Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/hd7rQeulDecBxJXUMXx1KtWshog.roa
File: hd7rQeulDecBxJXUMXx1KtWshog.roa (raw, json)
Hash identifier: E7bJmyCV3Xzny9dpUYDbi35SX9UwJAseA3WYq0vr1AA=
Subject key identifier: 85:DE:EB:41:EB:A5:0D:E7:01:C4:95:D4:31:7C:75:2A:D5:AC:86:88
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 019CF6C06465CE43C7AFB85B7B6F62464F92
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/hd7rQeulDecBxJXUMXx1KtWshog.roa
Signing time: Mon 16 Mar 2026 13:05:29 +0000
ROA not before: Mon 16 Mar 2026 13:05:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35614
IP address blocks: 31.128.168.0/24 maxlen: 24
31.128.170.0/24 maxlen: 24
94.124.166.0/24 maxlen: 24
193.105.7.0/24 maxlen: 24
2a0c:29c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:c0:64:65:ce:43:c7:af:b8:5b:7b:6f:62:46:4f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Mar 16 13:05:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85deeb41eba50de701c495d4317c752ad5ac8688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:56:91:56:48:6c:fd:ee:20:51:b7:25:19:
39:bb:52:1d:b8:b8:60:94:e7:b7:4a:67:30:fe:ac:
54:58:da:bf:9e:2f:75:ff:98:2a:09:ba:7e:46:2b:
93:41:d4:e3:c0:48:fc:c1:f1:21:b1:0f:1f:c9:29:
01:16:b4:5a:29:58:f8:30:57:c1:c6:05:11:d2:d5:
87:fe:77:4b:6e:50:13:a9:2e:0d:59:d5:41:3a:0f:
2d:fd:2c:35:34:ef:8c:c0:40:ec:d5:c3:c3:e2:18:
12:28:dc:97:93:5a:b7:6e:e1:3c:ac:43:87:7e:54:
23:c5:05:02:9c:6a:e8:10:3c:e2:34:64:02:41:1a:
23:c6:95:e1:eb:3b:bb:1b:56:cc:36:8a:1f:a1:a8:
6d:ec:a1:bf:f7:52:3b:06:5d:a2:8c:3a:10:b7:99:
7e:49:8d:68:07:19:85:d0:12:8a:bb:2e:de:d8:b6:
c5:07:89:93:63:f3:8d:c5:41:5f:d3:13:22:46:8c:
12:64:9d:8b:55:ff:cb:96:5e:1e:7d:e9:e1:01:f5:
2d:db:de:15:cd:86:26:d4:1b:8f:bf:3b:dd:e0:aa:
42:c7:50:e8:88:03:47:68:bb:92:42:93:a4:b8:86:
f2:00:97:20:63:31:91:64:89:13:11:01:b4:fa:8c:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DE:EB:41:EB:A5:0D:E7:01:C4:95:D4:31:7C:75:2A:D5:AC:86:88
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/hd7rQeulDecBxJXUMXx1KtWshog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.168.0/24
31.128.170.0/24
94.124.166.0/24
193.105.7.0/24
IPv6:
2a0c:29c0::/32
Signature Algorithm: sha256WithRSAEncryption
95:1c:69:7b:71:d9:a7:45:da:27:45:4a:01:b0:eb:8a:35:c4:
af:09:42:52:5f:ad:53:0b:0f:d4:16:f8:8a:de:a8:12:55:92:
03:86:cc:0e:bb:cc:63:58:79:e3:27:d8:b8:33:31:bd:9c:96:
56:13:1f:44:b4:9c:27:d1:46:f1:62:ac:fc:c8:6a:4b:c0:6d:
6b:e2:7e:43:56:67:56:bf:f9:c9:0b:e8:78:9b:8a:b3:f6:e5:
b1:4c:36:f0:89:57:2b:2e:8b:30:c8:ba:f4:96:d8:a9:e8:8a:
11:8d:36:c5:e0:de:c0:b1:b5:ba:e2:6b:7a:80:d1:a0:ce:e3:
49:c7:22:af:52:1e:c5:69:13:b6:97:5a:90:ac:6a:63:60:26:
0e:8f:97:d6:91:67:26:0b:18:4b:f6:26:f5:05:71:41:41:e8:
1f:fa:6d:31:be:74:d3:7b:1d:fa:09:17:18:99:3e:0c:2d:52:
67:25:70:c9:24:16:01:43:2b:f4:c2:c3:71:e5:bd:58:f6:33:
f9:19:08:74:7c:db:7e:68:8e:69:3a:ad:cb:f9:54:cc:c0:6c:
79:33:10:f6:6e:9c:d6:5b:6c:cc:a1:06:6f:08:22:4e:62:0c:
8f:7d:f6:5c:2c:4c:05:f2:8d:c0:46:6a:82:de:23:7b:82:d0:
ba:45:f0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:46:55 2026 by rpki-client