Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/g142ZjTKlmXeOdYRyjv9LJ2VbIg.roa
File: g142ZjTKlmXeOdYRyjv9LJ2VbIg.roa (raw, json)
Hash identifier: ol20StyEmJtz4MmrTLsX4vBN9oBlWbLnJQFdG9RqacU=
Subject key identifier: 83:5E:36:66:34:CA:96:65:DE:39:D6:11:CA:3B:FD:2C:9D:95:6C:88
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019F1F46D5C9530174F26EE99FE5EEF5C5B3
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/g142ZjTKlmXeOdYRyjv9LJ2VbIg.roa
Signing time: Wed 01 Jul 2026 20:02:43 +0000
ROA not before: Wed 01 Jul 2026 20:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21245
IP address blocks: 31.3.0.0/24 maxlen: 24
31.3.1.0/24 maxlen: 24
31.3.2.0/24 maxlen: 24
31.3.3.0/24 maxlen: 24
31.3.4.0/24 maxlen: 24
31.3.5.0/24 maxlen: 24
31.3.6.0/24 maxlen: 24
31.3.7.0/24 maxlen: 24
80.91.216.0/24 maxlen: 24
91.208.32.0/24 maxlen: 24
103.199.232.0/24 maxlen: 24
103.199.233.0/24 maxlen: 24
103.199.234.0/24 maxlen: 24
103.199.235.0/24 maxlen: 24
146.19.176.0/24 maxlen: 24
185.21.180.0/24 maxlen: 24
185.21.181.0/24 maxlen: 24
185.21.182.0/24 maxlen: 24
185.21.183.0/24 maxlen: 24
185.22.160.0/24 maxlen: 24
185.22.161.0/24 maxlen: 24
185.22.162.0/24 maxlen: 24
185.22.163.0/24 maxlen: 24
185.87.172.0/24 maxlen: 24
185.87.173.0/24 maxlen: 24
185.87.174.0/24 maxlen: 24
185.87.175.0/24 maxlen: 24
185.155.102.0/24 maxlen: 24
185.201.196.0/24 maxlen: 24
185.201.197.0/24 maxlen: 24
185.201.198.0/24 maxlen: 24
185.201.199.0/24 maxlen: 24
185.230.16.0/24 maxlen: 24
185.230.17.0/24 maxlen: 24
185.230.19.0/24 maxlen: 24
185.235.10.0/24 maxlen: 24
185.241.63.0/24 maxlen: 24
2a03:3f00::/48 maxlen: 48
2a03:3f00:1::/48 maxlen: 48
2a03:3f00:2::/48 maxlen: 48
2a03:3f00:3::/48 maxlen: 48
2a03:3f00:4::/48 maxlen: 48
2a03:3f00:5::/48 maxlen: 48
2a03:3f00:6::/48 maxlen: 48
2a03:3f00:7::/48 maxlen: 48
2a03:3f00:10::/48 maxlen: 48
2a03:3f00:17::/48 maxlen: 48
2a03:3f00:19::/48 maxlen: 48
2a03:3f00:31::/48 maxlen: 48
2a03:3f00:cc::/48 maxlen: 48
2a03:3f00:d8::/48 maxlen: 48
2a03:3f00:160::/48 maxlen: 48
2a03:3f00:161::/48 maxlen: 48
2a03:3f00:162::/48 maxlen: 48
2a03:3f00:163::/48 maxlen: 48
2a03:3f00:172::/48 maxlen: 48
2a03:3f00:174::/48 maxlen: 48
2a03:3f00:175::/48 maxlen: 48
2a03:3f00:180::/48 maxlen: 48
2a03:3f00:181::/48 maxlen: 48
2a03:3f00:182::/48 maxlen: 48
2a03:3f00:183::/48 maxlen: 48
2a03:3f00:3e7::/48 maxlen: 48
