:65:8d:8d:40:74:aa:37:3d:0b:ab:ad:ce:7c:07:71:
b9:6c:b9:b4:ee:ea:70:3c:c3:29:07:90:1c:23:00:0e:c5:f0:
01:34:ee:de:77:53:89:0a:42:92:76:ad:01:44:a5:fc:a6:9d:
3a:cd:1f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:13:53 2026 by rpki-client