Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/jltpBKXiQBCP3TAqLQdxnsIEzXE.roa
File: jltpBKXiQBCP3TAqLQdxnsIEzXE.roa (raw, json)
Hash identifier: G4dhanvX94kK84q1bgMQYY5NYjqmSMrIZgDUfvnVnxI=
Subject key identifier: 8E:5B:69:04:A5:E2:40:10:8F:DD:30:2A:2D:07:71:9E:C2:04:CD:71
Certificate issuer: /CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Certificate serial: 019F2368368389FA1B38E27B7E248BBD4422
Authority key identifier: 37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/jltpBKXiQBCP3TAqLQdxnsIEzXE.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209854
IP address blocks: 31.42.128.0/24 maxlen: 24
31.42.129.0/24 maxlen: 24
31.42.131.0/24 maxlen: 24
31.42.144.0/24 maxlen: 24
31.42.145.0/24 maxlen: 24
31.42.153.0/24 maxlen: 24
185.206.58.0/24 maxlen: 24
185.206.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:36:83:89:fa:1b:38:e2:7b:7e:24:8b:bd:44:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e5b6904a5e240108fdd302a2d07719ec204cd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:55:7c:6e:f3:ff:1d:be:70:97:78:47:40:
b2:43:b1:3d:aa:b5:9e:eb:7b:c1:88:96:ad:29:bd:
85:15:c4:0d:d7:8d:81:cf:69:2d:a2:32:db:c5:a4:
e9:16:80:c0:4a:22:0c:66:82:d2:08:7c:10:a8:92:
90:38:e1:49:41:1b:09:ea:1d:f1:7c:89:23:ee:d0:
d9:b3:88:d3:cd:60:ef:d0:16:38:0c:95:e7:b6:75:
3f:5a:00:82:f6:90:02:36:e1:99:79:d7:8c:f7:8b:
fc:64:27:37:55:df:13:34:93:09:7f:ad:c3:6d:46:
dc:4a:ad:9f:53:ec:d5:87:f2:09:7d:94:21:aa:d9:
c0:d5:51:e9:e3:09:bf:d7:bd:8d:67:fb:de:6e:d4:
a9:a5:dd:57:de:2b:db:8a:2c:5e:b9:92:80:1a:85:
66:b8:25:aa:41:c4:79:ba:d5:0e:68:2c:ee:e5:e9:
94:3e:55:73:08:21:f8:c4:67:3b:7a:79:85:5d:1f:
7b:12:fb:1f:19:7a:aa:a7:88:b9:28:17:d8:69:f8:
4c:5b:92:80:c3:64:fb:47:e3:50:ff:40:32:93:59:
c7:88:51:0d:7f:02:99:10:a0:b9:fd:23:a9:dd:3a:
9d:ba:d8:d2:b5:ad:51:55:bc:b1:b4:21:e4:f7:85:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5B:69:04:A5:E2:40:10:8F:DD:30:2A:2D:07:71:9E:C2:04:CD:71
X509v3 Authority Key Identifier:
keyid:37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/jltpBKXiQBCP3TAqLQdxnsIEzXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.128.0/23
31.42.131.0/24
31.42.144.0/23
31.42.153.0/24
185.206.58.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:33:f2:c6:00:93:27:bb:2a:d2:ab:d6:b5:df:4e:13:58:8f:
81:d0:27:29:bf:85:63:fc:98:30:ef:f3:75:29:5f:c5:9f:71:
41:56:d1:74:1a:c1:71:52:e2:39:4a:3d:3c:ff:cd:4e:41:65:
e0:aa:01:9e:46:ff:58:a2:99:a2:28:81:2a:92:86:5f:c0:c5:
e0:ec:c2:60:c9:0e:bd:75:58:64:6d:43:36:52:8b:9c:0c:11:
e0:51:86:74:39:fc:71:84:bb:d0:72:93:50:02:1d:5f:ff:49:
e2:2b:ac:29:74:9c:e8:f0:18:79:ea:15:ad:eb:c1:b3:93:1b:
4e:3f:22:d1:06:d8:4f:ed:04:60:e9:54:ad:98:49:d5:dc:c2:
de:ff:6c:84:14:9e:c3:ca:79:53:a5:cc:91:3a:4a:9f:25:3a:
ee:ba:cd:87:b5:b6:22:4f:f6:23:7e:cb:f1:b4:46:d8:01:c1:
45:1d:8c:59:73:c9:c7:db:ff:4c:4a:3a:d7:72:b9:93:46:31:
62:ae:f9:8c:14:05:00:67:66:f0:6f:09:9e:b2:62:93:ce:f8:
5e:41:49:53:56:3c:13:74:f5:c5:e7:02:3c:91:88:ed:69:cc:
2a:9b:16:3d:10:d7:a2:c7:9c:fe:ee:76:d8:24:fc:b4:4a:8b:
8b:90:1b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:33 2026 by rpki-client