Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/r0L_fw2UIn4XIEtLQaD9FAZkIik.roa
File: r0L_fw2UIn4XIEtLQaD9FAZkIik.roa (raw, json)
Hash identifier: BdNMAuELXiRtJWYpCqHDZ0xqtLc1of7WQEm7b/IfqOA=
Subject key identifier: AF:42:FF:7F:0D:94:22:7E:17:20:4B:4B:41:A0:FD:14:06:64:22:29
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 01A11B3B05DA2C6A28495B35AF3D9FD0DF85
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/r0L_fw2UIn4XIEtLQaD9FAZkIik.roa
Signing time: Thu 08 Oct 2026 11:16:55 +0000
ROA not before: Thu 08 Oct 2026 11:16:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47764
IP address blocks: 31.177.104.0/22 maxlen: 22
2a14:25c0::/32 maxlen: 32
2a14:25c6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:3b:05:da:2c:6a:28:49:5b:35:af:3d:9f:d0:df:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Oct 8 11:16:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af42ff7f0d94227e17204b4b41a0fd1406642229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:15:2f:dc:23:19:c5:c5:70:81:b8:59:31:
81:e8:8c:ab:fb:87:17:a5:7c:b6:12:70:98:3d:e8:
65:a6:b1:f2:ca:3c:01:c2:73:00:93:43:0e:fe:25:
9b:82:83:27:a0:1f:0e:1c:20:cb:ae:92:6d:10:aa:
c8:81:52:ec:c9:95:64:f7:42:63:81:c6:77:30:f9:
8f:af:2a:aa:86:16:40:40:98:76:e9:b5:52:1d:ec:
3d:04:b3:f1:37:41:4d:1e:2c:7e:f9:7e:88:5a:71:
05:94:b9:1d:ae:9e:81:78:d3:1f:20:ba:5d:34:e9:
13:6e:ff:b5:24:03:b7:1e:7f:21:b2:5d:3a:06:b7:
38:74:9a:7e:de:63:f3:86:5d:10:10:dd:d4:27:68:
40:5d:1f:8c:b5:a3:9b:98:af:58:e8:1b:3b:b7:9f:
93:24:db:4f:49:e4:d4:b7:49:91:4a:bb:ca:e6:66:
b7:21:49:69:95:da:28:12:5f:d7:1c:70:22:7b:97:
e0:f0:58:bd:50:e4:92:81:22:80:02:09:07:51:f5:
5a:4f:97:b8:80:f2:96:4e:42:f3:21:9c:f3:da:e0:
9f:95:3e:9b:16:f3:d0:31:81:e8:1a:29:4e:e3:61:
e9:49:7d:95:24:f8:8b:21:27:04:26:e1:3a:a8:20:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:42:FF:7F:0D:94:22:7E:17:20:4B:4B:41:A0:FD:14:06:64:22:29
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/r0L_fw2UIn4XIEtLQaD9FAZkIik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.104.0/22
IPv6:
2a14:25c0::/32
2a14:25c6::/32
Signature Algorithm: sha256WithRSAEncryption
6b:90:4a:22:c4:f9:ae:6b:cd:8d:e6:25:72:cf:a3:a3:ed:b3:
8e:e6:4e:75:41:b2:06:ac:f6:20:00:01:15:7a:ee:98:91:61:
86:e7:5e:49:c2:cb:2c:0d:48:ab:c1:97:82:46:a2:be:39:33:
9d:af:ee:d7:8b:e6:9c:35:bb:5c:29:79:e2:28:8a:35:4f:34:
be:a9:8d:ec:3c:7f:3c:72:73:52:9d:6b:9c:ef:1a:ff:79:d4:
0e:be:dd:22:b1:5a:bb:c3:31:75:08:ee:eb:f2:de:18:e8:18:
1e:cb:59:e5:91:7f:ac:94:d4:a6:c1:38:44:68:a7:69:bc:db:
64:23:63:d3:7b:e6:f8:78:16:87:09:c9:49:95:89:25:23:12:
ea:dd:81:f2:ee:aa:b6:a6:ea:1f:8f:dd:c2:f3:32:a4:b7:b0:
0f:9f:a4:af:9a:47:5f:ad:55:32:51:f5:4c:9f:19:36:1d:af:
dd:27:2e:9a:18:e4:39:01:ff:50:c7:43:03:11:f7:7d:39:9f:
1d:59:dd:91:eb:df:16:83:31:ae:b2:8c:f7:c8:ec:2b:f2:f7:
bc:60:42:d4:25:8e:2e:3c:c7:72:83:92:24:2f:d3:e7:54:b4:
6a:17:89:f7:d9:64:57:8f:e4:65:02:6f:f6:a8:b3:3b:aa:22:
06:ab:ea:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:50 2026 by rpki-client