Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/aWsqsB-3ZQbTjL04fbv9sSIRYy0.roa
File: aWsqsB-3ZQbTjL04fbv9sSIRYy0.roa (raw, json)
Hash identifier: vl5kdDZvNA0PjdTAUC5bWcnSAFTCIQHILHRouPyxeN4=
Subject key identifier: 69:6B:2A:B0:1F:B7:65:06:D3:8C:BD:38:7D:BB:FD:B1:22:11:63:2D
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 01A0F1BFE509A2DDD0B0F5AF333C491F9498
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/aWsqsB-3ZQbTjL04fbv9sSIRYy0.roa
Signing time: Wed 30 Sep 2026 09:58:00 +0000
ROA not before: Wed 30 Sep 2026 09:58:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209924
IP address blocks: 31.222.52.0/23 maxlen: 23
31.222.52.0/24 maxlen: 24
31.222.53.0/24 maxlen: 24
31.222.54.0/24 maxlen: 24
93.191.194.0/24 maxlen: 24
93.191.195.0/24 maxlen: 24
93.191.196.0/24 maxlen: 24
93.191.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:bf:e5:09:a2:dd:d0:b0:f5:af:33:3c:49:1f:94:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Sep 30 09:58:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=696b2ab01fb76506d38cbd387dbbfdb12211632d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:0f:0e:de:58:e0:3b:6c:22:8a:93:a8:e4:
2f:d1:f5:1a:cb:3a:b8:81:e0:da:88:b6:b6:9b:c6:
17:a1:a7:11:c2:3c:be:9d:84:6e:77:11:e5:07:3b:
56:93:c0:35:a3:94:cf:a0:03:5e:63:da:68:c4:2a:
1d:68:33:77:2c:18:c4:c9:f1:0f:80:00:d2:f0:d0:
4c:db:03:da:50:69:80:de:20:31:50:8c:a7:e1:8b:
40:0d:e9:12:38:f0:7c:9d:79:c8:c0:cf:28:2a:b1:
7e:e3:c2:8b:24:df:c9:0b:04:a7:92:db:a1:32:c1:
21:df:9c:4b:de:64:98:18:a6:1e:75:1b:2b:a1:6c:
db:b6:ff:31:97:fc:f4:02:55:6b:65:ab:97:1a:7b:
25:a7:f3:6e:9f:95:bf:78:0e:b2:45:cc:60:c3:3e:
01:09:61:de:91:19:d2:3d:1c:53:06:98:4f:83:8e:
55:36:e1:e4:86:2d:32:5d:04:f8:9b:69:d0:0d:86:
c8:0b:c5:79:bc:ab:bb:25:53:0d:fe:54:1e:f7:bd:
55:80:5a:a5:ae:8b:b0:84:15:5e:a3:29:7e:8f:78:
8a:2f:34:e9:d1:d2:82:a3:1d:9f:0f:26:0c:f9:5b:
84:be:84:95:1b:49:6f:9f:e7:d9:f9:b1:14:01:3f:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6B:2A:B0:1F:B7:65:06:D3:8C:BD:38:7D:BB:FD:B1:22:11:63:2D
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/aWsqsB-3ZQbTjL04fbv9sSIRYy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.52.0-31.222.54.255
93.191.194.0-93.191.197.255
Signature Algorithm: sha256WithRSAEncryption
88:62:c1:14:5f:30:67:d1:db:a4:40:78:c9:ee:23:f7:00:64:
9e:cf:01:db:a1:33:26:33:d1:80:97:f9:3f:00:53:73:30:ba:
a0:70:f5:1a:e1:d6:25:4e:c5:ae:68:72:be:64:54:07:e4:9e:
71:74:7a:a1:c2:5a:ae:d8:6f:9b:2e:db:85:00:20:ff:01:e9:
5b:56:d9:a4:13:e1:22:d1:4c:ff:e7:b3:35:02:95:b7:e1:e3:
0d:3b:56:89:d4:35:2f:74:6a:d2:8e:3e:fb:78:29:f4:18:be:
c1:25:9c:3f:0d:06:04:d8:ec:df:a2:56:07:26:02:af:dc:c9:
3f:13:b5:11:2b:d2:0f:36:66:9c:f0:47:07:9d:bd:ee:4b:5d:
9a:af:47:c8:c5:b8:79:1f:b6:66:2f:cb:9c:97:a5:e5:6b:0e:
2a:8f:3c:2e:11:00:ab:e5:a7:04:9a:e3:75:1e:cb:6e:55:ce:
13:d7:37:65:a3:a1:a6:e1:ff:00:eb:77:70:e1:80:ba:c3:a2:
97:ca:29:40:0f:f0:cc:7e:96:49:79:fb:55:e7:3b:fd:10:41:
f7:8b:51:4b:ea:ba:fa:ea:9c:39:83:4f:bb:3c:e2:b9:43:f2:
6c:9d:5c:89:45:6d:af:84:e1:25:a1:11:6d:a2:5d:92:a4:bd:
04:a9:fa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:09:12 2026 by rpki-client