Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/sJ-4q9BNKDWXPK7vQlMwv90EyeQ.roa
File: sJ-4q9BNKDWXPK7vQlMwv90EyeQ.roa (raw, json)
Hash identifier: 7N9kbNVvBQfZIqrrEUMiDoe5nVwGSES4cx8TzWr1eCA=
Subject key identifier: B0:9F:B8:AB:D0:4D:28:35:97:3C:AE:EF:42:53:30:BF:DD:04:C9:E4
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 01A02860CE076CAA248AD975CCD56EACDE59
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/sJ-4q9BNKDWXPK7vQlMwv90EyeQ.roa
Signing time: Sat 22 Aug 2026 07:30:27 +0000
ROA not before: Sat 22 Aug 2026 07:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41689
IP address blocks: 31.7.64.0/20 maxlen: 32
31.25.128.0/21 maxlen: 32
37.156.144.0/22 maxlen: 32
46.143.0.0/17 maxlen: 32
77.238.120.0/22 maxlen: 32
79.127.0.0/17 maxlen: 32
86.57.0.0/17 maxlen: 32
89.41.40.0/22 maxlen: 32
89.235.96.0/22 maxlen: 32
93.115.144.0/21 maxlen: 32
93.118.180.0/22 maxlen: 32
128.65.176.0/20 maxlen: 32
176.65.240.0/22 maxlen: 32
176.65.252.0/23 maxlen: 32
176.65.254.0/23 maxlen: 32
178.22.120.0/21 maxlen: 32
185.49.84.0/22 maxlen: 32
185.98.112.0/22 maxlen: 32
185.99.212.0/22 maxlen: 32
185.109.244.0/22 maxlen: 32
185.109.248.0/22 maxlen: 32
185.112.32.0/22 maxlen: 32
185.112.36.0/22 maxlen: 32
185.120.220.0/22 maxlen: 32
185.120.248.0/22 maxlen: 32
188.0.240.0/23 maxlen: 32
2a04:f080::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:28:60:ce:07:6c:aa:24:8a:d9:75:cc:d5:6e:ac:de:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Aug 22 07:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b09fb8abd04d2835973caeef425330bfdd04c9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:e6:6a:8c:f0:34:f9:8c:2c:c1:da:63:7c:
f7:76:37:75:a5:99:fc:94:3b:4d:49:a5:58:fd:35:
5a:84:ee:82:ed:93:37:08:f4:d3:6c:d4:ab:62:34:
f0:42:ef:a5:05:9f:58:fe:9a:12:83:01:d9:df:c1:
a1:fa:c4:fa:06:26:a5:e2:32:1c:6d:00:9e:e6:fd:
e6:73:47:72:9d:e6:8f:f9:b1:18:cd:24:11:3b:d2:
34:1d:b1:84:44:37:20:5b:32:7e:f9:84:c3:f5:c5:
34:3b:19:ff:62:e9:24:d5:f2:5e:a5:83:be:91:09:
92:67:82:ac:f7:c5:fc:e5:38:c0:d0:ae:61:37:81:
e2:19:c1:7e:0e:88:cd:ca:4f:0c:f1:42:7b:e1:4e:
5e:5c:ba:b1:f9:bd:b2:99:bb:c1:de:40:a5:5c:4d:
ec:05:14:83:64:08:3f:42:77:f0:de:c4:ee:55:1f:
80:5a:71:d2:d6:8c:c1:a1:81:a3:5a:98:bb:7d:f6:
80:c3:53:f0:6a:28:ef:f7:3c:a1:10:66:d0:9d:0d:
7d:df:58:f3:52:fe:56:42:55:50:00:89:5f:97:7a:
d6:37:46:a0:22:13:e3:be:0f:18:0f:5f:99:c2:be:
44:c9:ee:c9:51:8d:ee:ea:06:03:33:66:70:e8:8e:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:B8:AB:D0:4D:28:35:97:3C:AE:EF:42:53:30:BF:DD:04:C9:E4
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/sJ-4q9BNKDWXPK7vQlMwv90EyeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.64.0/20
31.25.128.0/21
37.156.144.0/22
46.143.0.0/17
77.238.120.0/22
79.127.0.0/17
86.57.0.0/17
89.41.40.0/22
89.235.96.0/22
93.115.144.0/21
93.118.180.0/22
128.65.176.0/20
176.65.240.0/22
176.65.252.0/22
178.22.120.0/21
185.49.84.0/22
185.98.112.0/22
185.99.212.0/22
185.109.244.0-185.109.251.255
185.112.32.0/21
185.120.220.0/22
185.120.248.0/22
188.0.240.0/23
IPv6:
2a04:f080::/29
Signature Algorithm: sha256WithRSAEncryption
56:16:47:44:14:11:a0:e9:45:a0:29:e8:e9:9f:63:2e:53:2c:
b9:fa:1a:37:7e:70:2b:bd:6c:6c:f7:83:46:2d:9d:e9:02:d9:
90:a4:ae:85:2b:42:d4:26:3a:95:17:2f:04:e7:cb:57:b7:b9:
26:02:1f:67:04:1c:04:07:11:f9:be:a1:74:4d:a7:fe:c9:2f:
d3:18:46:59:0e:5f:4b:06:bb:9d:25:a4:7f:68:13:cb:d2:1b:
75:56:e5:70:78:0d:4d:76:a3:e2:83:4b:e3:e2:aa:33:cb:e0:
eb:37:3c:37:cd:8d:a6:d7:e1:9f:4d:f4:e2:25:45:f3:45:42:
e1:81:46:36:89:95:43:5f:bd:53:5a:06:7b:54:dd:25:dc:de:
72:f4:7d:17:5a:70:34:a5:d4:a3:88:17:79:d1:ca:e4:a4:b4:
ce:32:f4:0a:b0:bf:6e:3d:41:f9:0c:d2:ac:ad:d2:51:52:46:
b2:79:9c:f1:d4:6f:30:57:23:17:fa:40:13:54:7b:59:57:61:
77:b8:2f:99:2c:04:8a:ff:f3:46:a4:0f:14:46:bd:c8:f2:53:
a5:24:75:d9:4e:02:e9:a1:10:c0:c9:74:a2:0b:0f:b6:0b:c7:
c1:44:a9:ed:0c:b7:aa:39:7a:6e:19:29:b1:66:95:5a:ef:03:
e7:78:49:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:34 2026 by rpki-client