Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RdqX9JNU1Hi6DRQ-j7jhXirVO6w.roa
File: RdqX9JNU1Hi6DRQ-j7jhXirVO6w.roa (raw, json)
Hash identifier: xXwfxxI3uOSvli3IA8YbSe8JqVZuu4BC28Bn/K297hQ=
Subject key identifier: 45:DA:97:F4:93:54:D4:78:BA:0D:14:3E:8F:B8:E1:5E:2A:D5:3B:AC
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019ED6EBF60CD0C13B69E7E51E063DF0DB82
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RdqX9JNU1Hi6DRQ-j7jhXirVO6w.roa
Signing time: Wed 17 Jun 2026 18:50:48 +0000
ROA not before: Wed 17 Jun 2026 18:50:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 31.41.251.0/24 maxlen: 24
31.41.252.0/24 maxlen: 24
31.41.254.0/24 maxlen: 24
37.72.128.0/24 maxlen: 24
45.87.126.0/24 maxlen: 24
45.95.29.0/24 maxlen: 24
45.128.125.0/24 maxlen: 24
45.128.126.0/24 maxlen: 24
45.128.127.0/24 maxlen: 24
45.128.128.0/24 maxlen: 24
45.151.29.0/24 maxlen: 24
46.174.196.0/24 maxlen: 24
83.138.54.0/24 maxlen: 24
88.151.8.0/24 maxlen: 24
91.212.103.0/24 maxlen: 24
94.154.190.0/24 maxlen: 24
176.116.15.0/24 maxlen: 24
176.126.96.0/24 maxlen: 24
193.28.178.0/24 maxlen: 24
193.187.105.0/24 maxlen: 24
193.201.10.0/24 maxlen: 24
194.59.187.0/24 maxlen: 24
195.96.159.0/24 maxlen: 24
2a12:641::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:eb:f6:0c:d0:c1:3b:69:e7:e5:1e:06:3d:f0:db:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 17 18:50:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45da97f49354d478ba0d143e8fb8e15e2ad53bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:ac:0f:e4:33:94:7c:83:ed:b1:03:c3:b4:
df:8f:29:a1:b6:c8:4f:c0:9e:0f:ad:f3:ad:6e:a9:
b5:37:05:b0:f7:05:31:62:a8:c5:8d:d5:6c:89:34:
e6:9e:d5:15:62:02:86:a1:df:0c:66:28:29:ba:be:
b9:ec:d6:32:2e:82:6d:b5:0c:0b:03:00:bd:f6:8d:
f4:25:86:e1:cb:74:87:22:50:f7:5a:55:9e:65:31:
69:43:ec:c4:49:10:35:fa:3f:d3:19:53:50:90:cc:
40:07:8f:7d:c9:ca:0e:b5:b6:09:c2:8c:7e:c5:a0:
ae:8d:5f:f2:2d:58:e5:9a:46:ff:24:d4:d3:a8:ab:
9b:35:59:2b:04:e6:f3:b6:a5:b6:2b:66:54:84:ec:
da:51:77:03:c6:3f:59:ae:66:4c:93:d8:67:93:b6:
b7:72:fc:80:73:82:42:22:9a:b5:76:bb:da:cd:eb:
24:c7:f8:2a:1c:81:c6:9f:fc:3c:37:37:26:92:0e:
74:79:57:72:2f:eb:c3:76:7e:06:96:bc:12:36:bf:
12:e4:c2:ca:e9:22:4a:6f:15:4c:ec:17:3f:e9:8d:
3d:ab:85:67:41:ae:d8:7e:82:c1:e0:d4:ae:b4:84:
24:24:2b:57:3a:91:ac:9e:d8:3b:5e:cc:c7:b9:88:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DA:97:F4:93:54:D4:78:BA:0D:14:3E:8F:B8:E1:5E:2A:D5:3B:AC
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RdqX9JNU1Hi6DRQ-j7jhXirVO6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.251.0-31.41.252.255
31.41.254.0/24
37.72.128.0/24
45.87.126.0/24
45.95.29.0/24
45.128.125.0-45.128.128.255
45.151.29.0/24
46.174.196.0/24
83.138.54.0/24
88.151.8.0/24
91.212.103.0/24
94.154.190.0/24
176.116.15.0/24
176.126.96.0/24
193.28.178.0/24
193.187.105.0/24
193.201.10.0/24
194.59.187.0/24
195.96.159.0/24
IPv6:
2a12:641::/32
Signature Algorithm: sha256WithRSAEncryption
67:cf:0c:1a:ec:b3:9c:c5:08:b4:12:30:d0:e9:0d:eb:d4:50:
95:d9:ed:41:47:59:66:71:d4:9f:7f:77:db:c1:aa:db:f4:8c:
3c:01:78:03:fd:b1:f8:1d:2a:c3:b1:5c:c4:96:bd:30:cd:ba:
bd:d1:f1:13:46:51:75:ac:a0:58:2e:24:de:aa:70:b5:22:87:
7f:12:8d:b8:24:e6:c8:5f:35:da:5c:44:23:1e:95:cb:c8:cb:
f3:e2:f9:6a:20:11:ee:e5:95:8f:3c:bc:de:98:f5:88:aa:4c:
19:c3:88:33:bf:2d:07:3b:4b:f1:55:7e:ef:1e:2c:6b:3a:14:
ce:2e:62:47:e7:07:ce:20:e1:fc:fe:01:61:c3:e2:82:16:09:
43:d8:58:a8:0e:41:0a:31:c5:2b:8b:6f:9d:03:1e:f0:a2:a2:
70:4d:66:70:c3:6f:14:da:b5:da:23:18:b9:c0:dd:f6:3e:e8:
d2:9f:9d:97:e7:bd:01:04:b7:77:b9:0d:52:24:b0:dc:46:8c:
84:a6:3c:2c:d9:d4:92:a2:10:91:70:8b:f6:df:5f:22:2a:ae:
7f:ec:af:c1:16:fe:d2:7c:59:6f:fa:ae:ab:db:29:dd:39:f6:
d9:a6:5e:a9:32:2a:30:a3:d7:24:b1:17:18:3d:5b:70:4a:9e:
cf:ba:ff:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:33 2026 by rpki-client