Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/cpt1ugrQd2rHwxe5DoZShXs9qzA.roa
File: cpt1ugrQd2rHwxe5DoZShXs9qzA.roa (raw, json)
Hash identifier: mY1xZ8RVFs4GaD6HtiYmaN9LhtKWxyqpPX89QA8Zdpk=
Subject key identifier: 72:9B:75:BA:0A:D0:77:6A:C7:C3:17:B9:0E:86:52:85:7B:3D:AB:30
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 019F7A09677A90748E7FB56AF666D25FCD65
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/cpt1ugrQd2rHwxe5DoZShXs9qzA.roa
Signing time: Sun 19 Jul 2026 11:01:04 +0000
ROA not before: Sun 19 Jul 2026 11:01:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.79.0/24 maxlen: 24
31.169.80.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.84.0/24 maxlen: 24
31.169.85.0/24 maxlen: 24
31.169.87.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
2a00:5740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7a:09:67:7a:90:74:8e:7f:b5:6a:f6:66:d2:5f:cd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jul 19 11:01:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=729b75ba0ad0776ac7c317b90e8652857b3dab30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:e3:63:73:c4:d6:11:98:b1:b0:de:25:19:
c2:ed:7c:b3:32:37:d7:f1:43:97:0e:14:3f:8f:c5:
92:be:ff:9b:c1:ef:9c:ac:d4:1b:a5:92:12:17:9b:
5c:1c:a1:d1:47:ce:c8:47:fa:13:6c:dc:3e:69:70:
47:51:2e:e6:6a:eb:bd:63:6a:55:33:02:96:c5:f9:
3d:52:b5:39:8b:e6:f3:ff:2f:50:5a:54:ff:2d:8c:
38:3d:e3:7d:1d:1a:6e:f9:28:63:97:29:47:ad:3f:
b3:d9:e8:80:63:4f:79:88:ce:cd:d3:d4:36:27:99:
f9:a4:8a:3f:39:03:28:74:26:4f:5f:2d:6c:e2:c3:
ff:12:a0:81:57:45:7e:62:62:0c:8a:9d:3a:aa:9a:
11:5f:20:55:ec:6a:a3:32:1b:db:fa:2c:5a:6a:2b:
3b:ea:c5:fb:10:e9:e6:ff:b8:6d:e9:b2:84:cd:73:
b9:33:43:58:54:dc:39:e0:ee:16:41:48:f0:50:53:
04:5b:6e:f3:74:5f:e2:6a:b3:9d:8f:85:4a:a1:73:
c8:5e:cb:c6:73:2c:86:68:3c:75:a5:25:93:53:6c:
e1:85:68:f7:07:a2:5d:cc:e4:83:c0:e6:60:81:91:
dd:e3:46:5f:42:c6:4b:67:70:96:f6:16:89:d3:11:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9B:75:BA:0A:D0:77:6A:C7:C3:17:B9:0E:86:52:85:7B:3D:AB:30
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/cpt1ugrQd2rHwxe5DoZShXs9qzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.77.0-31.169.82.255
31.169.84.0/23
31.169.87.0/24
31.169.90.0/24
31.169.92.0/22
185.33.63.0/24
IPv6:
2a00:5740::/29
Signature Algorithm: sha256WithRSAEncryption
52:99:17:16:6e:ad:a4:33:7f:60:92:a0:c0:01:d1:86:fa:20:
de:ba:b9:fa:ed:4f:03:06:b0:e7:e6:aa:44:e7:66:ec:07:5a:
67:35:3a:23:91:2d:93:e5:47:54:c4:7f:cf:77:f8:a9:d4:10:
59:8b:20:4f:db:f0:37:1a:60:d1:73:ca:dd:8e:05:72:70:7e:
96:af:f0:d4:5e:6a:11:e7:37:20:7a:c2:18:58:46:c7:57:9f:
e6:06:c8:e7:05:36:db:81:30:c4:e9:b5:a9:e8:ac:12:d3:9d:
bc:f5:b2:a5:b0:be:bd:4e:06:b1:bb:22:02:72:70:4d:50:c2:
3a:62:cd:8d:8b:91:2e:da:bd:ad:58:c7:63:c7:3f:cb:2d:13:
17:b0:45:d1:77:e6:ce:ec:7c:56:86:8e:b1:70:69:f4:a0:ae:
a7:81:86:6b:2b:bc:c4:42:c2:e7:94:e7:d6:07:53:2f:78:89:
27:e9:73:7d:76:46:90:62:82:c1:25:94:0c:77:56:fc:2e:43:
0e:56:0c:eb:c6:1c:83:bc:22:1c:1e:c0:5f:cd:a6:9f:c0:ee:
27:87:dc:d1:7b:31:e6:dc:3f:c7:5f:c8:f7:0a:a6:62:c3:c6:
7d:b0:05:0f:53:82:0b:c8:64:e3:b7:89:bc:c8:04:96:e9:7d:
1c:e0:2f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:12:14 2026 by rpki-client