Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/JdAcrT3uln-8JiCxgK6oIqzKTOA.roa
File: JdAcrT3uln-8JiCxgK6oIqzKTOA.roa (raw, json)
Hash identifier: dIb2jT3iWQNSuT3k4NrPPXV/I/Z0OOjAmtCYJBKtyMs=
Subject key identifier: 25:D0:1C:AD:3D:EE:96:7F:BC:26:20:B1:80:AE:A8:22:AC:CA:4C:E0
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 019DF2E0743604FB62AE40EF9256AE21CB88
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/JdAcrT3uln-8JiCxgK6oIqzKTOA.roa
Signing time: Mon 04 May 2026 12:04:49 +0000
ROA not before: Mon 04 May 2026 12:04:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206943
IP address blocks: 31.42.128.0/20 maxlen: 20
31.42.146.0/23 maxlen: 23
31.42.148.0/22 maxlen: 22
31.42.152.0/24 maxlen: 24
31.42.154.0/23 maxlen: 23
178.159.64.0/20 maxlen: 20
178.218.128.0/22 maxlen: 22
178.218.132.0/22 maxlen: 22
185.171.28.0/23 maxlen: 23
185.171.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:e0:74:36:04:fb:62:ae:40:ef:92:56:ae:21:cb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: May 4 12:04:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25d01cad3dee967fbc2620b180aea822acca4ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:98:2b:89:88:10:6a:91:dd:72:f9:0c:d2:
d6:6a:1c:a6:a7:3d:6f:2e:39:d4:10:71:e1:18:e9:
48:cf:ba:fc:a8:cc:2e:8f:43:d2:b9:3d:81:e7:01:
ff:35:a5:26:e6:bd:81:db:7d:42:9f:49:6e:4c:33:
e8:9b:1b:5e:23:bd:96:be:ae:cf:d9:8a:38:83:62:
90:f4:6a:08:51:a3:fc:a7:71:e4:66:a5:3c:c5:e3:
e9:90:d3:2d:43:0c:53:e3:cf:1b:ef:c0:6f:1b:34:
8a:a9:ad:25:10:d2:a5:36:d6:a4:df:11:db:97:64:
d2:91:3d:82:41:55:b3:ef:f7:30:3d:38:0f:f0:df:
7a:41:22:2e:32:42:a5:e4:a2:dd:f7:e1:c2:59:b0:
3d:ac:dd:f7:fd:21:1b:71:ed:b2:ec:fe:ce:f1:ce:
c6:8a:0b:32:16:92:79:22:67:4d:c8:36:6c:90:89:
3a:1c:33:79:72:62:49:99:3d:1b:0f:82:8e:04:cc:
a6:e2:46:4b:f8:eb:49:ee:62:a4:c0:b5:0f:9d:37:
63:37:d1:d0:0c:07:77:7a:ad:ee:b0:14:d0:c3:8d:
0f:d9:2a:1e:0c:5b:44:cc:00:34:28:92:dd:38:32:
22:58:ca:02:9c:70:97:9a:3e:bf:3c:59:ba:8b:0c:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D0:1C:AD:3D:EE:96:7F:BC:26:20:B1:80:AE:A8:22:AC:CA:4C:E0
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/JdAcrT3uln-8JiCxgK6oIqzKTOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.128.0/20
31.42.146.0-31.42.152.255
31.42.154.0/23
178.159.64.0/20
178.218.128.0/21
185.171.28.0/22
Signature Algorithm: sha256WithRSAEncryption
14:bf:c3:ad:86:7f:c9:06:9c:56:eb:57:ee:1d:1e:3d:12:67:
f5:fd:98:7e:dd:82:18:d1:f5:a7:b5:d3:1d:9b:34:6f:bd:11:
63:fa:af:f9:e6:50:8c:f4:b1:4b:0f:1f:db:65:ba:77:52:4a:
0f:aa:01:10:b2:b4:0e:e0:39:f9:7e:f6:4f:9b:37:1b:b7:07:
08:b8:fe:a9:e6:68:ce:53:90:dd:a7:39:0c:cb:39:5b:3b:c7:
7b:23:69:f3:a6:de:1a:73:60:28:10:ba:3d:7e:09:ca:48:f5:
cb:dd:c4:24:22:de:ab:b2:c7:2f:a6:0c:16:40:10:57:78:6b:
3a:79:ac:73:ea:76:19:8e:c4:f4:eb:d3:41:25:75:8d:2b:4f:
6d:d7:5c:4d:58:27:ae:5e:bd:20:bf:64:aa:a7:30:84:fb:64:
68:56:d5:68:4b:20:3f:e6:e2:a1:cc:40:30:4b:05:12:0d:bb:
eb:74:1d:85:0d:95:00:a3:c2:a9:7f:5d:f8:c1:a6:bc:93:58:
5b:2d:86:f2:8d:fc:43:b0:66:7b:d2:6b:8a:df:d1:a6:07:4d:
72:71:f0:2a:05:57:55:51:fb:12:4f:02:75:11:2f:fc:45:36:
52:d2:dd:38:51:f2:ae:ce:d1:bc:a4:60:eb:5f:4c:7a:1c:1c:
0d:5f:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:17:30 2026 by rpki-client