Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/rgI7FPs8jbpo_GMkKouP8zist9Q.roa
File: rgI7FPs8jbpo_GMkKouP8zist9Q.roa (raw, json)
Hash identifier: EscM4EuGnUOOMHuiltw3cIM14zp8+hPF04h/3RO9K78=
Subject key identifier: AE:02:3B:14:FB:3C:8D:BA:68:FC:63:24:2A:8B:8F:F3:38:AC:B7:D4
Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial: 01A0C96C84014CE79008D39863DD69CEA9BC
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/rgI7FPs8jbpo_GMkKouP8zist9Q.roa
Signing time: Tue 22 Sep 2026 14:02:07 +0000
ROA not before: Tue 22 Sep 2026 14:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208951
IP address blocks: 31.44.0.0/22 maxlen: 22
31.44.0.0/24 maxlen: 24
31.44.1.0/24 maxlen: 24
31.44.2.0/24 maxlen: 24
31.44.3.0/24 maxlen: 24
31.44.4.0/24 maxlen: 24
31.44.5.0/24 maxlen: 24
31.44.6.0/24 maxlen: 24
31.44.7.0/24 maxlen: 24
45.14.48.0/22 maxlen: 22
45.14.48.0/24 maxlen: 24
45.14.49.0/24 maxlen: 24
45.14.50.0/24 maxlen: 24
45.14.51.0/24 maxlen: 24
45.133.16.0/22 maxlen: 22
45.133.16.0/24 maxlen: 24
45.133.17.0/24 maxlen: 24
45.133.18.0/24 maxlen: 24
45.133.19.0/24 maxlen: 24
45.138.24.0/23 maxlen: 23
45.138.24.0/24 maxlen: 24
45.138.25.0/24 maxlen: 24
45.138.26.0/24 maxlen: 24
45.138.27.0/24 maxlen: 24
45.159.172.0/24 maxlen: 24
45.159.173.0/24 maxlen: 24
45.159.174.0/24 maxlen: 24
45.159.175.0/24 maxlen: 24
78.111.84.0/22 maxlen: 22
78.111.84.0/24 maxlen: 24
78.111.85.0/24 maxlen: 24
78.111.86.0/24 maxlen: 24
78.111.88.0/23 maxlen: 23
78.111.90.0/23 maxlen: 23
78.111.90.0/24 maxlen: 24
78.111.91.0/24 maxlen: 24
92.246.128.0/24 maxlen: 24
92.246.129.0/24 maxlen: 24
92.246.130.0/24 maxlen: 24
92.246.131.0/24 maxlen: 24
94.141.96.0/24 maxlen: 24
94.141.97.0/24 maxlen: 24
94.141.98.0/24 maxlen: 24
94.141.99.0/24 maxlen: 24
109.207.168.0/24 maxlen: 24
109.207.169.0/24 maxlen: 24
109.207.170.0/24 maxlen: 24
109.207.171.0/24 maxlen: 24
109.207.172.0/22 maxlen: 22
109.207.172.0/24 maxlen: 24
109.207.173.0/24 maxlen: 24
109.207.174.0/23 maxlen: 23
188.227.56.0/22 maxlen: 22
188.227.57.0/24 maxlen: 24
188.227.58.0/24 maxlen: 24
188.227.59.0/24 maxlen: 24
188.227.84.0/22 maxlen: 22
188.227.84.0/24 maxlen: 24
188.227.85.0/24 maxlen: 24
188.227.86.0/24 maxlen: 24
188.227.87.0/24 maxlen: 24
188.227.106.0/24 maxlen: 24
188.227.107.0/24 maxlen: 24
2a0e:b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6c:84:01:4c:e7:90:08:d3:98:63:dd:69:ce:a9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
