Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/d84IG0gEqWkU6iGS7DdOfZQWoHo.roa
File: d84IG0gEqWkU6iGS7DdOfZQWoHo.roa (raw, json)
Hash identifier: WnvK9cb6wtMcUr70atLDnzgRw2DAB9G4MC4g4716R9g=
Subject key identifier: 77:CE:08:1B:48:04:A9:69:14:EA:21:92:EC:37:4E:7D:94:16:A0:7A
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019ECF9B7B2A122950E8D10BECE56714C12F
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/d84IG0gEqWkU6iGS7DdOfZQWoHo.roa
Signing time: Tue 16 Jun 2026 08:45:33 +0000
ROA not before: Tue 16 Jun 2026 08:45:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62206
IP address blocks: 31.133.80.0/22 maxlen: 24
31.133.84.0/22 maxlen: 24
31.133.88.0/22 maxlen: 24
176.103.224.0/22 maxlen: 22
176.103.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:9b:7b:2a:12:29:50:e8:d1:0b:ec:e5:67:14:c1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jun 16 08:45:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77ce081b4804a96914ea2192ec374e7d9416a07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:43:85:17:44:ba:8e:7e:09:94:57:f4:29:
3c:d5:08:67:71:82:7f:73:7f:e5:1a:9c:26:d9:99:
07:ec:32:f0:d6:ab:17:45:39:52:0b:8e:a8:e6:7c:
7d:cd:b8:4b:e9:09:c7:03:e5:c8:e9:41:eb:7a:bf:
95:de:8c:7a:76:53:17:a6:18:72:bd:75:c2:b3:8c:
e1:aa:5a:7f:54:01:5a:54:52:c2:71:83:dd:cd:3f:
35:cc:9d:d8:03:91:ad:fa:51:19:b6:17:10:3b:1a:
90:e4:a6:66:b3:43:5c:ed:59:e0:f8:c1:08:7d:bd:
0f:4d:77:7f:f2:7c:38:7f:06:76:3f:75:23:9c:92:
c5:69:70:d9:48:82:10:5d:38:37:ed:13:ff:6b:44:
a3:32:6d:72:87:65:47:13:be:06:04:11:d3:15:59:
ec:2d:e6:44:38:35:90:f8:4b:13:bc:fb:00:c9:7e:
9f:5f:5c:af:e7:e4:c1:dc:21:58:6c:1c:89:7a:4a:
fc:08:1e:ac:8d:21:0d:c9:0c:f6:c3:81:15:ad:79:
fb:52:f7:90:09:6b:20:05:55:3f:5a:68:7a:a0:d4:
aa:51:d6:34:df:9d:0d:3a:97:9d:c1:6b:51:ec:5a:
5a:66:ee:0e:e9:dc:79:48:ad:f4:7d:45:cc:f9:20:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CE:08:1B:48:04:A9:69:14:EA:21:92:EC:37:4E:7D:94:16:A0:7A
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/d84IG0gEqWkU6iGS7DdOfZQWoHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0-31.133.91.255
176.103.224.0/22
176.103.236.0/22
Signature Algorithm: sha256WithRSAEncryption
78:07:77:54:1c:68:89:f7:d3:ec:6d:ec:55:fd:a2:c4:aa:0f:
99:d9:26:57:a5:05:af:10:ef:11:9b:15:25:07:37:8a:c1:9c:
74:96:9b:d3:a2:ef:d2:3f:db:c6:0e:ac:36:81:cf:64:a5:04:
f2:b3:28:85:cd:22:45:64:82:ba:37:23:14:84:ca:4e:59:78:
39:ca:20:b7:d9:4c:48:e2:5f:ea:83:d6:51:24:48:dc:5c:ea:
28:e7:63:eb:c7:b7:7b:ea:b3:bc:2d:c4:1d:20:e7:08:b9:30:
7b:0b:93:a9:c0:45:b0:ff:82:07:45:e9:b9:2e:0d:c5:19:95:
27:00:69:46:c4:c9:08:91:33:4b:c2:87:2a:05:6b:d3:13:9c:
57:66:cb:bf:18:16:3a:2f:c5:f5:44:4e:d6:3b:3c:94:b3:7a:
8c:20:4c:01:29:16:2e:72:cf:86:d1:ff:f7:5d:a9:a5:e8:66:
80:65:5d:04:23:80:b2:d9:7b:f8:8a:ea:a9:e2:f9:bd:87:84:
b1:d7:31:5d:19:c5:0b:3e:25:94:05:cf:e1:90:50:29:77:49:
3d:92:6a:2f:d5:bd:40:fe:7b:e6:8c:75:d0:47:b7:21:60:6f:
8f:05:12:61:62:16:b7:cf:66:1c:7b:84:a7:3b:36:85:31:db:
78:a3:d0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 06:30:25 2026 by rpki-client