Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/m4dVu-qOpDMEy0CNoI_ijwYm_84.roa
File: m4dVu-qOpDMEy0CNoI_ijwYm_84.roa (raw, json)
Hash identifier: zJ8w5dvLRT/O0D7yPOx/kQvxCS0MvPW4MnrSHiWQQXw=
Subject key identifier: 9B:87:55:BB:EA:8E:A4:33:04:CB:40:8D:A0:8F:E2:8F:06:26:FF:CE
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019F894787E13D2941D72C5A19E6E1457CD5
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/m4dVu-qOpDMEy0CNoI_ijwYm_84.roa
Signing time: Wed 22 Jul 2026 10:03:14 +0000
ROA not before: Wed 22 Jul 2026 10:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197706
IP address blocks: 31.171.152.0/24 maxlen: 24
31.171.153.0/24 maxlen: 24
31.171.154.0/24 maxlen: 24
31.171.155.0/24 maxlen: 24
45.74.144.0/24 maxlen: 24
45.74.145.0/24 maxlen: 24
45.74.146.0/24 maxlen: 24
45.74.147.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
103.124.165.0/24 maxlen: 24
103.124.167.0/24 maxlen: 24
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
144.48.54.0/24 maxlen: 24
144.48.55.0/24 maxlen: 24
185.53.100.0/24 maxlen: 24
185.53.101.0/24 maxlen: 24
185.153.125.0/24 maxlen: 24
185.153.126.0/24 maxlen: 24
185.153.127.0/24 maxlen: 24
195.146.16.0/24 maxlen: 24
195.146.18.0/24 maxlen: 24
195.146.20.0/24 maxlen: 24
195.146.22.0/24 maxlen: 24
195.146.24.0/24 maxlen: 24
195.146.26.0/24 maxlen: 24
195.146.28.0/24 maxlen: 24
195.146.30.0/24 maxlen: 24
209.23.44.0/24 maxlen: 24
209.23.45.0/24 maxlen: 24
209.23.46.0/24 maxlen: 24
209.23.47.0/24 maxlen: 24
2a04:27c0::/29 maxlen: 48
2a04:27c0:fffd::/48 maxlen: 48
2a04:27c0:fffe::/48 maxlen: 48
2a09:6e40::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0d:27c4::/32 maxlen: 32
2a0d:42c0::/29 maxlen: 48
2a0d:4a40::/29 maxlen: 48
2a0d:4a46::/32 maxlen: 32
2a0e:3f00::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0e:4f05::/32 maxlen: 32
2a0e:d4c0::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0f:a880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:47:87:e1:3d:29:41:d7:2c:5a:19:e6:e1:45:7c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jul 22 10:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b8755bbea8ea43304cb408da08fe28f0626ffce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:bf:5d:d8:92:ca:df:2a:71:3d:e1:b6:d1:
31:55:3e:c4:19:3e:a1:9d:ab:96:eb:09:ce:14:ca:
a2:7e:b7:c4:f3:6a:e7:07:b8:94:e1:7e:0d:b9:cb:
2b:16:a7:b8:04:c4:6c:dc:b8:6a:6a:4d:5f:36:c0:
49:01:69:fc:ed:2c:92:ab:a5:61:c2:c3:72:f2:82:
b5:fa:55:73:8e:f5:aa:8d:e2:61:ce:33:fa:7b:f9:
87:68:15:89:93:50:88:5f:35:4a:76:be:14:ea:c7:
50:55:09:82:87:78:c7:b7:34:ac:da:51:d9:f7:2b:
49:89:ac:e8:70:8e:e2:53:28:73:ce:b9:d8:77:9b:
28:b1:ce:34:46:f9:e7:3c:17:cd:bc:63:31:5d:20:
a1:62:db:84:2e:a9:2e:ff:ac:78:a6:35:53:aa:ad:
7c:2d:32:51:73:05:0e:25:bb:dd:27:42:c7:01:cd:
4b:36:76:8d:60:74:f6:14:d0:b5:8b:22:f6:a9:ff:
4e:ad:17:2d:f6:a4:d6:b6:7d:aa:ee:a3:0b:57:e6:
fc:e7:8c:d6:9d:3b:f4:79:b4:65:61:21:2b:69:a4:
ca:d8:75:fa:46:8e:f9:41:2b:58:26:9a:26:20:33:
3b:29:1e:e5:3b:b1:ed:04:fc:f9:08:a0:9a:53:08:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:55:BB:EA:8E:A4:33:04:CB:40:8D:A0:8F:E2:8F:06:26:FF:CE
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/m4dVu-qOpDMEy0CNoI_ijwYm_84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/22
45.74.144.0/22
45.142.26.0/24
103.124.165.0/24
103.124.167.0/24
109.104.140.0/23
144.48.54.0/23
185.53.100.0/23
185.153.125.0-185.153.127.255
195.146.16.0/24
195.146.18.0/24
195.146.20.0/24
195.146.22.0/24
195.146.24.0/24
195.146.26.0/24
195.146.28.0/24
195.146.30.0/24
209.23.44.0/22
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
94:72:2f:8d:4f:86:97:88:5f:52:c7:3e:09:30:75:dc:c7:8a:
3a:c6:fe:ee:5e:a7:a8:45:18:17:2e:34:2d:de:1a:af:9a:0c:
ec:cc:0c:3e:89:65:de:e4:79:7e:23:6f:2b:cc:31:21:bc:19:
61:a9:f0:20:03:9d:6f:a9:9e:d3:80:8d:99:06:21:17:7a:6c:
3e:e6:9c:f8:54:a0:a8:f2:01:3b:bf:93:02:ab:ae:f7:b3:da:
c4:21:d7:db:f5:4f:18:da:e3:10:9c:39:78:c9:d5:77:cd:65:
9c:79:b9:6c:2c:30:54:10:17:65:f2:9e:58:27:1d:a1:13:8b:
2d:ae:4d:99:3d:f8:6c:ac:87:a9:54:fe:97:be:83:e5:e9:d7:
15:32:cb:57:fc:b5:42:ab:45:28:65:9d:c9:47:f7:79:55:7a:
e8:71:da:69:b0:d5:46:f8:de:60:e2:21:9f:68:47:98:7f:1b:
d8:a4:ac:fa:a2:11:97:3f:2c:32:32:e9:66:27:68:4f:6c:a1:
d2:84:75:36:27:4b:8d:dc:2a:4a:d6:71:80:19:da:4e:49:2b:
74:e2:75:66:c9:1e:96:30:33:3b:fd:6d:cf:fc:50:05:35:30:
45:f5:31:62:1e:9d:91:79:65:f6:2d:c7:ad:0a:3f:c6:a9:90:
66:2e:16:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:04:21 2026 by rpki-client