Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/jvRgN4gTBZCwQWvT7sU22fnWvLw.roa
File: jvRgN4gTBZCwQWvT7sU22fnWvLw.roa (raw, json)
Hash identifier: 3jTc+7mCGjbJJX33fJfW8ThIk132yuJ9dvK3BJPg3TU=
Subject key identifier: 8E:F4:60:37:88:13:05:90:B0:41:6B:D3:EE:C5:36:D9:F9:D6:BC:BC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 01A0E8DCB7F92D4D621B7C4FDF5C188AAC55
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/jvRgN4gTBZCwQWvT7sU22fnWvLw.roa
Signing time: Mon 28 Sep 2026 16:32:54 +0000
ROA not before: Mon 28 Sep 2026 16:32:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43588
IP address blocks: 31.131.0.0/22 maxlen: 24
31.131.1.0/24 maxlen: 24
31.131.2.0/24 maxlen: 24
31.131.3.0/24 maxlen: 24
31.131.4.0/23 maxlen: 23
31.131.4.0/24 maxlen: 24
31.131.5.0/24 maxlen: 24
31.131.6.0/24 maxlen: 24
31.131.7.0/24 maxlen: 24
91.216.47.0/24 maxlen: 24
91.228.108.0/22 maxlen: 24
91.228.108.0/24 maxlen: 24
91.228.110.0/24 maxlen: 24
91.228.111.0/24 maxlen: 24
2a0a:6480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:dc:b7:f9:2d:4d:62:1b:7c:4f:df:5c:18:8a:ac:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Sep 28 16:32:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ef4603788130590b0416bd3eec536d9f9d6bcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:24:59:2e:d0:19:e8:78:23:78:8f:31:8c:ea:
78:d1:37:d8:1a:a6:09:79:76:34:db:14:e2:4c:92:
33:30:ca:e7:f8:88:36:24:d8:05:5d:f1:fd:45:9f:
04:0a:45:c1:09:8a:72:74:fb:29:07:16:f1:f5:70:
2a:9a:c2:ff:78:7e:14:d3:35:8b:bc:b9:17:b0:06:
db:3f:3e:65:db:5d:a1:5b:84:b4:d1:83:4c:c4:b2:
5c:96:21:f7:73:77:0b:7c:43:e0:7a:2f:bb:64:d3:
19:b5:2b:b1:b8:4c:15:ae:5f:96:bc:35:f5:4a:f1:
ba:50:5a:41:0b:89:ec:df:fb:7f:52:08:ac:dd:0a:
b8:65:ee:c3:3e:a5:b6:a0:71:c8:19:e7:9f:7a:3e:
83:4c:d8:92:98:60:e2:f2:97:65:72:69:0f:c9:86:
4b:01:bd:de:62:b4:d4:80:3e:44:17:d4:8a:1a:60:
9b:c1:1f:c1:e5:dc:06:ff:c5:58:18:10:6a:05:cb:
08:8d:54:9a:9d:93:e4:c2:e5:17:6b:e3:15:c7:81:
1c:ae:72:a4:6d:95:96:e6:59:83:59:1a:fe:5a:e5:
74:1e:6f:75:c4:d0:a7:f2:29:07:99:fe:48:b0:9b:
93:99:d0:83:3a:f4:7f:b7:3a:73:c1:02:e3:e8:ff:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F4:60:37:88:13:05:90:B0:41:6B:D3:EE:C5:36:D9:F9:D6:BC:BC
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/jvRgN4gTBZCwQWvT7sU22fnWvLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.0.0/21
91.216.47.0/24
91.228.108.0/22
IPv6:
2a0a:6480::/29
