Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1FZG6wB87qloa1UbjayKMtrq8-A.roa
File: 1FZG6wB87qloa1UbjayKMtrq8-A.roa (raw, json)
Hash identifier: quaCh4MjQgJ28N6zhE6aOSaSzuiG0zl0jXtQZOOkACY=
Subject key identifier: D4:56:46:EB:00:7C:EE:A9:68:6B:55:1B:8D:AC:8A:32:DA:EA:F3:E0
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A03992AA21370A368C68BD9C3745B53568
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1FZG6wB87qloa1UbjayKMtrq8-A.roa
Signing time: Tue 25 Aug 2026 15:38:28 +0000
ROA not before: Tue 25 Aug 2026 15:38:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215245
IP address blocks: 31.22.77.0/24 maxlen: 24
2a0c:2507::/32 maxlen: 48
2a14:6782::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:92:aa:21:37:0a:36:8c:68:bd:9c:37:45:b5:35:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Aug 25 15:38:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d45646eb007ceea9686b551b8dac8a32daeaf3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:81:41:1b:ee:f1:c0:d3:c5:6f:38:38:bf:
05:a6:e5:2e:1e:d4:a3:43:48:df:8e:26:42:53:28:
af:58:fa:d7:bf:31:3d:c0:0f:24:51:da:32:f8:41:
fa:fc:40:e6:6e:dc:18:ae:4e:35:dd:08:cc:14:da:
a9:b9:33:1d:27:6e:66:52:0e:ef:59:c1:59:f0:74:
2f:2a:19:be:ce:12:a3:83:0b:d0:3d:a5:e5:ab:0a:
f9:20:a9:73:87:ab:6f:15:39:b3:ef:d8:1f:36:41:
e7:09:f8:e5:f9:c6:89:2d:4c:9b:0a:b6:e1:13:56:
e4:28:69:c3:3b:04:10:66:3d:e8:23:c4:2b:43:72:
2c:60:69:13:e8:cf:93:7f:66:01:98:5e:eb:df:af:
1f:71:40:68:a4:d8:6a:32:7a:62:ea:73:52:c2:88:
fb:b9:c5:ca:b1:2e:d7:9f:fc:87:06:2a:16:0b:98:
87:ee:7e:5c:84:3c:01:cd:24:d0:54:31:f6:3e:e2:
9a:a4:10:7d:3c:c1:40:30:b9:07:ff:d7:0a:f2:3f:
aa:a7:a2:60:94:a7:5c:c4:7a:85:bc:95:85:e0:ce:
93:f7:da:84:ea:40:4c:25:8c:47:a3:36:9e:7d:e5:
b6:2c:52:2f:65:66:6f:d7:cd:e1:c2:74:0f:fe:e3:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:56:46:EB:00:7C:EE:A9:68:6B:55:1B:8D:AC:8A:32:DA:EA:F3:E0
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1FZG6wB87qloa1UbjayKMtrq8-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.77.0/24
IPv6:
2a0c:2507::/32
2a14:6782::/48
Signature Algorithm: sha256WithRSAEncryption
2d:d8:1d:0a:0c:55:a7:48:cd:70:02:5d:17:97:ba:3b:1f:b8:
fb:d3:f8:89:5a:2a:20:cf:67:8c:8e:1d:e0:cb:d6:ed:2c:1f:
e3:7d:eb:4d:1e:2f:08:19:e9:f0:06:7b:6b:5b:7b:34:34:62:
05:c1:6e:37:aa:06:d1:5e:0a:b9:10:18:16:ac:17:ac:ec:7f:
02:54:af:1c:d1:40:ef:d2:39:7a:eb:de:5e:46:db:28:53:72:
91:d4:01:ab:36:db:13:c8:f4:37:fc:f3:4a:34:08:a5:a5:3b:
e3:22:a6:db:1d:7d:bb:30:ef:e9:94:8c:b6:b6:9f:17:53:3c:
b6:98:8d:b4:f2:c5:d9:15:23:37:bf:14:7a:ce:4c:bd:09:ca:
cd:71:2b:10:c8:dd:4a:4c:90:f0:2c:e1:07:34:28:af:af:36:
86:f2:08:2c:8d:59:9b:76:e4:20:8c:5d:f9:c0:57:f1:dd:da:
03:3d:45:f9:4a:f8:ad:7f:4c:94:9b:eb:da:66:e6:ce:c3:37:
5d:03:88:68:2d:1a:65:a9:8b:b2:59:bd:66:04:62:a4:e2:ba:
0d:1a:21:e2:02:45:66:d7:81:b6:46:29:1e:ce:17:cf:09:79:
fd:4f:0a:2c:cf:8e:f0:01:ce:25:c1:9c:70:8f:d4:70:e8:e8:
bc:14:d0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:25 2026 by rpki-client