2a03:3f00:3e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1f:46:d5:c9:53:01:74:f2:6e:e9:9f:e5:ee:f5:c5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Jul 1 20:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=835e366634ca9665de39d611ca3bfd2c9d956c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:ac:eb:77:ae:bf:68:b2:dd:a7:a8:bf:4a:
e2:af:a5:9d:65:8a:3e:b5:b6:3c:ef:15:81:37:ad:
0c:04:3e:c1:58:e5:29:cb:8c:c4:49:c2:7e:78:fd:
1f:da:9b:d1:f7:a2:c8:80:82:a1:1e:d0:72:10:47:
81:1c:b5:e7:03:c7:d5:28:0a:bc:80:b1:f7:f4:77:
fa:d1:d5:4c:67:e6:f1:f3:0e:fc:6e:89:bb:a6:57:
64:73:5e:4e:70:dd:f3:c4:3e:ad:9b:d4:45:6e:b2:
42:4b:2a:ea:ac:b0:4d:0c:5c:dd:75:6e:c9:90:57:
6d:2e:65:f3:32:01:41:36:f4:d6:fb:ae:66:43:c8:
a8:04:31:f6:e2:05:73:47:20:e9:12:51:cb:30:a6:
b2:0d:a1:f0:b0:57:18:2a:6f:c9:6b:35:2c:82:bd:
89:7b:76:5a:cd:88:89:7d:8b:62:b9:4d:6b:e1:c6:
81:50:4c:e5:b9:be:1d:70:d1:7c:8c:2f:e5:fc:2f:
0c:0c:35:96:12:17:4a:1a:af:55:a3:33:b7:a7:13:
97:fb:7b:c0:41:b3:3b:f9:64:04:da:ad:1f:5f:7d:
88:c7:fc:19:ed:19:f5:1c:57:fc:cc:c0:8c:ad:e3:
f8:a5:f9:1b:2e:dd:72:10:e4:48:4c:c0:f5:a1:12:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5E:36:66:34:CA:96:65:DE:39:D6:11:CA:3B:FD:2C:9D:95:6C:88
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/g142ZjTKlmXeOdYRyjv9LJ2VbIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.0.0/21
80.91.216.0/24
91.208.32.0/24
103.199.232.0/22
146.19.176.0/24
185.21.180.0/22
185.22.160.0/22
185.87.172.0/22
185.155.102.0/24
185.201.196.0/22
185.230.16.0/23
185.230.19.0/24
185.235.10.0/24
185.241.63.0/24
IPv6:
2a03:3f00::/45
2a03:3f00:10::/48
2a03:3f00:17::/48
2a03:3f00:19::/48
2a03:3f00:31::/48
2a03:3f00:cc::/48
2a03:3f00:d8::/48
2a03:3f00:160::/46
2a03:3f00:172::/48
2a03:3f00:174::/47
2a03:3f00:180::/46
2a03:3f00:3e7::-2a03:3f00:3e8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
22:93:5e:9b:d8:27:a7:f1:92:ab:f2:57:05:39:2a:d6:b6:7e:
61:66:0a:fe:64:32:93:e2:9e:68:4d:b6:03:99:2e:3c:ae:12:
57:b7:a8:00:44:54:79:ae:41:87:6e:f0:25:e5:dc:02:c9:2c:
ef:3d:38:90:fd:c7:d2:97:b4:09:63:2a:0b:3c:ed:71:51:e2:
28:c6:25:b6:d2:e5:d7:b2:4e:15:9a:2b:4d:99:46:ce:8f:30:
2e:3e:bd:c2:1b:dd:9b:08:a9:10:41:35:41:d2:62:0a:fe:87:
d5:ad:c8:60:fb:d8:b4:db:76:5a:53:4a:e8:f9:4d:80:41:21:
b8:3b:04:d9:73:19:8b:86:58:2e:ac:99:1d:b2:fc:00:58:dc:
d9:68:ec:4d:23:48:2c:52:bf:65:85:66:41:67:31:ae:c6:12:
1a:01:2c:e1:12:41:f0:bc:13:33:2e:ee:24:5e:2e:26:74:d6:
00:0d:0f:8a:19:db:02:89:07:00:e0:a4:f8:f8:55:ad:f2:62:
a8:d4:78:e7:0a:29:11:08:ea:5f:9c:49:23:15:5d:a4:a6:32:
50:53:5b:e8:31:cf:af:9c:58:a6:0d:a0:a6:3e:5c:6b:d6:f4:
a5:c2:15:b0:16:87:c1:3c:2c:c1:3e:63:58:06:a2:43:73:55:
fb:a0:ff:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:37:45 2026 by rpki-client