Signature Algorithm: sha256WithRSAEncryption
40:29:57:c1:f1:0e:a3:0f:94:b1:a3:d5:03:17:60:0e:55:1b:
8d:a1:8e:12:f1:64:4e:dc:e9:22:05:36:c0:60:5a:f8:7c:45:
cf:55:99:f6:9f:cc:3f:58:d9:45:6a:92:af:49:91:84:66:dc:
30:3e:a4:fd:61:6a:47:0f:1c:bd:76:bc:3d:fa:3b:09:b8:ad:
5e:84:52:fd:fb:d6:8e:8d:d7:55:b6:3c:54:6b:f7:9b:68:89:
99:ef:c2:ff:89:29:f2:bc:7d:bc:f2:d0:6a:ce:13:55:f6:0b:
34:b7:51:d0:4d:ed:b4:4e:2a:d6:7e:ab:5f:84:5d:ce:a3:12:
75:1b:05:09:41:be:ad:67:96:ac:83:f9:d4:b3:77:4f:80:d3:
c1:52:a3:7b:68:9a:ed:96:68:1d:c1:86:80:18:41:d3:d6:52:
f2:5f:d0:e4:58:62:0a:5e:37:93:6c:a0:4e:25:cd:4d:1a:b3:
6d:11:5e:e3:37:06:f9:d8:9e:88:43:d7:7d:af:e7:33:ab:b4:
45:f5:14:69:a2:f1:08:62:82:f3:d4:2c:24:3c:a4:da:b2:9e:
b6:5d:8a:3e:6e:50:90:40:db:1c:17:dc:7a:4b:50:be:2b:2f:
3b:1f:42:08:80:9e:b4:f1:9b:39:fa:ff:95:9f:62:08:56:45:
f3:a2:3b:60
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAaDo3Lf5LU1iG3xP31wYiqxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGNlYmY3ZWVjM2Q1ZTAxMjFlNDAxMTcwY2UwMWZmMzg4
OGQ0ZWMwHhcNMjYwOTI4MTYzMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWY0NjAzNzg4MTMwNTkwYjA0MTZiZDNlZWM1MzZkOWY5ZDZiY2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iRZLtAZ6HgjeI8xjOp40TfYGqYJ
eXY02xTiTJIzMMrn+Ig2JNgFXfH9RZ8ECkXBCYpydPspBxbx9XAqmsL/eH4U0zWL
vLkXsAbbPz5l212hW4S00YNMxLJcliH3c3cLfEPgei+7ZNMZtSuxuEwVrl+WvDX1
SvG6UFpBC4ns3/t/Ugis3Qq4Ze7DPqW2oHHIGeefej6DTNiSmGDi8pdlcmkPyYZL
Ab3eYrTUgD5EF9SKGmCbwR/B5dwG/8VYGBBqBcsIjVSanZPkwuUXa+MVx4EcrnKk
bZWW5lmDWRr+WuV0Hm91xNCn8ikHmf5IsJuTmdCDOvR/tzpzwQLj6P9cFwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFI70YDeIEwWQsEFr0+7FNtn51ry8MB8GA1UdIwQY
MBaAFGeM6/fuw9XgEh5AEXDOAf84iNTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWIt
NmRmYmJhNGVkZDU5LzEvanZSZ040Z1RCWkN3UVd2VDdzVTIyZm5Xdkx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWItNmRmYmJhNGVkZDU5
LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDH4MAAwQA
W9gvAwQCW+RsMA0EAgACMAcDBQMqCmSAMA0GCSqGSIb3DQEBCwUAA4IBAQBAKVfB
8Q6jD5Sxo9UDF2AOVRuNoY4S8WRO3OkiBTbAYFr4fEXPVZn2n8w/WNlFapKvSZGE
ZtwwPqT9YWpHDxy9drw9+jsJuK1ehFL9+9aOjddVtjxUa/ebaImZ78L/iSnyvH28
8tBqzhNV9gs0t1HQTe20TirWfqtfhF3OoxJ1GwUJQb6tZ5asg/nUs3dPgNPBUqN7
aJrtlmgdwYaAGEHT1lLyX9DkWGIKXjeTbKBOJc1NGrNtEV7jNwb52J6IQ9d9r+cz
q7RF9RRpovEIYoLz1CwkPKTasp62XYo+blCQQNscF9x6S1C+Ky87H0IIgJ608Zs5
+v+Vn2IIVkXzojtg
-----END CERTIFICATE-----
Generated at Thu Oct 29 22:52:32 2026 by rpki-client