Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Exw5ucX_DTZAqftvzB_tiMJmNio.roa
File: Exw5ucX_DTZAqftvzB_tiMJmNio.roa (raw, json)
Hash identifier: crboo3yoFCj84uGTqVnREI8e5VPuLqqMlZcXyMLzTeo=
Subject key identifier: 13:1C:39:B9:C5:FF:0D:36:40:A9:FB:6F:CC:1F:ED:88:C2:66:36:2A
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019D6E0ADDBB9135AE224399DB10F37E4E67
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Exw5ucX_DTZAqftvzB_tiMJmNio.roa
Signing time: Wed 08 Apr 2026 17:01:39 +0000
ROA not before: Wed 08 Apr 2026 17:01:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 31.187.92.0/22 maxlen: 24
91.210.80.0/22 maxlen: 24
94.101.103.0/24 maxlen: 24
95.178.8.0/21 maxlen: 24
95.215.144.0/22 maxlen: 24
116.50.16.0/21 maxlen: 24
141.193.108.0/22 maxlen: 24
162.250.216.0/22 maxlen: 24
176.222.48.0/22 maxlen: 24
188.215.12.0/22 maxlen: 24
192.109.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 20:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6e:0a:dd:bb:91:35:ae:22:43:99:db:10:f3:7e:4e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Apr 8 17:01:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=131c39b9c5ff0d3640a9fb6fcc1fed88c266362a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:52:9f:3a:d8:e5:9d:a3:0a:9b:f2:75:6b:
34:e2:2b:b2:29:2c:80:0b:89:65:35:46:00:fa:45:
0f:f5:fc:6a:86:32:e5:95:40:cf:68:97:13:c9:4a:
59:14:5a:ee:87:e7:de:0d:e8:a1:0e:ea:fe:4a:00:
90:db:ea:de:13:98:ba:ad:7f:2d:ca:51:c5:ae:d2:
05:54:6a:ab:3d:66:e9:1a:3c:67:3c:68:24:d0:6b:
aa:3e:b0:59:9e:cc:d8:6d:52:43:83:aa:1d:07:16:
67:9f:73:40:24:80:ee:2d:ae:ac:bf:a9:fd:ab:b4:
46:94:49:f4:99:41:2e:19:48:d0:c8:7c:02:ae:4f:
79:70:0c:9c:0a:19:54:d8:a4:aa:59:a3:3a:c5:90:
9c:8f:42:c8:db:f8:25:8f:98:61:66:3c:1e:e0:4d:
59:86:dc:72:d5:7c:70:78:44:76:87:58:21:a8:a7:
55:23:58:bf:05:7c:0d:58:e5:2f:8e:4b:dd:ed:48:
0d:d3:0e:54:97:08:9a:06:b5:ba:02:8b:a0:ab:ab:
f5:13:3f:fc:19:1a:22:17:c9:99:89:a5:41:9e:12:
88:83:e2:18:a3:47:96:0f:50:38:68:4a:60:4b:99:
a8:ad:f3:c8:de:2b:f1:4d:48:c3:fc:95:3c:1d:43:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1C:39:B9:C5:FF:0D:36:40:A9:FB:6F:CC:1F:ED:88:C2:66:36:2A
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Exw5ucX_DTZAqftvzB_tiMJmNio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.92.0/22
91.210.80.0/22
94.101.103.0/24
95.178.8.0/21
95.215.144.0/22
116.50.16.0/21
141.193.108.0/22
162.250.216.0/22
176.222.48.0/22
188.215.12.0/22
192.109.205.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b9:8b:c1:b9:75:2f:0c:9e:5e:67:e0:bf:45:0a:99:02:d2:
14:57:90:db:fa:86:30:98:11:03:3e:d9:08:bd:b7:42:69:f0:
34:89:bb:02:db:da:29:20:50:3f:40:ab:5c:2b:d8:83:29:d5:
02:ef:65:cd:26:24:de:d6:6f:c7:53:6d:1d:d1:15:00:f7:15:
d5:bd:45:7a:f0:b8:48:c2:91:b5:06:39:b3:12:5e:fa:e4:bf:
ae:f9:ff:cb:93:51:23:d5:63:f1:95:89:24:71:d6:4b:38:d9:
80:34:c9:3e:35:30:b0:67:00:b2:aa:97:c5:c1:d3:7f:80:62:
59:dd:10:70:cb:bb:92:4a:ba:71:1d:24:7e:74:35:9f:e0:5b:
26:62:7e:03:76:b9:8b:3c:73:42:88:36:97:db:e4:16:14:4c:
cd:5c:87:0c:78:be:bd:a2:63:7b:91:e5:19:17:77:a7:12:24:
aa:e3:97:72:9b:a1:12:54:08:f9:c0:3e:df:d3:f3:36:f6:c8:
24:07:51:22:cc:9d:4e:bd:55:f3:c4:ec:4c:8c:21:79:9e:a6:
28:2c:27:29:21:9c:60:e8:11:1c:dd:ab:c6:85:3f:76:d3:95:
63:43:41:d5:d2:8a:7b:98:62:d8:01:ea:bd:ef:61:97:82:84:
3e:e7:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 02:25:19 2026 by rpki-client