Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ioIPqlyYIRFTUAUuK_fPzUyN5M8.roa
File: ioIPqlyYIRFTUAUuK_fPzUyN5M8.roa (raw, json)
Hash identifier: JDK495lHeG58enaxXydpuH+I6+GKuytJ5TbbvqsqSyc=
Subject key identifier: 8A:82:0F:AA:5C:98:21:11:53:50:05:2E:2B:F7:CF:CD:4C:8D:E4:CF
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A137AE97E6AC5D86393E15978F8F245537
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ioIPqlyYIRFTUAUuK_fPzUyN5M8.roa
Signing time: Tue 13 Oct 2026 23:52:31 +0000
ROA not before: Tue 13 Oct 2026 23:52:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 31.40.250.0/24 maxlen: 24
193.42.119.0/24 maxlen: 24
194.156.127.0/24 maxlen: 24
212.107.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:ae:97:e6:ac:5d:86:39:3e:15:97:8f:8f:24:55:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 13 23:52:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a820faa5c9821115350052e2bf7cfcd4c8de4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:84:d6:82:b1:be:4a:c0:77:22:66:9a:ff:
17:fc:8e:c2:34:96:85:be:ca:c4:3e:11:1a:89:d9:
44:da:d0:65:ee:e9:3a:9b:55:a4:9e:12:6f:9b:45:
c0:47:7c:2b:9f:9b:bc:0e:be:c7:08:28:a9:3c:7a:
ca:ec:f6:c7:94:4b:cf:e2:b0:2c:14:db:1e:c6:35:
b1:cf:f6:9b:16:c6:c7:7e:f7:1c:6f:90:d0:38:24:
a2:ff:f6:73:e8:69:c5:a0:4f:da:10:a1:b8:af:58:
a6:0c:f3:5d:5b:bb:f5:1e:6a:3c:7a:b6:19:a8:95:
e4:80:a5:80:63:3c:27:c7:d7:fd:55:32:b6:0a:73:
ce:41:c8:3a:0d:f7:60:aa:58:16:e5:72:ce:69:94:
5b:3e:11:2d:fc:84:e7:db:7a:96:5a:fa:0c:0a:76:
2b:f1:4b:3b:4b:60:a3:3d:e9:88:bd:5d:5d:09:e1:
8a:02:e2:c3:9a:f2:49:89:e7:d5:b0:60:3a:54:4c:
d4:db:83:bd:2e:99:3e:89:5e:cf:6a:87:ac:8f:6d:
52:4d:33:62:81:84:7a:e1:72:0c:59:84:37:9b:87:
8c:03:84:14:84:52:6e:4a:86:b4:a0:a2:d5:33:cf:
74:6c:71:8f:7d:d9:8a:bf:55:95:73:9d:aa:a3:61:
cc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:82:0F:AA:5C:98:21:11:53:50:05:2E:2B:F7:CF:CD:4C:8D:E4:CF
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ioIPqlyYIRFTUAUuK_fPzUyN5M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.250.0/24
193.42.119.0/24
194.156.127.0/24
212.107.26.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4c:1a:bb:39:00:cf:e6:66:a8:31:53:16:37:b0:9d:e3:3a:
99:b1:12:ee:38:3b:b3:c4:9d:1c:dc:5d:8c:77:a9:18:bf:42:
8c:b5:db:e9:46:67:03:21:12:ef:25:48:fd:5d:be:61:22:38:
4a:31:aa:85:77:79:51:bc:45:35:df:73:ef:26:e2:32:9d:13:
5a:25:43:00:68:f2:17:45:81:f2:95:cd:29:fc:d9:98:93:06:
81:95:2b:c1:78:f8:8a:4a:3e:43:a8:02:0f:18:c8:c0:3e:ab:
d0:66:fa:a9:24:18:4a:f8:7c:cc:21:5f:4b:0e:4c:6f:00:96:
4d:0f:9a:d8:e9:37:5c:d3:a7:18:f0:69:ef:4b:48:f4:07:7a:
ab:28:a0:cc:9b:72:33:99:9a:de:45:44:cf:a8:d2:6b:ae:9e:
fe:9f:ba:9c:51:60:e4:97:c5:8a:21:9f:34:37:46:43:86:57:
2b:48:7d:cb:bd:a6:45:a8:a1:85:83:5c:c5:36:b8:c3:0b:2e:
a1:98:be:16:09:94:95:45:ca:6b:ab:b4:1b:1c:89:36:49:0c:
56:89:46:09:fd:7f:8e:50:d8:b4:05:d7:fb:3d:d9:e9:c2:f3:
a4:9d:9d:08:5a:8b:e5:9b:26:19:24:a1:da:4e:f6:62:37:d7:
01:a4:30:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:19 2026 by rpki-client