Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/31fXmfRyDn3bh1SOMMDHBNqCuJw.roa
File: 31fXmfRyDn3bh1SOMMDHBNqCuJw.roa (raw, json)
Hash identifier: 4q9hHh9wpfwxAQbxYF+2lZ6NoI8NG2i+G2XbqDCkcrE=
Subject key identifier: DF:57:D7:99:F4:72:0E:7D:DB:87:54:8E:30:C0:C7:04:DA:82:B8:9C
Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Certificate serial: 019F22D5C9671775F2E0E001FD9B07D6A4EA
Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/31fXmfRyDn3bh1SOMMDHBNqCuJw.roa
Signing time: Thu 02 Jul 2026 12:37:43 +0000
ROA not before: Thu 02 Jul 2026 12:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59790
IP address blocks: 5.154.233.0/24 maxlen: 24
5.183.208.0/24 maxlen: 24
86.54.99.0/24 maxlen: 24
91.240.40.0/22 maxlen: 22
93.92.116.0/22 maxlen: 22
94.176.100.0/22 maxlen: 22
150.251.96.0/20 maxlen: 20
185.35.232.0/22 maxlen: 22
185.67.120.0/24 maxlen: 24
185.107.24.0/22 maxlen: 22
185.125.36.0/22 maxlen: 22
185.224.116.0/22 maxlen: 22
193.32.11.0/24 maxlen: 24
193.124.76.0/22 maxlen: 22
193.124.144.0/21 maxlen: 21
194.135.200.0/21 maxlen: 21
195.216.136.0/22 maxlen: 22
208.122.6.0/23 maxlen: 23
2a04:65c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:d5:c9:67:17:75:f2:e0:e0:01:fd:9b:07:d6:a4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Validity
Not Before: Jul 2 12:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df57d799f4720e7ddb87548e30c0c704da82b89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:c5:90:7b:e9:9d:e7:f1:71:e8:25:b1:1b:
26:56:d9:f6:32:09:15:38:6f:10:05:61:5d:bc:1c:
a9:2c:9d:64:d8:2d:40:6d:cc:7d:db:81:ec:48:70:
f4:0a:4a:8b:78:70:b0:d7:15:21:02:eb:22:6b:cb:
12:b2:d1:ce:89:d7:2a:68:18:6c:67:eb:62:92:7c:
3e:1d:77:05:01:f8:72:ca:63:d5:7e:36:48:d1:bc:
c5:a7:7b:e8:93:27:26:d4:13:ea:76:f6:07:9c:f7:
7b:74:17:98:dc:58:d0:3a:e5:02:ea:2f:24:81:6e:
01:ff:82:15:67:5a:b4:ea:99:99:d8:58:4a:42:e3:
99:28:40:e6:d6:49:f0:10:14:56:10:0f:61:d2:bf:
38:88:22:45:74:90:2d:72:45:98:76:d5:00:39:a3:
9e:a6:cc:17:cc:53:59:ab:5f:e6:16:27:3c:0f:a6:
22:ff:b9:84:99:47:b2:ea:00:61:44:78:87:94:42:
8c:aa:e2:bf:29:60:0b:1d:a9:42:31:74:0f:d7:22:
57:b2:d7:53:47:ee:40:3e:74:34:f2:6e:42:26:43:
10:bd:c9:a1:e2:f0:e3:67:e0:81:8b:7c:2b:5a:59:
26:1b:08:54:d3:4d:41:5e:42:1f:b1:e5:53:d2:b4:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:57:D7:99:F4:72:0E:7D:DB:87:54:8E:30:C0:C7:04:DA:82:B8:9C
X509v3 Authority Key Identifier:
keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/31fXmfRyDn3bh1SOMMDHBNqCuJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.233.0/24
5.183.208.0/24
86.54.99.0/24
91.240.40.0/22
93.92.116.0/22
94.176.100.0/22
150.251.96.0/20
185.35.232.0/22
185.67.120.0/24
185.107.24.0/22
185.125.36.0/22
185.224.116.0/22
193.32.11.0/24
193.124.76.0/22
193.124.144.0/21
194.135.200.0/21
195.216.136.0/22
208.122.6.0/23
IPv6:
2a04:65c0::/29
Signature Algorithm: sha256WithRSAEncryption
19:20:89:26:51:be:f3:db:f3:0f:d9:7b:5a:c6:cb:79:a7:90:
41:55:23:c7:c5:ec:a3:29:72:6a:ae:82:44:20:6f:26:04:12:
6b:a3:81:22:d4:c8:27:32:24:0c:e3:dc:9c:ba:82:e1:ba:5f:
59:b3:2a:63:aa:53:0d:81:22:73:a1:89:f1:85:48:49:9b:dd:
fe:34:3c:da:5f:0b:89:8a:af:ca:e8:77:0c:6a:0f:53:d1:63:
22:d1:9e:53:d7:c4:45:6e:0d:d0:26:72:9d:be:b6:55:1a:f9:
47:7d:00:82:eb:cf:38:77:86:a8:e4:ff:a5:65:92:d1:77:51:
43:08:64:eb:c1:82:2f:3f:98:f4:84:24:ab:db:29:72:56:6a:
10:07:0a:7b:89:a8:d2:e3:77:ba:19:b2:96:83:32:4c:cf:dc:
b5:e7:7c:82:04:f0:31:49:9e:71:d7:2b:47:f2:c6:67:04:7f:
f7:4b:91:97:62:80:5c:85:6a:0b:39:2c:df:ee:05:ea:ed:41:
5d:0d:04:8f:83:a7:74:64:87:3d:fa:8b:a0:68:4d:4e:91:cc:
e6:92:24:bd:9f:5e:55:e6:fc:54:02:02:da:b1:78:1c:31:36:
89:d5:a1:5d:3d:9c:5d:ca:62:69:9f:56:e7:29:f5:20:6b:49:
38:df:c4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 15:40:49 2026 by rpki-client