Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/xGKEhS-27u_3PhbCAMcQp0BR3tQ.roa
File: xGKEhS-27u_3PhbCAMcQp0BR3tQ.roa (raw, json)
Hash identifier: yBlZ/tOG9gPmYH/MDRBLS8io2Qd573sTgUCpq0O1dzQ=
Subject key identifier: C4:62:84:85:2F:B6:EE:EF:F7:3E:16:C2:00:C7:10:A7:40:51:DE:D4
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 019FD262753E1D496A4AC2C890EA2BDFAB85
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/xGKEhS-27u_3PhbCAMcQp0BR3tQ.roa
Signing time: Wed 05 Aug 2026 14:44:55 +0000
ROA not before: Wed 05 Aug 2026 14:44:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31220
IP address blocks: 31.210.240.0/21 maxlen: 24
31.210.240.0/24 maxlen: 24
31.210.241.0/24 maxlen: 24
195.3.184.0/22 maxlen: 24
195.225.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:62:75:3e:1d:49:6a:4a:c2:c8:90:ea:2b:df:ab:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Aug 5 14:44:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c46284852fb6eeeff73e16c200c710a74051ded4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:f7:fa:58:dd:84:b6:94:aa:45:8d:9d:05:
5f:75:55:8d:01:b8:7a:bb:9c:e4:e2:a8:c8:f0:bf:
b9:a5:22:0a:de:14:d5:22:5d:1c:15:7c:1b:56:01:
be:a9:f5:d1:e2:8b:4d:6e:bd:da:87:90:a1:3f:17:
9a:85:c0:0e:b7:86:ff:af:22:49:47:18:2a:f4:36:
f2:64:f4:d2:47:d5:00:14:22:3c:49:a6:ec:1e:3b:
89:a9:03:58:5b:9c:91:6f:33:30:a9:3e:07:5e:1e:
ce:fb:99:db:98:c1:d9:73:51:67:ad:5a:72:1d:61:
a9:00:80:63:b3:47:33:ff:1c:58:02:b3:58:1c:2e:
d0:ab:36:b9:c9:96:32:43:ac:63:50:fd:0f:6a:4c:
93:03:46:a5:33:48:8f:ec:f2:9f:a0:0c:28:15:ef:
f8:48:63:9b:cb:f8:82:7a:ae:01:4a:1a:85:90:7b:
14:49:66:f9:0e:0a:39:85:34:bf:49:ad:0c:77:e8:
78:fc:a8:2f:39:c4:15:43:6c:6e:b0:94:14:52:04:
82:eb:01:d5:2b:a4:b3:b2:68:40:6e:15:c6:ac:5f:
e0:b7:c8:1e:6a:5b:a1:cc:ad:da:cc:08:da:7f:05:
e9:09:1d:00:77:7a:5b:b6:dd:d2:98:bd:13:27:e0:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:62:84:85:2F:B6:EE:EF:F7:3E:16:C2:00:C7:10:A7:40:51:DE:D4
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/xGKEhS-27u_3PhbCAMcQp0BR3tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.240.0/21
195.3.184.0/22
195.225.216.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:15:86:6e:10:bb:5a:67:3a:03:66:d2:a7:52:f9:2f:53:33:
96:60:89:6b:70:bd:d8:f2:21:f1:74:34:86:85:48:aa:d8:5f:
88:08:d6:1b:5c:bf:56:08:58:27:01:82:92:64:ce:14:93:bb:
cc:09:38:41:c0:48:a7:6d:4a:03:37:ee:a7:8b:45:ee:03:b6:
31:ae:44:4c:80:16:e5:98:77:b8:0d:e9:a2:73:4c:53:a4:50:
60:39:6f:72:1e:14:1f:69:f5:de:c8:94:e4:ff:f8:07:96:7d:
99:9e:ba:29:b9:78:b9:83:ba:49:5e:ad:c6:73:83:b8:8f:1a:
dc:13:06:ea:b6:da:cd:ed:04:2b:af:c7:f4:47:39:b5:2f:cc:
b9:e0:57:ee:3a:1f:57:87:6d:90:7a:b9:e5:a0:a3:4c:22:cd:
f0:f1:45:b4:b6:29:2c:43:7f:91:c0:86:5c:03:fc:24:78:a4:
d1:5b:b6:49:51:b0:c0:2c:22:5b:38:f1:42:0c:65:13:9a:dd:
65:3a:66:f2:54:81:78:09:4d:6b:de:fd:14:c7:d1:5d:17:b5:
e9:ff:f5:4e:df:ad:9b:a3:f9:a5:7b:90:0f:a7:99:f8:0c:ee:
28:e3:6f:bd:bd:fa:d9:7f:3d:48:49:ad:7c:63:0f:24:ed:8d:
ad:b2:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:13:33 2026 by rpki-client