Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa
File: FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa (raw, json)
Hash identifier: tg987J0i644Z+rDUbSmguymeU+9jrpbhpfN7TJ7twhQ=
Subject key identifier: 16:33:75:86:A2:A6:65:4B:02:E0:C8:3B:68:F0:6B:FD:02:D5:48:E3
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019F944D305C102A91765073ED2EE3C6A6E6
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa
Signing time: Fri 24 Jul 2026 13:25:14 +0000
ROA not before: Fri 24 Jul 2026 13:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10557
IP address blocks: 31.13.214.0/24 maxlen: 24
37.60.142.0/24 maxlen: 24
37.61.225.0/24 maxlen: 24
37.61.230.0/24 maxlen: 24
87.120.58.0/24 maxlen: 24
87.120.62.0/24 maxlen: 24
87.120.247.0/24 maxlen: 24
87.121.102.0/24 maxlen: 24
93.123.25.0/24 maxlen: 24
93.123.111.0/24 maxlen: 24
94.156.40.0/23 maxlen: 23
94.156.43.0/24 maxlen: 24
94.156.62.0/23 maxlen: 23
94.156.132.0/23 maxlen: 23
94.156.145.0/24 maxlen: 24
94.156.224.0/23 maxlen: 23
158.120.252.0/23 maxlen: 23
188.212.110.0/24 maxlen: 24
192.175.2.0/24 maxlen: 24
198.160.152.0/24 maxlen: 24
203.17.237.0/24 maxlen: 24
203.25.139.0/24 maxlen: 24
203.78.161.0/24 maxlen: 24
203.78.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:4d:30:5c:10:2a:91:76:50:73:ed:2e:e3:c6:a6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jul 24 13:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16337586a2a6654b02e0c83b68f06bfd02d548e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:af:c4:1f:87:33:45:fa:4b:c6:6c:cb:58:
28:f1:82:f1:3e:d3:27:81:66:b6:51:0e:e9:10:16:
c7:e7:ba:1f:68:d5:0e:5f:5f:18:14:30:45:bf:11:
ef:07:c7:21:1b:12:63:3c:ba:0d:bb:61:c9:a2:10:
47:1e:a0:67:8e:8f:02:72:0c:1b:4a:f2:84:67:76:
e7:b8:28:16:15:35:47:a4:ad:9d:1b:c8:0f:9b:4f:
22:ac:d8:b1:98:84:69:20:01:70:53:b8:70:4a:82:
cd:e6:bb:9f:23:31:06:6e:3a:72:dd:4b:69:ab:23:
b1:6c:44:61:48:68:c0:60:c7:e1:55:40:49:23:ea:
81:cc:60:16:ba:bf:4e:a9:f1:e7:67:3b:b7:15:f1:
ce:1f:89:20:ae:0c:47:06:bd:0c:1b:98:39:3d:44:
0d:06:84:5a:7e:37:a2:51:8a:b1:9b:68:de:29:68:
ca:43:fb:e1:ad:7a:fd:d3:b5:b1:c9:c5:b8:46:e2:
46:cd:8e:32:7f:e8:0c:ed:db:46:54:07:4a:c9:7a:
00:e3:0e:ad:49:77:ce:07:52:74:e3:ba:13:13:d2:
94:42:2d:e6:6b:aa:46:83:a6:5b:07:e8:98:aa:e8:
03:ed:40:54:77:ee:fc:95:71:2d:03:1a:a2:df:80:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:33:75:86:A2:A6:65:4B:02:E0:C8:3B:68:F0:6B:FD:02:D5:48:E3
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.214.0/24
37.60.142.0/24
37.61.225.0/24
37.61.230.0/24
87.120.58.0/24
87.120.62.0/24
87.120.247.0/24
87.121.102.0/24
93.123.25.0/24
93.123.111.0/24
94.156.40.0/23
94.156.43.0/24
94.156.62.0/23
94.156.132.0/23
94.156.145.0/24
94.156.224.0/23
158.120.252.0/23
188.212.110.0/24
192.175.2.0/24
198.160.152.0/24
203.17.237.0/24
203.25.139.0/24
203.78.161.0/24
203.78.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:35:3b:b6:aa:09:45:65:3e:5b:93:08:a7:4c:8e:ae:fe:76:
a2:66:cc:3f:71:6e:f1:0e:24:bc:00:d5:54:c7:16:ec:41:3f:
3e:99:57:47:7d:a7:1a:6d:cc:47:34:96:de:25:e0:fd:94:01:
3e:c5:f1:ad:56:50:ce:57:79:70:af:a9:2c:45:ce:72:38:87:
17:83:ce:46:a4:7e:d3:3c:81:2b:d8:d3:72:ec:4f:00:ae:c0:
df:a4:a5:1e:fb:43:af:87:59:26:fe:df:cd:87:af:5d:24:d0:
c3:ba:c0:04:07:d9:01:9c:e4:94:8b:1a:a9:ce:54:bd:fd:cb:
da:b9:91:c9:d5:04:b2:ea:6b:e3:50:c9:15:49:f6:44:c6:e8:
70:9b:24:72:0c:8e:2d:d8:51:f2:a8:d1:90:4c:1d:61:8e:1d:
c1:b3:d4:ce:ca:0e:15:ba:c9:8e:94:2e:b3:f8:9d:45:91:71:
a4:98:e6:a4:e3:37:8f:70:c4:65:69:1b:e2:59:4d:cf:ef:e5:
7f:5c:1a:3b:ec:c7:fb:cc:b7:e0:36:98:bb:35:6a:10:35:8e:
52:7c:78:51:df:05:f2:af:16:19:1e:d4:18:4d:97:6f:06:6d:
38:14:78:48:ff:3c:3c:d3:a9:55:6f:7f:15:8d:e4:75:9b:73:
ca:66:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:33:04 2026 by rpki-client