Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/t2qdski-o4ELbbOme88xRyINKrI.roa
File: t2qdski-o4ELbbOme88xRyINKrI.roa (raw, json)
Hash identifier: zVNZjmDQfzSEx2PRCfDU7/QNuR+Qm5DX/p7qFVK/Mk0=
Subject key identifier: B7:6A:9D:B2:48:BE:A3:81:0B:6D:B3:A6:7B:CF:31:47:22:0D:2A:B2
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 01A0B43A2EE56B4DE4FC72660E82F3118377
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/t2qdski-o4ELbbOme88xRyINKrI.roa
Signing time: Fri 18 Sep 2026 11:15:07 +0000
ROA not before: Fri 18 Sep 2026 11:15:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50130
IP address blocks: 31.129.224.0/22 maxlen: 22
31.129.224.0/23 maxlen: 23
31.129.224.0/24 maxlen: 24
31.129.225.0/24 maxlen: 24
31.129.226.0/23 maxlen: 23
31.129.226.0/24 maxlen: 24
31.129.227.0/24 maxlen: 24
31.129.228.0/23 maxlen: 23
31.129.228.0/24 maxlen: 24
31.129.229.0/24 maxlen: 24
31.129.230.0/24 maxlen: 24
31.129.234.0/24 maxlen: 24
31.129.240.0/23 maxlen: 23
31.129.242.0/23 maxlen: 23
31.129.248.0/23 maxlen: 23
31.129.248.0/24 maxlen: 24
31.129.249.0/24 maxlen: 24
31.129.250.0/24 maxlen: 24
31.129.252.0/22 maxlen: 22
31.129.252.0/23 maxlen: 23
31.129.252.0/24 maxlen: 24
31.129.253.0/24 maxlen: 24
31.129.254.0/23 maxlen: 23
31.129.254.0/24 maxlen: 24
31.129.255.0/24 maxlen: 24
213.5.197.0/24 maxlen: 24
213.5.198.0/23 maxlen: 23
213.5.198.0/24 maxlen: 24
213.5.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:3a:2e:e5:6b:4d:e4:fc:72:66:0e:82:f3:11:83:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Sep 18 11:15:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b76a9db248bea3810b6db3a67bcf3147220d2ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:0b:86:1f:f3:a4:79:bc:7c:db:35:a2:4a:
54:cb:78:3a:59:ee:c1:69:4e:81:3c:d7:a7:8b:97:
06:ff:cd:44:be:07:c9:e1:f0:31:d7:78:d7:f3:48:
a2:64:b4:f0:77:2d:84:f5:71:6b:7e:3e:5c:5e:60:
8f:98:82:ea:d5:4b:c7:46:15:fb:29:c5:91:17:4c:
23:1a:5b:59:7e:4c:00:00:c2:75:4b:3b:4d:33:04:
89:4a:a1:ea:5c:ed:f2:2c:33:6b:43:42:27:cd:51:
d0:6a:9a:ec:d2:c3:e4:ce:21:9b:50:2c:ad:e8:b1:
69:1b:fc:cb:c1:a1:7f:94:6d:b7:06:cf:6e:a3:df:
b5:95:e7:d1:4f:1a:f4:b0:16:ad:df:1b:b6:c8:c6:
df:3e:5e:07:75:10:e0:4c:b1:08:fe:33:e2:e9:6c:
47:95:95:1c:80:b3:e8:e6:77:2f:41:79:c7:e1:d0:
ab:5a:44:eb:f1:a6:9a:38:27:22:5f:a8:46:42:38:
42:dc:3f:46:1e:39:11:89:66:53:fa:cf:d4:8d:60:
4e:1a:4f:58:72:f4:72:29:2a:e5:c2:1a:2b:8f:65:
c4:af:7e:83:9c:bd:55:78:1c:73:30:58:a7:c5:3f:
54:89:44:8e:1d:57:39:76:10:62:6b:c5:e2:b3:24:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6A:9D:B2:48:BE:A3:81:0B:6D:B3:A6:7B:CF:31:47:22:0D:2A:B2
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/t2qdski-o4ELbbOme88xRyINKrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.224.0-31.129.230.255
31.129.234.0/24
31.129.240.0/22
31.129.248.0-31.129.250.255
31.129.252.0/22
213.5.197.0-213.5.199.255
Signature Algorithm: sha256WithRSAEncryption
50:e0:78:10:17:e6:de:82:fb:2c:24:fd:bf:f8:43:22:7d:78:
14:42:b5:5b:ac:84:7f:4e:97:b8:17:23:95:f3:fd:3d:f4:6e:
28:51:fc:48:4d:13:fe:33:13:f9:8d:b2:49:6e:fe:e8:4e:ea:
83:39:ac:2c:d9:c9:62:eb:21:01:01:bf:f0:f0:33:6f:21:7b:
36:f2:3b:fc:0c:59:61:21:8d:fd:e1:14:b5:1f:b7:69:e8:01:
0a:12:9f:ce:a2:f7:a1:88:fe:ac:a6:0b:4d:cd:b3:f4:2b:e4:
05:bc:64:fe:b8:73:79:49:80:22:0a:fa:59:e7:4a:a3:ce:9a:
67:5a:11:f7:53:a7:18:61:5a:a5:68:c0:01:ce:01:8f:71:d6:
34:84:87:70:30:71:8e:b1:0c:eb:da:ec:ff:a1:76:7d:30:57:
e0:2a:38:ae:b3:ca:b9:db:aa:a1:8b:06:44:35:d8:8c:38:ce:
a2:e5:df:31:88:85:79:00:01:91:13:43:be:0a:da:26:f2:a5:
ea:ac:03:89:a1:e8:a5:15:97:56:b0:85:33:7b:f2:8e:eb:8d:
b7:0d:34:5e:8a:6a:c7:e7:a3:23:ce:1e:7d:2c:27:54:69:11:
28:60:ed:9e:33:2f:33:83:21:d4:30:46:5a:01:d2:c7:3f:72:
ac:9e:0c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:57:24 2026 by rpki-client