Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/96P1nIjbXPuz78Gq-lYqup2EtBw.roa
File: 96P1nIjbXPuz78Gq-lYqup2EtBw.roa (raw, json)
Hash identifier: BqURLxjdQgOG/n2c1b80sQ4FiFp1lPgmOh4UQfeven0=
Subject key identifier: F7:A3:F5:9C:88:DB:5C:FB:B3:EF:C1:AA:FA:56:2A:BA:9D:84:B4:1C
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 019ED9A93ED438B36478DC935197CBFF0609
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/96P1nIjbXPuz78Gq-lYqup2EtBw.roa
Signing time: Thu 18 Jun 2026 07:36:48 +0000
ROA not before: Thu 18 Jun 2026 07:36:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35614
IP address blocks: 31.128.168.0/24 maxlen: 24
31.128.170.0/23 maxlen: 23
31.128.170.0/24 maxlen: 24
94.124.166.0/24 maxlen: 24
193.105.7.0/24 maxlen: 24
2a0c:29c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:a9:3e:d4:38:b3:64:78:dc:93:51:97:cb:ff:06:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Jun 18 07:36:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7a3f59c88db5cfbb3efc1aafa562aba9d84b41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:ac:26:67:a1:08:e0:73:04:50:32:be:2e:
c6:a4:07:06:ce:f0:9d:1b:03:9f:89:88:11:91:2a:
62:4d:67:cb:a4:10:52:50:ae:20:67:ea:0c:fd:98:
24:67:41:8a:68:15:53:fc:50:88:ed:95:75:d1:c7:
a2:85:31:1b:17:aa:26:f4:3c:01:d7:30:bb:8b:03:
a8:37:4e:1c:49:db:01:20:0d:d7:ba:18:dc:e6:58:
dd:c8:86:ff:0f:21:5a:09:f4:b3:67:17:eb:51:7f:
4b:7b:da:78:73:bb:30:27:2e:a8:01:4e:75:31:6c:
c1:82:7b:54:8d:a4:f1:a4:22:1d:69:48:15:72:c4:
0e:a9:57:33:5e:40:14:1e:a2:91:ba:e2:e9:ab:f2:
8f:46:71:1e:ae:b1:be:82:6c:6b:f1:a1:26:84:0b:
41:79:e2:f6:6b:0a:0d:64:8a:37:93:ea:06:f7:32:
c8:25:3c:63:8d:29:e7:37:bd:02:8e:93:a7:c1:1e:
c8:66:8c:92:ca:1c:e4:1e:52:86:a8:37:60:4b:be:
5f:1b:7e:d7:c9:2a:d4:1c:b2:4d:3d:ff:90:2d:4f:
74:37:ba:8d:cc:93:95:d5:10:13:e4:d3:26:ce:58:
b8:21:fd:35:0a:c9:c0:a4:88:a6:96:d2:ed:4e:6f:
c1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A3:F5:9C:88:DB:5C:FB:B3:EF:C1:AA:FA:56:2A:BA:9D:84:B4:1C
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/96P1nIjbXPuz78Gq-lYqup2EtBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.168.0/24
31.128.170.0/23
94.124.166.0/24
193.105.7.0/24
IPv6:
2a0c:29c0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:5a:c4:4e:11:d3:83:a5:c7:49:d9:27:89:2a:20:0d:c0:75:
0e:2f:69:4c:d5:8e:64:8b:88:34:f7:c6:7b:af:a6:09:7e:32:
b1:a7:f0:0a:22:bf:d8:a7:38:03:05:17:49:f8:9f:5e:bd:d6:
91:42:86:83:0a:b6:78:47:83:f1:7b:63:66:13:b7:52:7b:4c:
f3:32:d3:83:a5:c5:9c:0c:bb:38:b3:88:54:1f:a0:57:cd:23:
83:3c:8b:92:2c:d8:1c:2c:70:f7:c7:be:14:c2:c1:34:3b:49:
88:b7:e2:ff:10:c4:27:98:c9:d2:49:c7:5e:64:ca:af:2b:3c:
27:4f:5a:06:82:e6:da:13:2f:9d:f5:63:14:57:54:ee:98:4e:
97:12:05:3d:7d:94:e5:5a:e2:88:2a:9e:46:fc:85:4d:91:dd:
90:c3:66:e7:66:6d:ed:c0:5c:7a:29:9d:88:66:13:18:1f:52:
42:97:17:a9:ee:d7:8c:e2:57:59:43:e9:d4:d1:81:8c:8f:3a:
53:46:21:ea:71:19:68:0d:7a:1f:14:7e:87:dd:2d:24:31:6e:
10:05:01:e8:38:fb:3d:fb:05:9e:64:e1:96:9d:6a:f2:64:c0:
d9:4c:26:95:3c:85:d4:c9:38:85:61:df:92:2d:1f:f9:0f:fd:
bc:d7:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:00:30 2026 by rpki-client