Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/oXxdKCG0A1axs6lSawqKBJAuk0o.roa
File: oXxdKCG0A1axs6lSawqKBJAuk0o.roa (raw, json)
Hash identifier: 8qMThbazSPFuvu8NQx00WttlTVSn+DQj3yU54QkaMb4=
Subject key identifier: A1:7C:5D:28:21:B4:03:56:B1:B3:A9:52:6B:0A:8A:04:90:2E:93:4A
Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial: 019E91B441146169FAF0B498890B0A85D809
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/oXxdKCG0A1axs6lSawqKBJAuk0o.roa
Signing time: Thu 04 Jun 2026 08:16:09 +0000
ROA not before: Thu 04 Jun 2026 08:16:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203532
IP address blocks: 31.43.174.0/23 maxlen: 23
31.43.174.0/24 maxlen: 24
31.43.175.0/24 maxlen: 24
95.111.128.0/23 maxlen: 23
95.111.130.0/24 maxlen: 24
95.111.131.0/24 maxlen: 24
95.111.136.0/23 maxlen: 23
177.222.64.0/19 maxlen: 19
177.222.64.0/20 maxlen: 20
177.222.64.0/21 maxlen: 21
177.222.72.0/21 maxlen: 21
177.222.80.0/22 maxlen: 22
177.222.84.0/22 maxlen: 22
177.222.88.0/24 maxlen: 24
177.222.89.0/24 maxlen: 24
177.222.90.0/24 maxlen: 24
177.222.91.0/24 maxlen: 24
177.222.92.0/24 maxlen: 24
177.222.93.0/24 maxlen: 24
2a13:7500::/36 maxlen: 36
2a13:7500::/48 maxlen: 48
2a13:7500:200::/40 maxlen: 40
2a13:7500:241::/48 maxlen: 48
2a13:7500:242::/48 maxlen: 48
2a13:7500:248::/48 maxlen: 48
2a13:7500:320::/44 maxlen: 44
2a13:7500:8100::/44 maxlen: 44
2a13:7500:8100::/48 maxlen: 48
2a13:7500:8101::/48 maxlen: 48
2a13:7500:8102::/48 maxlen: 48
2a13:7500:8103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:b4:41:14:61:69:fa:f0:b4:98:89:0b:0a:85:d8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
Validity
Not Before: Jun 4 08:16:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a17c5d2821b40356b1b3a9526b0a8a04902e934a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:c8:6a:22:b6:23:50:db:bd:67:9a:4b:c7:
01:51:13:59:52:d2:e6:cf:b2:02:91:4a:e4:49:50:
62:e2:5a:80:dd:cc:d5:d1:70:e4:12:0c:ee:6a:b7:
85:c4:40:06:52:ca:78:60:1a:03:be:a4:f1:29:f7:
5b:02:51:a5:b0:ec:23:cb:f6:73:2d:0c:60:76:20:
dd:53:86:67:2a:af:af:63:d0:ed:3a:8f:2a:79:9e:
3b:7a:46:d8:bd:f6:df:ea:cc:22:e6:4b:0a:a6:eb:
7f:91:60:04:e1:5a:43:63:1e:58:2d:95:87:84:70:
45:3a:49:6f:dd:08:2a:6d:2c:c9:a1:d9:43:71:5f:
b6:ec:39:6b:14:76:33:50:20:48:31:90:e7:bb:d9:
7c:82:60:5c:e1:08:20:77:fc:7e:90:77:33:71:eb:
6d:54:f2:53:f0:c3:32:d1:6f:3a:f6:ad:e2:3e:c2:
e3:9b:34:d0:6c:be:1d:40:cf:0a:95:29:90:37:3f:
cd:b7:46:16:8d:c5:31:f9:60:65:83:4a:04:7a:83:
29:d9:8b:fd:2a:12:2e:79:4e:54:61:b0:e1:03:8a:
11:07:20:5e:63:c1:f5:d4:36:78:21:af:54:eb:3c:
cb:66:99:94:cc:a0:87:dd:4a:f3:74:0f:d6:34:d9:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7C:5D:28:21:B4:03:56:B1:B3:A9:52:6B:0A:8A:04:90:2E:93:4A
X509v3 Authority Key Identifier:
keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/oXxdKCG0A1axs6lSawqKBJAuk0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.174.0/23
95.111.128.0/22
95.111.136.0/23
177.222.64.0/19
IPv6:
2a13:7500::/36
2a13:7500:8100::/44
Signature Algorithm: sha256WithRSAEncryption
32:cd:05:1d:57:ed:44:26:77:ff:99:e2:f4:e0:b3:0e:aa:54:
89:55:de:25:6e:c0:ff:23:78:c4:4f:dd:f2:71:1a:82:37:48:
1b:34:05:60:76:3f:6f:b4:54:10:c5:c2:15:bc:07:80:46:ac:
de:a3:8f:a8:77:c6:00:05:7f:04:42:c0:29:66:23:76:da:fb:
94:12:e8:4b:3d:a0:58:f3:03:05:2d:3f:a5:9d:e6:08:69:1c:
79:ea:54:14:d5:ec:fd:d5:e2:9c:6e:2c:aa:a6:0b:eb:06:98:
4c:7b:9a:dc:48:cc:81:66:e0:64:e4:70:26:c5:00:03:db:b6:
14:b0:b8:25:d7:74:11:e6:85:34:49:bc:5c:ce:ea:61:7c:89:
3d:6c:ae:85:3a:6a:1c:3d:d4:c6:5a:0c:7a:f8:64:85:7b:c8:
76:20:7e:f6:b2:dc:a2:fe:89:88:d6:05:0a:22:e2:4f:6a:cb:
95:61:52:2e:96:09:c8:48:fe:7d:36:ad:92:41:55:37:cd:38:
37:0d:2c:e7:b2:1a:48:63:a2:96:f2:20:7d:2f:52:79:af:53:
ca:3a:08:88:01:c3:c2:3e:27:6d:81:75:83:fb:84:db:69:c8:
e8:43:79:b6:2e:d4:6c:fd:55:11:e3:8d:45:69:1b:5a:9f:1a:
ee:a1:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:46 2026 by rpki-client