Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/f2BPZyQde6jaqQYuQ_ioMN5Ij5Y.roa
File: f2BPZyQde6jaqQYuQ_ioMN5Ij5Y.roa (raw, json)
Hash identifier: 0aTUB0kvzyHMFA+2BAuaiQsa5BczcOQneLtjd/+Wa8k=
Subject key identifier: 7F:60:4F:67:24:1D:7B:A8:DA:A9:06:2E:43:F8:A8:30:DE:48:8F:96
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 01A0F1BFE48B18CA090B214D55C3A0B70EE4
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/f2BPZyQde6jaqQYuQ_ioMN5Ij5Y.roa
Signing time: Wed 30 Sep 2026 09:57:59 +0000
ROA not before: Wed 30 Sep 2026 09:57:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47448
IP address blocks: 31.222.60.0/24 maxlen: 24
31.222.61.0/24 maxlen: 24
31.222.62.0/24 maxlen: 24
31.222.63.0/24 maxlen: 24
93.191.192.0/24 maxlen: 24
93.191.193.0/24 maxlen: 24
93.191.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:bf:e4:8b:18:ca:09:0b:21:4d:55:c3:a0:b7:0e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Sep 30 09:57:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f604f67241d7ba8daa9062e43f8a830de488f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:27:db:b3:95:18:4b:0e:74:10:b9:0c:d5:
c4:83:13:38:ff:c1:b0:39:5f:c4:48:ee:06:fb:b3:
9c:5a:74:55:da:99:e4:a0:d2:a2:f8:4a:5b:31:aa:
c7:d9:90:d0:c6:76:02:ea:0d:3b:f2:51:fd:71:81:
ad:b5:54:8f:25:8e:cd:e7:4c:6b:8c:75:8f:8f:a9:
7f:2c:12:75:a7:69:97:07:fb:89:73:a5:1d:a9:24:
be:35:b2:3b:97:5c:a5:3d:63:1c:8b:0e:3c:04:de:
ac:1f:33:29:5d:a4:ef:fe:94:15:41:75:9c:a7:80:
5c:4a:70:c0:93:e5:99:18:96:e2:4f:fa:fe:ba:d1:
1d:10:2a:55:c9:0a:1c:94:8e:64:33:9e:1a:77:67:
62:c0:80:5c:a7:1a:39:42:30:de:ca:37:9f:80:5e:
74:c1:82:c9:e5:bd:19:85:a1:4c:d6:ab:04:02:bb:
11:6e:6c:d9:53:5b:63:87:46:5c:d3:67:a1:c2:be:
c9:97:68:df:39:40:7f:81:4e:99:a7:5f:bb:78:6f:
f6:03:35:cb:c8:14:7d:32:db:4a:4e:a2:7e:ca:3a:
fd:b9:ac:89:30:97:b3:6e:78:a4:c5:30:fc:cd:3d:
67:a5:6b:43:5b:28:bd:6b:49:98:52:8c:20:19:dc:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:60:4F:67:24:1D:7B:A8:DA:A9:06:2E:43:F8:A8:30:DE:48:8F:96
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/f2BPZyQde6jaqQYuQ_ioMN5Ij5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.60.0/22
93.191.192.0/23
93.191.199.0/24
Signature Algorithm: sha256WithRSAEncryption
65:8c:86:a0:0e:9c:76:59:82:c6:19:1b:ed:f7:0c:30:b5:87:
05:ce:7b:4f:91:41:fd:31:5f:4c:c0:f7:2f:84:34:95:51:d4:
6a:69:bf:dc:06:15:36:36:f9:a2:eb:10:c0:b6:8a:4c:34:03:
31:02:fc:e3:ba:af:1e:14:8e:fb:44:5c:23:72:6f:e8:eb:ea:
2b:79:2c:e5:28:2f:55:13:82:cd:78:bb:92:24:63:25:a3:e3:
3f:11:7a:3e:e6:c5:fd:79:04:3c:0a:61:d1:5f:dc:52:42:ef:
9e:df:14:91:1a:4a:7a:30:fc:d4:d0:bf:44:2b:1f:99:9e:b8:
f7:9f:48:a3:13:02:3c:c3:6b:d7:aa:28:2b:f8:6f:fe:9a:49:
e4:e3:95:04:e4:9b:65:cf:b6:71:47:69:c9:af:b0:ca:14:15:
a8:18:d8:f7:ea:49:68:04:54:e4:cb:20:d2:ab:5f:6d:78:e8:
e2:f8:78:ca:df:8b:02:28:3e:a9:51:ac:28:79:e8:09:e2:48:
d2:ea:97:fd:09:62:b2:ef:a7:60:a6:f2:86:23:cb:b2:12:2c:
17:a7:c1:7f:80:3d:d5:9e:09:85:9f:38:67:1e:c3:b5:c7:cc:
a8:f0:64:07:75:42:bd:b6:f9:60:ce:30:df:13:cf:9e:9d:58:
e2:e4:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:26:28 2026 by rpki-client