Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/a5hCb5Cdai95FYR9YFoqO1Kg0gU.roa
File: a5hCb5Cdai95FYR9YFoqO1Kg0gU.roa (raw, json)
Hash identifier: kx49KQ5uWwvHf8W3SxasVESt8hk4w/HfpOwNe/XbefY=
Subject key identifier: 6B:98:42:6F:90:9D:6A:2F:79:15:84:7D:60:5A:2A:3B:52:A0:D2:05
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019C2DE2A0F75EA46F38ACC76AD7C589BDD7
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/a5hCb5Cdai95FYR9YFoqO1Kg0gU.roa
Signing time: Thu 05 Feb 2026 12:59:12 +0000
ROA not before: Thu 05 Feb 2026 12:59:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 31.133.84.0/22 maxlen: 24
176.103.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:e2:a0:f7:5e:a4:6f:38:ac:c7:6a:d7:c5:89:bd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Feb 5 12:59:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b98426f909d6a2f7915847d605a2a3b52a0d205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:a5:38:d2:2d:c6:fb:ed:cf:97:e2:7a:d8:
48:42:3c:aa:89:8c:c9:a0:f4:28:05:9c:28:cd:c5:
63:5e:cf:2d:eb:6b:63:e1:3c:2e:4d:09:a0:9e:08:
ff:2a:35:e4:0e:b5:36:5a:c7:b4:95:7c:99:44:05:
3b:6d:cb:cf:01:53:ee:34:5b:f5:78:00:3c:b7:64:
0b:2f:ad:76:34:eb:1a:2b:11:fd:03:50:7a:8d:cc:
a7:76:e2:de:74:cd:96:78:b8:42:55:54:83:55:5f:
c2:86:4c:b4:7c:81:48:1b:30:fa:44:35:19:31:67:
d4:65:2b:89:16:00:16:f0:6c:e9:4f:75:ad:14:8c:
61:8f:0e:98:ba:a0:b6:2d:a0:b6:be:9b:9d:65:df:
88:0f:d7:1f:cc:92:f5:7f:e5:49:28:72:de:0f:2b:
af:b6:a0:4f:6a:0a:91:e0:03:57:6e:20:fb:df:0c:
b8:b3:51:91:93:21:a1:da:7a:5e:02:4a:42:a5:be:
81:5c:ea:5b:6f:f2:5e:c7:82:1c:d4:7f:1a:17:c2:
7b:9e:d5:e1:ec:e5:95:2a:c2:04:aa:c7:21:78:bd:
f4:ac:b7:70:ec:e5:6b:3c:f5:4d:e1:f7:0b:e5:21:
b5:34:8c:c4:d2:19:64:5f:6e:22:ff:be:00:06:64:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:98:42:6F:90:9D:6A:2F:79:15:84:7D:60:5A:2A:3B:52:A0:D2:05
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/a5hCb5Cdai95FYR9YFoqO1Kg0gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.84.0/22
176.103.236.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:82:22:72:08:a0:91:9b:3e:63:09:f2:53:04:b9:88:cd:e5:
9b:ef:ef:d6:bf:02:a9:d7:23:b9:f2:f8:19:bf:a2:d8:12:cf:
a1:7f:62:8b:1c:aa:23:6e:ef:8f:71:3c:81:ce:a7:03:f4:02:
e7:9a:4e:5e:0f:78:7f:88:ba:58:47:ce:2c:49:95:18:19:9c:
ed:31:d0:f2:42:7c:d1:88:78:28:15:da:83:a1:09:14:7e:fc:
72:96:41:dc:73:7b:f1:7b:20:76:e3:8c:28:52:b2:a2:a6:14:
4d:30:4f:bb:af:60:77:70:90:83:02:8c:be:d3:0e:7c:b0:a9:
f7:e9:b1:4a:18:4e:1a:76:16:a7:b7:6e:17:ba:c3:0e:51:d1:
cf:cd:08:ba:a2:b8:bd:db:57:eb:56:61:93:5b:3b:1f:24:b3:
45:0a:d0:6b:ec:69:43:db:bb:99:d4:17:2c:90:3a:ac:78:41:
5a:24:1c:43:8c:ac:a5:46:2e:95:04:ea:14:5b:e1:2c:8e:a7:
07:75:8e:89:88:2a:15:32:12:28:5b:04:93:db:f9:11:91:f8:
37:a7:09:d9:82:4b:8e:06:42:ce:29:7e:de:d6:53:a3:e8:14:
4d:45:05:75:e5:67:ca:8a:e4:b5:22:5c:04:83:1f:84:65:00:
e2:90:3d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 14:09:06 2026 by rpki-client