Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/31yfjVRgxLHvxsS3Mac9w_crR78.roa
File: 31yfjVRgxLHvxsS3Mac9w_crR78.roa (raw, json)
Hash identifier: MVNUbMSmI5cLZ5CAnH051piNxmefQEUe0j8NbD4O9Fo=
Subject key identifier: DF:5C:9F:8D:54:60:C4:B1:EF:C6:C4:B7:31:A7:3D:C3:F7:2B:47:BF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FCFEAC001DC6C8F57BB9B045196E7C702
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/31yfjVRgxLHvxsS3Mac9w_crR78.roa
Signing time: Wed 05 Aug 2026 03:14:56 +0000
ROA not before: Wed 05 Aug 2026 03:14:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62468
IP address blocks: 82.109.248.0/21 maxlen: 24
87.83.206.0/23 maxlen: 24
87.85.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cf:ea:c0:01:dc:6c:8f:57:bb:9b:04:51:96:e7:c7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 5 03:14:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df5c9f8d5460c4b1efc6c4b731a73dc3f72b47bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:2d:e2:43:11:6d:b7:ca:6f:de:0a:b9:37:
36:e6:e4:e4:2f:4f:0a:36:c8:13:7c:cd:cf:c2:d5:
a0:fa:e2:1a:0f:f1:d2:50:69:a0:6a:cd:bb:1b:d5:
b8:1c:7d:af:43:11:e4:9f:a8:22:4f:b3:c6:10:e1:
c7:82:34:6f:11:d0:a8:e0:1f:29:57:67:0a:13:4d:
00:60:50:d4:0b:1b:a3:20:4d:e1:b0:ef:0a:12:e4:
8a:79:7c:a9:37:83:a3:8a:1a:f6:3e:72:5f:dd:41:
9b:69:5e:16:b4:a6:9c:1c:8a:00:fa:d4:45:ea:37:
b8:de:a8:d7:94:d4:a6:de:35:dd:ef:c1:d8:c0:5a:
ab:bf:97:52:06:2a:41:1d:73:2f:d5:34:c6:5d:1f:
3b:7c:32:19:a2:39:5d:14:19:e7:87:3a:41:04:cf:
c4:f0:ad:22:c4:54:00:6f:7b:01:28:97:e8:04:df:
15:4e:10:9c:93:ac:7b:67:45:f6:40:f8:b6:b7:3f:
a4:3e:50:c7:3b:16:67:9b:1c:d7:2d:00:d8:4f:8a:
70:5e:96:5c:3d:78:26:20:fe:24:04:5c:9a:db:c0:
a2:15:16:06:ac:10:c1:de:55:c5:0c:9c:ab:ef:b3:
90:86:35:d0:c3:31:e2:7b:bb:61:90:d1:7b:19:50:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5C:9F:8D:54:60:C4:B1:EF:C6:C4:B7:31:A7:3D:C3:F7:2B:47:BF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/31yfjVRgxLHvxsS3Mac9w_crR78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.248.0/21
87.83.206.0/23
87.85.104.0/21
Signature Algorithm: sha256WithRSAEncryption
d2:9d:af:2a:4b:ae:88:4c:1c:62:fc:54:f8:5b:b3:5a:ce:66:
94:d6:49:5c:00:4d:f4:42:a4:f2:f7:56:c0:40:73:e6:f8:4b:
cb:a8:b6:3f:bc:6a:3d:9e:2a:75:ab:cb:69:c3:32:99:b0:28:
2a:8f:6d:60:84:c0:80:f5:28:9b:d1:cd:7d:7a:11:e5:eb:97:
aa:37:16:fa:50:0b:ef:85:a8:2b:bd:b3:95:bd:dd:e3:53:d0:
d2:70:75:44:0e:b2:fd:65:ce:0d:fc:50:a1:f4:cd:b5:3d:ee:
72:04:81:b9:57:ed:35:d5:3a:e7:da:03:1d:bc:e1:6f:5b:71:
bc:3b:eb:71:a9:8d:37:8a:f0:e2:b6:07:85:af:2b:60:47:40:
db:a3:78:83:3a:12:ac:bb:15:f5:51:41:a6:e1:0e:4d:c9:c4:
f5:f9:0a:88:76:15:ba:38:02:69:8d:10:90:17:30:8d:d6:0c:
4b:0e:24:13:4a:d1:bb:7f:49:72:86:91:b6:b9:d0:1f:e4:af:
1c:02:58:63:a0:e8:31:c3:a8:7c:ca:58:68:b9:bc:69:92:b3:
03:b8:28:b5:52:f0:01:b0:9e:3a:0f:24:02:c1:86:f9:af:b6:
32:ee:51:d2:d3:02:fc:e3:01:b2:cf:ed:61:58:c7:ac:98:71:
8e:47:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:15 2026 by rpki-client