Validity
Not Before: Sep 22 14:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae023b14fb3c8dba68fc63242a8b8ff338acb7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:9e:92:b9:e3:35:af:3d:39:e9:cc:fe:e3:
0b:48:77:a7:d3:0a:30:35:9d:fe:0b:df:29:b8:70:
2a:13:b4:b0:0b:86:1b:c5:c1:e7:b8:fd:f5:cb:09:
46:e7:61:c2:24:93:85:05:e7:33:91:20:4f:49:0a:
ba:d0:1a:96:11:6c:ac:54:6d:2d:2b:d8:c1:be:ed:
b2:79:6a:a1:02:f7:e7:6d:df:e6:0b:64:e5:a0:29:
75:ef:42:26:53:d5:cc:7f:87:10:da:1e:89:80:a2:
3f:77:ef:ca:b9:24:a7:bf:9c:cb:c0:11:00:c3:c0:
9e:50:6f:24:81:e0:81:d2:6c:0c:c3:6d:84:fe:26:
3a:e0:2c:45:f2:4f:2c:0b:c9:08:72:33:21:ee:b8:
52:29:fd:c4:9f:2c:a1:1f:54:90:1c:cd:1b:bc:40:
4e:ad:52:4a:5e:3b:68:01:42:a1:f6:27:8a:a0:59:
d8:f7:84:bf:4c:1f:d6:a6:e3:3c:72:df:e0:ce:63:
dd:53:bc:06:dc:74:3e:1a:c5:d0:2f:f3:b6:4f:3c:
6e:91:98:06:eb:18:ca:9e:93:76:90:ca:26:ef:2b:
bb:e2:8c:00:65:59:7f:e8:db:db:df:53:12:e9:f7:
8b:70:9a:87:e1:ac:a9:46:8d:cb:f6:18:67:23:8d:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:02:3B:14:FB:3C:8D:BA:68:FC:63:24:2A:8B:8F:F3:38:AC:B7:D4
X509v3 Authority Key Identifier:
keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/rgI7FPs8jbpo_GMkKouP8zist9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.0.0/21
45.14.48.0/22
45.133.16.0/22
45.138.24.0/22
45.159.172.0/22
78.111.84.0-78.111.91.255
92.246.128.0/22
94.141.96.0/22
109.207.168.0/21
188.227.56.0/22
188.227.84.0/22
188.227.106.0/23
IPv6:
2a0e:b80::/29
Signature Algorithm: sha256WithRSAEncryption
8e:cd:99:0d:1b:cf:69:56:d8:5e:cb:40:df:6a:40:55:bd:0a:
0e:0a:a7:6b:f5:dd:08:d3:86:42:77:18:af:67:84:70:ca:6e:
f6:3c:f6:a9:1d:3d:72:ca:fc:90:28:50:68:ab:ae:ee:e7:ad:
d6:e6:fa:c9:c3:11:e6:0f:c7:28:75:c6:b4:b6:a2:45:f4:23:
0f:1e:16:2a:ad:8e:4c:8e:d9:75:e3:ba:8f:0e:3b:e1:14:27:
42:cf:7d:39:9d:de:ad:30:24:b5:d7:06:60:e7:c0:2b:dd:30:
fd:e5:6f:f9:2e:70:b1:57:61:27:3a:ea:0c:4d:f3:d1:86:0d:
e1:a6:bc:17:1f:75:2d:0f:a5:00:1b:4f:2c:88:7c:aa:b7:68:
dd:5b:34:01:44:2b:ff:02:0b:86:e4:dd:2d:eb:ca:8f:da:40:
4b:8d:80:bf:6c:e0:ef:ff:90:20:58:19:a7:2b:ab:54:3d:05:
9d:14:9d:52:db:55:fa:4e:c9:0b:e4:88:4f:02:82:d7:23:35:
09:8d:e6:f1:1a:64:07:8a:1d:36:82:da:d6:8a:d5:4d:da:24:
55:e1:3f:69:64:ed:64:74:e2:69:d5:66:e0:3d:67:f2:fe:75:
92:23:1d:7f:cc:01:eb:f0:68:26:83:77:08:fc:0b:9e:91:c6:
28:d2:0c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:37:56 2026 by rpki-client