Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/T8Dbsh4zVrcDCWYdie_KKcz5lhY.roa
File: T8Dbsh4zVrcDCWYdie_KKcz5lhY.roa (raw, json)
Hash identifier: vcaKh14UhiubGPoD7LFzTkYgKRP/XyUztgI2DoRz8eg=
Subject key identifier: 4F:C0:DB:B2:1E:33:56:B7:03:09:66:1D:89:EF:CA:29:CC:F9:96:16
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 019FB7BCDC7B8EFCF405CF298A82B8ADAF1E
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/T8Dbsh4zVrcDCWYdie_KKcz5lhY.roa
Signing time: Fri 31 Jul 2026 10:33:55 +0000
ROA not before: Fri 31 Jul 2026 10:33:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41421
IP address blocks: 31.214.137.0/24 maxlen: 24
31.214.138.0/24 maxlen: 24
31.214.140.0/24 maxlen: 24
31.214.145.0/24 maxlen: 24
37.157.200.0/21 maxlen: 21
86.106.22.0/24 maxlen: 24
89.33.167.0/24 maxlen: 24
89.35.60.0/23 maxlen: 23
89.250.192.0/20 maxlen: 20
91.132.112.0/23 maxlen: 23
93.115.39.0/24 maxlen: 24
103.248.24.0/24 maxlen: 24
159.253.240.0/21 maxlen: 21
185.53.132.0/22 maxlen: 24
185.104.155.0/24 maxlen: 24
185.128.156.0/22 maxlen: 22
185.170.65.0/24 maxlen: 24
185.194.212.0/22 maxlen: 24
188.65.40.0/21 maxlen: 21
193.91.4.0/24 maxlen: 24
193.91.12.0/23 maxlen: 23
194.5.180.0/24 maxlen: 24
2a01:b8e0::/32 maxlen: 32
2a02:4c80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:bc:dc:7b:8e:fc:f4:05:cf:29:8a:82:b8:ad:af:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Jul 31 10:33:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fc0dbb21e3356b70309661d89efca29ccf99616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:af:99:93:25:52:6f:1f:89:c5:21:46:a3:
99:07:b4:d9:a9:5d:2d:7f:19:ff:6c:8c:85:da:bf:
8b:70:39:a5:6d:f7:24:b3:db:f0:2d:6d:07:ae:1c:
9e:e2:6f:57:c6:1e:1e:c4:29:27:85:d3:a5:e9:61:
2d:04:e9:ab:95:33:0b:05:d6:c3:17:b1:8e:6d:1a:
c5:a2:25:48:cc:b8:9f:bf:39:bd:84:72:2e:27:79:
a4:14:8c:b4:62:9c:3f:3f:65:df:c5:82:61:6c:2f:
53:3f:8e:43:9d:7b:28:60:f8:67:27:6e:d5:f4:d4:
b4:ed:f1:21:56:32:8c:1a:59:a4:8a:00:0c:7e:e9:
4b:dd:56:92:95:ea:c5:b4:c9:a1:be:36:69:d7:6e:
4c:34:1c:16:78:e2:f3:2f:10:c8:34:fb:fb:9f:48:
00:27:c5:e5:94:39:9c:4f:10:85:d7:4f:1b:c7:29:
4e:65:d3:cc:04:d4:98:78:e5:bc:55:5b:21:89:0a:
f5:08:a1:5d:e2:c2:e2:24:c9:a4:ad:90:cf:b0:a4:
18:7e:54:18:c7:5d:41:26:16:6a:31:77:69:bc:9f:
e6:0b:b8:70:38:57:7a:48:4d:cc:35:c2:f4:a1:84:
4f:56:44:c9:73:90:37:4f:a7:90:9d:b2:d6:31:85:
c8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C0:DB:B2:1E:33:56:B7:03:09:66:1D:89:EF:CA:29:CC:F9:96:16
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/T8Dbsh4zVrcDCWYdie_KKcz5lhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.137.0-31.214.138.255
31.214.140.0/24
31.214.145.0/24
37.157.200.0/21
86.106.22.0/24
89.33.167.0/24
89.35.60.0/23
89.250.192.0/20
91.132.112.0/23
93.115.39.0/24
103.248.24.0/24
159.253.240.0/21
185.53.132.0/22
185.104.155.0/24
185.128.156.0/22
185.170.65.0/24
185.194.212.0/22
188.65.40.0/21
193.91.4.0/24
193.91.12.0/23
194.5.180.0/24
IPv6:
2a01:b8e0::/32
2a02:4c80::/32
Signature Algorithm: sha256WithRSAEncryption
3d:ec:74:e4:d6:20:9c:2b:5c:50:ce:4d:1a:ec:31:1e:0c:da:
58:4c:41:ff:78:4b:3b:f3:51:0b:e5:54:57:1a:0d:00:a8:7d:
9e:56:b7:5e:86:05:c9:a0:4e:2a:c4:64:b7:3c:38:b7:8b:65:
e0:2c:0c:2d:eb:60:85:b7:e8:08:5b:64:c4:4f:f2:71:c4:dc:
50:32:bb:f3:23:38:79:fe:b5:78:33:6a:ae:18:bf:9d:d2:4e:
6b:30:74:a8:0d:a0:21:39:1b:ad:41:88:a6:48:ce:42:94:92:
19:ab:01:33:d9:d1:0d:0c:d5:d2:bf:db:64:d2:7d:ac:03:95:
01:e4:e7:9d:67:66:82:8b:17:9e:f4:58:aa:d6:e2:81:a4:bd:
d0:b0:d7:08:b0:07:d9:0c:d9:4d:db:8c:82:c5:a6:e5:cf:4f:
ac:02:32:e2:0f:d3:3b:d7:a5:bf:4e:28:27:be:61:66:a2:5f:
34:5b:e6:28:38:fd:e4:30:27:b9:f3:f8:02:45:0c:9b:dd:d1:
6a:fc:f7:c8:47:87:08:8d:b6:55:43:dc:22:2f:d7:d1:8a:55:
87:66:f2:b8:85:84:c9:c7:a7:69:17:43:fa:30:69:22:b4:d5:
94:79:63:0b:16:c2:25:7e:7b:06:68:3c:3f:60:f5:1b:1a:88:
ee:5c:2b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:30 2026 by rpki-client