Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/S7aozI9FvqzyVV9qPBI0-pBgja0.roa
File: S7aozI9FvqzyVV9qPBI0-pBgja0.roa (raw, json)
Hash identifier: RZcrxAGTaObIV2NJYPIxgsFk5KxFbecqZdjcxq2F6wI=
Subject key identifier: 4B:B6:A8:CC:8F:45:BE:AC:F2:55:5F:6A:3C:12:34:FA:90:60:8D:AD
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A1072F6C75B7C104698ACF9D6C9F9215FA
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/S7aozI9FvqzyVV9qPBI0-pBgja0.roa
Signing time: Sun 04 Oct 2026 13:51:50 +0000
ROA not before: Sun 04 Oct 2026 13:51:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51202
IP address blocks: 31.22.72.0/24 maxlen: 24
31.22.75.0/24 maxlen: 24
31.25.11.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
84.252.120.0/24 maxlen: 24
84.252.121.0/24 maxlen: 24
84.252.122.0/24 maxlen: 24
84.252.123.0/24 maxlen: 24
89.36.32.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
95.175.150.0/24 maxlen: 24
109.175.211.0/24 maxlen: 24
185.121.132.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
185.230.161.0/24 maxlen: 24
185.230.162.0/24 maxlen: 24
185.230.163.0/24 maxlen: 24
192.40.69.0/24 maxlen: 24
194.117.225.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
2a09:6301::/32 maxlen: 32
2a0c:2500::/29 maxlen: 48
2a0c:2500::/32 maxlen: 48
2a0c:2501::/32 maxlen: 48
2a0c:2502::/32 maxlen: 48
2a0c:2503::/32 maxlen: 48
2a14:6781::/32 maxlen: 48
2a14:6781:305::/48 maxlen: 48
2a14:6782:1::/48 maxlen: 48
2a14:6782:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:2f:6c:75:b7:c1:04:69:8a:cf:9d:6c:9f:92:15:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Oct 4 13:51:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bb6a8cc8f45beacf2555f6a3c1234fa90608dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:db:04:7f:66:84:f5:4c:e8:00:32:19:f7:15:
80:ab:b7:69:5b:06:6b:f0:e5:6a:17:98:b9:de:f5:
3a:2b:e9:d1:65:40:ee:df:db:0f:74:60:20:06:cd:
e9:f2:3e:11:b8:e7:37:b4:d9:47:f2:89:9d:55:14:
2a:39:68:bb:6b:3d:0a:32:dd:eb:f0:73:db:d4:93:
1a:2b:23:31:8b:42:f3:db:63:db:c3:3a:bd:b1:05:
e3:ab:8d:86:b4:33:14:3d:6e:eb:08:2b:91:8b:98:
8c:80:d4:c7:8b:bb:b7:9f:48:de:79:a1:b4:24:dd:
5e:c9:26:78:2c:70:a3:93:dc:97:a9:b7:af:6f:9f:
55:05:fe:4c:37:27:8a:02:6e:6d:84:2b:11:0c:e1:
15:db:96:9c:b3:97:fd:62:09:af:45:02:c7:5f:ec:
33:74:1b:ac:1a:92:dd:da:92:bd:43:40:89:1b:3f:
34:83:4a:36:c1:74:b9:1a:8b:df:db:77:4a:32:a7:
bc:a2:4d:36:bb:6d:5e:bd:ee:3e:b7:f9:d2:0d:44:
64:d3:2b:fc:15:3b:b1:2b:51:e6:68:c3:2b:e9:0f:
18:b7:53:bc:7b:6f:16:11:e4:f7:07:e0:90:79:3a:
a0:e7:77:a4:e3:0f:d4:1f:8f:4b:44:dc:b2:0a:65:
85:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B6:A8:CC:8F:45:BE:AC:F2:55:5F:6A:3C:12:34:FA:90:60:8D:AD
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/S7aozI9FvqzyVV9qPBI0-pBgja0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.72.0/24
31.22.75.0/24
31.25.11.0/24
62.169.152.0/24
84.252.120.0/22
89.36.32.0/24
89.36.35.0/24
95.175.150.0/24
109.175.211.0/24
185.121.132.0/23
185.121.135.0/24
185.144.70.0/23
185.230.161.0-185.230.163.255
192.40.69.0/24
194.117.225.0/24
212.232.18.0/23
IPv6:
2a09:6301::/32
2a0c:2500::/29
2a14:6781::/32
2a14:6782:1::/48
2a14:6782:3::/48
Signature Algorithm: sha256WithRSAEncryption
2e:06:ac:6d:57:3c:ef:af:e0:e8:2e:7d:90:de:df:72:03:0f:
bd:4f:03:82:49:3d:da:72:eb:8b:90:40:33:12:5f:58:b8:1b:
50:35:dc:f3:53:e1:d8:1c:6f:92:be:ff:f0:ef:c5:4e:9b:51:
cb:62:57:aa:60:ef:fb:af:e3:bd:60:8b:74:f1:a2:34:bc:91:
22:b3:37:25:58:f2:7b:ac:17:1f:f0:02:60:b5:21:52:24:b7:
b5:30:b1:e6:cc:e1:5d:32:74:9e:fc:d1:66:54:c7:f4:df:82:
6a:ee:3c:0e:bd:52:18:46:e1:7e:f9:26:66:df:8e:83:b2:6d:
6f:35:44:7e:40:dd:00:85:5b:95:23:20:a6:50:4c:81:4d:67:
4b:a0:63:05:7d:99:8b:db:0d:33:7d:54:be:fe:53:1e:62:46:
88:6c:39:1c:a6:3d:11:da:69:10:61:cf:ce:df:f9:96:38:db:
94:e5:1f:d9:1f:6b:05:07:6c:8c:18:f9:48:7a:26:93:6a:d5:
a5:64:f6:84:4a:a0:8a:44:c8:1b:25:4f:44:08:48:76:cc:bd:
8e:4e:0e:39:04:8a:89:0e:c4:54:ae:98:32:a3:c4:22:28:fb:
8c:7d:88:da:d3:9c:3a:7c:b7:bb:73:b4:16:f8:0a:36:30:29:
1b:9f:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 06:18:27 2026 by rpki-client