Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/PoWJwB4rE5cT6-qKpPWoYwi3IiA.roa
File: PoWJwB4rE5cT6-qKpPWoYwi3IiA.roa (raw, json)
Hash identifier: 1d979g1nxx2UUTWihXQHx7OPtde4Z16FjYLNKaWHQwk=
Subject key identifier: 3E:85:89:C0:1E:2B:13:97:13:EB:EA:8A:A4:F5:A8:63:08:B7:22:20
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 019EF86083F1A83C68D79419E440C12F7BA4
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/PoWJwB4rE5cT6-qKpPWoYwi3IiA.roa
Signing time: Wed 24 Jun 2026 06:45:35 +0000
ROA not before: Wed 24 Jun 2026 06:45:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48108
IP address blocks: 31.222.227.0/24 maxlen: 24
176.53.146.0/23 maxlen: 23
185.235.230.0/24 maxlen: 24
2001:678:e30::/48 maxlen: 48
2a0a:2e80::/32 maxlen: 32
2a0a:2e81::/32 maxlen: 32
2a0a:2e81::/36 maxlen: 36
2a0a:2e82::/32 maxlen: 32
2a11:7e40::/32 maxlen: 32
2a11:7e40::/48 maxlen: 48
2a11:7e40:1::/48 maxlen: 48
2a11:7e40:2::/48 maxlen: 48
2a11:7e40:3::/48 maxlen: 48
2a11:7e40:4::/48 maxlen: 48
2a11:7e40:1000::/36 maxlen: 36
2a11:7e42::/36 maxlen: 36
2a11:7e46::/32 maxlen: 32
2a11:7e47:1000::/48 maxlen: 48
2a11:7e47:2000::/48 maxlen: 48
2a11:7e47:3000::/48 maxlen: 48
2a11:7e47:4000::/48 maxlen: 48
2a11:7e47:5000::/48 maxlen: 48
2a11:7e47:6000::/48 maxlen: 48
2a11:7e47:7000::/48 maxlen: 48
2a11:7e47:8000::/48 maxlen: 48
2a11:7e47:9000::/48 maxlen: 48
2a11:7e47:a000::/48 maxlen: 48
2a11:7e47:b000::/48 maxlen: 48
2a11:7e47:b002::/48 maxlen: 48
2a11:7e47:b003::/48 maxlen: 48
2a11:8480::/32 maxlen: 32
2a11:8481::/32 maxlen: 32
2a11:8482::/32 maxlen: 32
2a11:8485::/32 maxlen: 32
2a12:6702::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:60:83:f1:a8:3c:68:d7:94:19:e4:40:c1:2f:7b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Jun 24 06:45:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e8589c01e2b139713ebea8aa4f5a86308b72220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:a5:be:e7:20:0b:f1:72:2c:3f:c7:b3:92:
67:ff:d2:1e:4b:21:21:80:ef:93:d3:5a:07:f1:7d:
ac:a4:2e:20:da:9b:7d:c9:4b:ee:c2:8f:0a:7a:a6:
98:d6:46:9f:13:33:79:c6:d7:16:93:b4:96:1c:6a:
32:87:5d:87:51:45:b2:60:52:92:53:d0:d7:c1:7f:
5c:18:71:f4:b0:1b:bf:d2:fd:5a:f3:93:31:f0:b4:
79:b5:ed:14:75:21:86:70:c4:ee:ed:80:d5:a0:d6:
25:3f:82:1e:01:57:37:36:1b:a2:3a:bf:ab:7d:2b:
f0:09:16:f5:a8:1f:23:13:3d:36:24:50:a1:8e:d8:
62:3d:a1:23:5b:8a:31:75:93:51:90:67:08:88:75:
55:01:db:b7:c2:ae:81:3d:36:46:3c:fa:08:7c:db:
d7:e9:90:bc:7b:dd:ec:72:c8:00:65:f3:60:2f:17:
85:e9:00:7b:7a:04:9c:9c:a5:d9:03:bc:12:91:90:
89:0b:fd:73:1e:39:63:14:00:ed:3e:cb:75:69:7b:
68:67:89:ad:57:a8:0d:47:17:36:53:d8:8e:e2:1a:
f4:19:5b:7c:2d:c6:9a:9d:38:4c:1d:c0:c3:ef:07:
ac:41:a3:10:64:1b:61:f7:87:71:78:5d:bf:43:5e:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:85:89:C0:1E:2B:13:97:13:EB:EA:8A:A4:F5:A8:63:08:B7:22:20
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/PoWJwB4rE5cT6-qKpPWoYwi3IiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.227.0/24
176.53.146.0/23
185.235.230.0/24
IPv6:
2001:678:e30::/48
2a0a:2e80::-2a0a:2e82:ffff:ffff:ffff:ffff:ffff:ffff
2a11:7e40::/32
2a11:7e42::/36
2a11:7e46::/32
2a11:7e47:1000::/48
2a11:7e47:2000::/48
2a11:7e47:3000::/48
2a11:7e47:4000::/48
2a11:7e47:5000::/48
2a11:7e47:6000::/48
2a11:7e47:7000::/48
2a11:7e47:8000::/48
2a11:7e47:9000::/48
2a11:7e47:a000::/48
2a11:7e47:b000::/48
2a11:7e47:b002::/47
2a11:8480::-2a11:8482:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8485::/32
2a12:6702::/32
Signature Algorithm: sha256WithRSAEncryption
67:2a:7b:c4:9a:2d:43:90:67:f5:7f:c6:10:fa:0c:ff:e4:84:
3b:6d:38:54:43:35:94:bd:31:7c:88:69:0a:af:f7:7f:cc:a8:
9e:10:c7:a9:40:63:b9:dd:c8:19:19:1c:c8:b4:2e:d4:59:e9:
94:9d:46:7e:cd:c7:82:93:da:29:ab:41:95:22:bb:e8:aa:9c:
e1:bf:ce:15:c2:c0:5c:4f:22:9c:88:e6:4d:03:87:0f:19:13:
7f:14:2f:19:2b:1c:00:aa:da:a5:92:c6:f8:bd:5e:07:d6:3b:
3e:09:f2:b6:b9:19:49:69:19:0b:b3:fc:91:22:4f:48:39:7a:
59:da:90:05:ea:56:15:68:28:42:ca:5d:e7:64:83:a7:91:a5:
a7:c0:79:22:ed:9e:5a:cd:18:e5:49:11:6e:4f:b0:52:88:4a:
bc:79:6a:43:d5:08:ff:6f:2d:fd:f8:86:b9:20:da:6f:d6:e4:
56:0b:88:cb:33:09:b9:4e:3e:19:e6:d1:05:57:aa:3e:14:5c:
6d:37:94:8c:fa:cd:ce:1a:e6:aa:b8:fb:aa:71:aa:56:bd:9b:
9b:34:71:fe:2a:44:05:e4:b1:0d:4a:e7:e8:b1:25:5c:11:30:
cf:de:21:10:b1:0a:95:34:3d:ea:b8:1e:93:a4:48:a7:97:e3:
19:c8:9d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:58:04 2026 by rpki-client