Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/AN7MxbQD3dfri2ZoF8VvNAjtuBk.roa
File: AN7MxbQD3dfri2ZoF8VvNAjtuBk.roa (raw, json)
Hash identifier: Y18WbuFr5/QhBtuczblYb6Siq2idzejzy0GTI65wq7s=
Subject key identifier: 00:DE:CC:C5:B4:03:DD:D7:EB:8B:66:68:17:C5:6F:34:08:ED:B8:19
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019EF9D7DF1E63F68754C485F043F9428E99
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/AN7MxbQD3dfri2ZoF8VvNAjtuBk.roa
Signing time: Wed 24 Jun 2026 13:35:34 +0000
ROA not before: Wed 24 Jun 2026 13:35:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152565
IP address blocks: 31.42.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:d7:df:1e:63:f6:87:54:c4:85:f0:43:f9:42:8e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jun 24 13:35:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00deccc5b403ddd7eb8b666817c56f3408edb819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:22:14:42:8a:3e:34:f9:4d:ee:be:70:4f:
70:67:d8:94:d2:27:96:ba:ec:18:17:7f:af:aa:9e:
f7:b1:8f:12:9b:a5:76:11:8e:eb:68:70:d1:7d:bd:
e5:a2:01:3b:d9:e3:e1:d9:ec:08:4a:a7:ce:a7:b5:
cb:71:aa:b7:17:41:5c:65:a8:4b:cb:e3:29:e0:2e:
fe:e3:76:25:a0:2a:a5:92:a9:af:1e:7f:dc:4b:7b:
ac:f4:d5:dd:79:7b:58:0e:a9:11:5e:19:6c:2f:69:
ce:7e:72:5b:6a:37:48:f1:30:7f:1b:d2:41:5f:9e:
5b:b8:4e:7d:3c:fb:64:58:38:b0:46:e6:ec:53:91:
96:b1:b0:ac:01:ce:43:e0:ea:8b:2d:1f:6a:84:a7:
c3:86:78:90:c4:d0:6e:18:ab:3c:3a:f1:f5:11:af:
98:08:07:32:35:bf:5d:b9:63:a1:04:0e:46:f6:0f:
73:06:41:b1:f4:84:f2:1b:4c:31:1a:fd:d4:13:f2:
c7:5f:ad:ae:ba:8d:eb:0e:82:c8:62:91:d3:cd:82:
78:6d:28:4c:73:00:12:53:44:da:30:58:aa:4b:d8:
f0:e3:27:32:66:02:d8:a4:71:8e:f2:cb:fa:4b:3e:
97:77:7e:01:58:22:3a:c8:04:90:93:e7:4a:98:4e:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DE:CC:C5:B4:03:DD:D7:EB:8B:66:68:17:C5:6F:34:08:ED:B8:19
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/AN7MxbQD3dfri2ZoF8VvNAjtuBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:6b:1f:24:77:b1:c6:dd:ee:7b:07:02:6a:74:4e:a6:c0:b6:
f7:53:48:30:ac:ef:d0:27:5d:f3:34:56:81:70:8b:fb:33:8f:
f4:d8:6c:6c:ce:19:5b:43:1e:e7:94:d8:0c:2a:4b:a8:3c:13:
62:b0:fe:97:66:d6:a2:aa:68:45:3f:f8:84:26:a9:73:6a:52:
ff:b5:e8:b4:7f:cf:18:36:1b:35:32:a3:c0:c1:9b:d1:38:dc:
ff:2b:4b:71:aa:0b:36:0c:4a:b8:13:4c:e0:0e:55:f6:4f:4d:
ee:df:c9:24:fe:05:e2:87:8e:23:a2:14:9b:4d:80:0f:db:d4:
56:fc:38:42:df:c6:7a:81:9e:af:6c:fc:bb:66:6b:89:54:6b:
32:23:c5:e2:71:e3:84:98:60:4b:77:11:10:b0:a4:c3:ea:b4:
79:da:a6:a6:29:af:7e:82:a0:7e:e2:e5:17:b9:62:77:fc:87:
91:78:78:4c:65:46:b7:6b:0a:7b:34:e1:01:9d:c5:1b:6e:0f:
61:a5:75:91:75:d7:72:ac:ce:e4:68:78:8b:d4:da:ea:dd:bd:
e4:73:f1:fd:de:d9:a7:da:ae:46:d7:9d:86:1a:17:3a:4f:b4:
8d:66:39:2c:24:ca:b8:c7:69:28:6a:62:6d:92:b1:34:2b:57:
fb:c1:4c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:33 2026 by rpki-client