Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/xrN_zPHRCcwLVDPLH1CVZ-5BeNM.roa
File: xrN_zPHRCcwLVDPLH1CVZ-5BeNM.roa (raw, json)
Hash identifier: I0/MQBNDpvY1DEGzG+/FSs7ePj5UnSEyZkAgCS5qVJc=
Subject key identifier: C6:B3:7F:CC:F1:D1:09:CC:0B:54:33:CB:1F:50:95:67:EE:41:78:D3
Certificate issuer: /CN=505122f4dea7df3927d4011b3087d4d067f9d19a
Certificate serial: 019FC7DC0FD715C1407241920C40EFA5724C
Authority key identifier: 50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/xrN_zPHRCcwLVDPLH1CVZ-5BeNM.roa
Signing time: Mon 03 Aug 2026 13:41:55 +0000
ROA not before: Mon 03 Aug 2026 13:41:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12678
IP address blocks: 31.222.64.0/22 maxlen: 22
31.222.64.0/23 maxlen: 23
31.222.66.0/23 maxlen: 23
31.222.66.0/24 maxlen: 24
31.222.67.0/24 maxlen: 24
31.222.68.0/23 maxlen: 23
31.222.70.0/23 maxlen: 23
31.222.70.0/24 maxlen: 24
31.222.72.0/22 maxlen: 22
31.222.72.0/23 maxlen: 23
31.222.74.0/23 maxlen: 23
31.222.74.0/24 maxlen: 24
31.222.75.0/24 maxlen: 24
31.222.76.0/23 maxlen: 23
31.222.78.0/23 maxlen: 23
31.222.78.0/24 maxlen: 24
159.253.176.0/22 maxlen: 22
159.253.180.0/24 maxlen: 24
159.253.181.0/24 maxlen: 24
185.153.128.0/23 maxlen: 23
185.153.131.0/24 maxlen: 24
2a00:aea0:100::/40 maxlen: 40
2a00:aea0:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:dc:0f:d7:15:c1:40:72:41:92:0c:40:ef:a5:72:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505122f4dea7df3927d4011b3087d4d067f9d19a
Validity
Not Before: Aug 3 13:41:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6b37fccf1d109cc0b5433cb1f509567ee4178d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:c1:02:e4:db:5f:22:1f:74:63:b2:c8:c9:
7f:c8:64:56:5e:9b:76:05:2c:ba:04:35:5c:f6:4e:
8c:24:6b:5a:46:57:5a:27:9f:98:6c:d6:dc:cb:02:
f0:e6:4d:ae:6f:3f:e1:7c:78:d5:5f:ac:2e:b5:dc:
0c:b1:50:c8:a0:76:d0:93:87:02:38:24:d1:8a:21:
d4:b8:00:91:fc:57:92:b9:45:a3:74:64:77:10:8a:
b4:33:e6:87:f4:1e:a8:64:fc:2a:fd:38:1f:3b:8f:
ba:01:b2:31:48:08:5e:48:4e:8a:dd:b9:78:ef:ae:
6c:38:9d:6e:32:34:32:f5:7e:7f:26:f5:c4:6d:bf:
79:18:5b:6c:90:11:dc:94:a7:03:27:bd:37:83:71:
79:0e:99:33:f5:c7:a5:d9:99:27:08:18:5d:cc:e4:
64:0a:a8:06:af:cc:95:64:d0:39:42:1a:88:04:31:
95:af:3f:19:5d:b0:88:e7:51:06:78:d4:3d:75:da:
af:9a:62:36:9c:6e:b6:cd:22:cd:11:8f:5f:27:f0:
a2:e1:7f:33:4d:38:f5:79:eb:b9:bd:b8:bd:77:2b:
4e:a2:75:05:d3:ab:16:ce:fb:3a:47:0b:32:77:4e:
70:4c:9c:84:f8:98:53:b0:aa:9b:04:4a:80:f3:49:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B3:7F:CC:F1:D1:09:CC:0B:54:33:CB:1F:50:95:67:EE:41:78:D3
X509v3 Authority Key Identifier:
keyid:50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/xrN_zPHRCcwLVDPLH1CVZ-5BeNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.64.0/20
159.253.176.0-159.253.181.255
185.153.128.0/23
185.153.131.0/24
IPv6:
2a00:aea0:100::-2a00:aea0:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2b:cc:32:8f:be:3a:99:7b:25:2d:bd:65:52:6a:1f:26:02:e4:
f1:96:e9:21:7b:5a:a0:de:ef:7e:72:22:08:c8:79:82:e5:2e:
0e:5b:c2:ec:5e:41:93:ea:f8:37:1a:1d:cd:4f:f0:b7:f1:52:
05:9b:20:54:ef:f1:ad:11:ee:11:84:88:4c:fa:3a:27:08:c6:
e2:a7:7c:0e:64:ec:73:f1:b8:6e:1a:38:6b:3d:07:d0:7c:4f:
8e:39:73:bf:b2:c6:77:a4:09:d5:ae:2f:f8:4b:f0:18:53:21:
2c:2c:c0:e5:01:60:00:5f:e8:ff:06:48:ed:d7:1c:18:77:93:
f1:69:87:4e:60:ba:15:db:f6:f9:05:3d:98:78:75:1c:cb:a5:
96:51:81:8a:ac:f0:05:ad:bc:a6:2b:6a:5c:8f:7b:ae:cc:74:
ea:42:42:ff:14:16:e4:72:42:0c:25:9e:65:9a:df:d7:31:cd:
a6:39:e8:fc:fd:c0:d7:6f:86:9b:08:68:c5:d4:34:c0:4f:74:
65:71:81:c8:f7:b7:d1:9a:81:10:a7:fd:ac:9f:39:82:38:57:
5c:27:13:80:b7:57:3c:d8:ee:52:78:4f:27:ab:d4:be:b4:82:
09:49:51:2c:6a:0c:73:67:1f:b6:90:ea:6f:56:8f:e7:53:62:
92:1a:d6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:07:57 2026 by rpki-client