Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/t5_702xyV_7qxne4bH7eNjIoccQ.roa
File: t5_702xyV_7qxne4bH7eNjIoccQ.roa (raw, json)
Hash identifier: F5N7YR3TqHBIA6zejWhtecVAaohBe6XgS7qV0q4JyA4=
Subject key identifier: B7:9F:FB:D3:6C:72:57:FE:EA:C6:77:B8:6C:7E:DE:36:32:28:71:C4
Certificate issuer: /CN=069336b9f4da7c16de41e0b1990f2d53199e66a1
Certificate serial: 019FB77F0F93E71AB18E7E8182E9A3308F6A
Authority key identifier: 06:93:36:B9:F4:DA:7C:16:DE:41:E0:B1:99:0F:2D:53:19:9E:66:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpM2ufTafBbeQeCxmQ8tUxmeZqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/t5_702xyV_7qxne4bH7eNjIoccQ.roa
Signing time: Fri 31 Jul 2026 09:26:25 +0000
ROA not before: Fri 31 Jul 2026 09:26:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219102
IP address blocks: 31.43.166.0/23 maxlen: 23
2a0b:8480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/BpM2ufTafBbeQeCxmQ8tUxmeZqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/BpM2ufTafBbeQeCxmQ8tUxmeZqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpM2ufTafBbeQeCxmQ8tUxmeZqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:7f:0f:93:e7:1a:b1:8e:7e:81:82:e9:a3:30:8f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=069336b9f4da7c16de41e0b1990f2d53199e66a1
Validity
Not Before: Jul 31 09:26:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b79ffbd36c7257feeac677b86c7ede36322871c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4e:07:f0:f8:34:2c:f2:d5:0c:2e:1a:57:98:
f4:7e:5a:6a:cc:58:ac:bc:00:57:8b:ce:cd:49:42:
1b:1f:5d:41:51:58:91:b6:df:12:a1:81:a3:d8:f9:
4b:11:89:b1:76:02:dd:3c:96:ce:c2:e2:f1:73:6b:
80:60:48:0d:bf:52:43:2b:b4:3b:ba:fc:26:45:84:
21:a7:f6:16:24:28:45:b9:db:83:2d:3b:f9:08:1d:
d1:6f:98:fb:9e:3d:ba:e0:19:09:85:7f:5a:28:fe:
4f:e3:23:02:c6:17:f6:a0:f7:1a:e1:fc:89:9b:fe:
73:f9:fb:f1:73:5e:7f:24:ca:b8:a9:23:5f:95:1f:
0a:9c:3b:e7:94:44:f5:70:72:72:77:df:67:19:15:
80:89:f3:af:d4:98:41:f6:4c:95:5d:51:19:86:00:
d8:4c:6a:4f:c1:78:47:f8:a9:21:64:a5:95:bb:fc:
af:f7:26:6c:51:09:d7:8e:e2:dd:60:00:99:df:a5:
eb:04:69:a6:3e:e1:e4:de:72:ef:e2:08:2e:19:29:
0d:f1:e1:eb:44:c4:6b:9d:06:91:11:f9:1b:b1:6d:
b0:fc:e6:90:b2:ce:37:b6:a4:5a:31:44:32:21:a9:
18:da:7a:69:4d:53:c3:27:0e:9a:7d:ea:fe:c7:be:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9F:FB:D3:6C:72:57:FE:EA:C6:77:B8:6C:7E:DE:36:32:28:71:C4
X509v3 Authority Key Identifier:
keyid:06:93:36:B9:F4:DA:7C:16:DE:41:E0:B1:99:0F:2D:53:19:9E:66:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpM2ufTafBbeQeCxmQ8tUxmeZqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/t5_702xyV_7qxne4bH7eNjIoccQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/BpM2ufTafBbeQeCxmQ8tUxmeZqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.166.0/23
IPv6:
2a0b:8480::/29
Signature Algorithm: sha256WithRSAEncryption
09:74:f3:91:49:e6:30:90:cd:b4:69:73:e2:b7:89:c9:6d:07:
7e:c3:e9:0d:ff:45:b4:a9:71:fa:b8:11:c8:d8:e2:e8:39:2b:
7c:70:6e:fd:f2:4b:df:1a:50:25:58:51:d6:07:fa:35:d0:09:
62:81:03:6c:dd:30:dc:d2:21:f9:06:80:81:5a:ba:a7:93:32:
f8:26:32:9e:d0:e1:fe:46:2d:0b:cc:67:16:c5:93:c2:f7:f5:
94:dc:84:30:fd:6a:73:8e:fe:3b:5f:65:07:18:9c:24:6a:2d:
0e:fe:c3:2a:b4:67:e1:fe:be:28:12:ce:65:6a:16:c5:bc:ab:
e4:bc:61:2e:f8:4d:65:e9:b8:e2:cc:f6:75:fe:ce:20:ed:05:
c2:20:ad:12:bf:0c:e2:11:fe:cd:bb:ea:14:e0:f5:cd:be:2d:
65:5b:50:80:b9:32:13:1c:28:d0:2a:de:e7:b6:79:5b:d2:e8:
31:14:74:71:df:9f:71:26:ed:29:5b:09:9e:47:5c:b1:35:71:
27:07:83:b4:df:4f:8a:a8:13:74:32:da:74:28:3e:90:fc:5f:
61:92:66:29:7e:3b:05:03:01:57:4a:a1:2c:c9:fd:3c:db:2a:
b4:2a:d4:9e:6a:d0:7b:7b:ae:9f:68:25:33:d3:dd:bc:f2:20:
39:86:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:26:49 2026 by rpki-client