Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/BoxtXMMZmxBYKCJ8Z1afwJFRtcA.roa
File: BoxtXMMZmxBYKCJ8Z1afwJFRtcA.roa (raw, json)
Hash identifier: E8EhzkpyKYc9PGnxMVLjrw/nuWChanKM2FKu61Dcpng=
Subject key identifier: 06:8C:6D:5C:C3:19:9B:10:58:28:22:7C:67:56:9F:C0:91:51:B5:C0
Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial: 01A1C03FB898FAD65878BCD344085B594BDF
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/BoxtXMMZmxBYKCJ8Z1afwJFRtcA.roa
Signing time: Mon 09 Nov 2026 12:19:23 +0000
ROA not before: Mon 09 Nov 2026 12:19:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 81.31.198.0/24 maxlen: 24
91.188.253.0/24 maxlen: 24
91.188.254.0/24 maxlen: 24
91.188.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:3f:b8:98:fa:d6:58:78:bc:d3:44:08:5b:59:4b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Validity
Not Before: Nov 9 12:19:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=068c6d5cc3199b105828227c67569fc09151b5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:b4:6e:01:a3:c9:68:21:d8:e2:eb:c6:37:
18:a7:ec:8c:5a:73:cc:9e:fc:42:1e:b3:3b:36:75:
28:e9:a4:31:8f:e4:23:a8:ff:61:85:99:42:84:4d:
8c:20:45:8c:fb:0e:0a:67:54:84:e8:06:9a:0c:4b:
46:e1:83:f8:54:87:6c:e4:36:c5:4f:b2:85:e4:a1:
9a:0d:69:2e:de:33:0d:6d:05:60:2b:68:93:ef:60:
35:e3:f2:ce:5a:b6:3e:64:7e:3b:41:84:5c:8b:d2:
f9:07:9c:64:4b:7a:61:6b:6c:5d:74:a9:5e:92:a6:
a1:8f:1a:c7:16:b4:c8:8a:52:18:2b:99:c3:d8:25:
83:10:f3:4f:25:dc:7a:40:0a:5c:73:8a:14:cc:bc:
28:e3:5f:ad:5e:31:f7:8c:45:c8:a4:20:d0:a9:52:
bb:58:07:85:aa:90:c5:47:df:43:ba:ef:d1:a3:cb:
bc:1a:19:5c:5f:78:23:b5:66:61:8e:fd:e4:7c:6f:
c2:d9:62:30:21:85:69:68:28:b6:bb:5c:54:b1:46:
4a:c7:18:50:af:d2:26:b5:e8:9a:52:c4:b6:dc:38:
55:24:fc:ce:e9:53:cc:c7:36:77:10:65:60:07:d8:
e2:25:c3:7f:d5:6c:07:d9:c5:56:ac:ed:3e:8f:bd:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8C:6D:5C:C3:19:9B:10:58:28:22:7C:67:56:9F:C0:91:51:B5:C0
X509v3 Authority Key Identifier:
keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/BoxtXMMZmxBYKCJ8Z1afwJFRtcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.198.0/24
91.188.253.0-91.188.255.255
Signature Algorithm: sha256WithRSAEncryption
7f:38:06:09:a7:fd:45:6b:a6:81:e8:cf:66:a8:ed:be:ac:cd:
29:58:f8:b2:a2:5f:e7:15:c0:3c:72:e8:60:92:e0:63:9b:31:
fc:61:59:d2:27:62:1b:88:d3:10:de:aa:26:d9:1d:6c:0e:74:
7d:e7:cd:64:7b:86:70:72:1c:d7:aa:26:a2:7c:86:ce:72:2c:
41:28:33:c9:03:2d:f8:18:46:99:75:d9:4d:92:18:b8:11:d9:
f0:eb:78:0c:93:7b:d8:11:e8:19:47:1c:3f:61:e3:95:a5:d9:
61:ca:9d:bf:3e:38:ea:ab:98:74:14:10:df:ff:a3:0e:94:3e:
50:dc:ff:b0:10:50:c5:4a:52:1a:e9:82:bf:e4:c3:a4:41:8a:
db:b4:a6:1d:fb:7c:2e:08:af:ea:06:eb:4d:fb:65:56:ed:63:
20:c2:98:70:26:f8:11:b4:5b:20:7c:72:87:fc:d4:51:86:4c:
9c:6b:d7:80:0d:e3:ae:5c:b5:b5:bb:09:e0:1b:b2:95:c2:7f:
5b:95:12:46:5b:e1:04:06:86:fd:e9:0d:a0:bc:df:00:86:8f:
45:4d:4a:01:b5:c4:dc:39:6b:0c:81:39:a7:ff:4d:95:e5:5d:
e5:96:6b:41:b3:93:b5:1d:c7:1d:97:f3:54:48:2b:aa:6d:9a:
03:09:35:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 02:46:55 2026 by rpki-client