Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/XRR6ABUa1P3i6raSX-yQmGnDjr8.roa
File: XRR6ABUa1P3i6raSX-yQmGnDjr8.roa (raw, json)
Hash identifier: +lCokKi8ekNLJ79hVMEJ7Z8KfB/ISkSlERz40oRMdHY=
Subject key identifier: 5D:14:7A:00:15:1A:D4:FD:E2:EA:B6:92:5F:EC:90:98:69:C3:8E:BF
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 01A0CCF6E33A37EDD8A63A0C0DB98A2E63CB
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/XRR6ABUa1P3i6raSX-yQmGnDjr8.roa
Signing time: Wed 23 Sep 2026 06:32:07 +0000
ROA not before: Wed 23 Sep 2026 06:32:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197882
IP address blocks: 31.25.136.0/22 maxlen: 22
31.25.136.0/24 maxlen: 24
31.25.137.0/24 maxlen: 24
31.25.138.0/24 maxlen: 24
31.25.139.0/24 maxlen: 24
31.25.140.0/24 maxlen: 24
31.25.141.0/24 maxlen: 24
31.25.142.0/23 maxlen: 23
31.25.142.0/24 maxlen: 24
31.25.143.0/24 maxlen: 24
130.255.92.0/24 maxlen: 24
130.255.93.0/24 maxlen: 24
130.255.94.0/24 maxlen: 24
130.255.95.0/24 maxlen: 24
159.255.160.0/22 maxlen: 22
159.255.160.0/24 maxlen: 24
159.255.161.0/24 maxlen: 24
159.255.162.0/24 maxlen: 24
159.255.163.0/24 maxlen: 24
159.255.164.0/24 maxlen: 24
159.255.165.0/24 maxlen: 24
159.255.166.0/23 maxlen: 23
159.255.166.0/24 maxlen: 24
159.255.167.0/24 maxlen: 24
185.14.248.0/23 maxlen: 23
185.14.250.0/24 maxlen: 24
185.14.251.0/24 maxlen: 24
185.101.236.0/24 maxlen: 24
185.101.237.0/24 maxlen: 24
185.101.238.0/24 maxlen: 24
185.101.239.0/24 maxlen: 24
185.184.198.0/24 maxlen: 24
185.184.199.0/24 maxlen: 24
185.212.33.0/24 maxlen: 24
2a03:bcc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:f6:e3:3a:37:ed:d8:a6:3a:0c:0d:b9:8a:2e:63:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Sep 23 06:32:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d147a00151ad4fde2eab6925fec909869c38ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:f8:03:7b:32:17:91:35:03:cf:66:f8:5d:
f7:d4:0b:b4:80:4e:9d:8a:8e:e5:7f:ea:13:b8:9d:
65:00:93:02:aa:0b:31:a4:b1:0d:25:1a:88:0b:36:
3b:16:d9:bb:ed:63:f7:ee:40:6e:cd:0f:6f:a5:09:
20:78:56:2c:5f:08:b9:11:f2:f6:7f:ef:2f:7c:e8:
b1:25:53:68:ef:9e:d0:61:5b:85:32:ce:1d:93:8e:
81:83:d4:1b:ad:b1:fe:bb:35:e5:89:d2:05:7a:fd:
19:e7:85:f5:79:78:ce:a8:a7:15:5c:2b:4c:50:cc:
0e:79:bc:d0:3e:66:c9:9e:07:be:52:f2:d7:44:08:
22:76:91:c5:ba:91:0f:af:38:be:3d:3f:b9:a6:bb:
5f:42:c0:de:e8:9f:c6:4d:31:eb:e7:27:9e:cd:91:
98:fe:63:01:4d:88:27:21:21:37:ca:f8:a5:cb:7b:
5d:f5:17:7e:dc:48:fe:4d:8f:ae:09:12:d1:01:08:
89:7e:b1:74:5c:35:d3:5f:1a:fc:68:1c:6b:3b:b9:
96:48:51:48:79:2a:87:a9:73:73:b0:3a:5c:8b:b1:
95:99:72:64:25:8b:e8:1f:72:36:b9:27:13:6e:6f:
88:84:4e:f7:50:e3:eb:79:38:95:f3:e3:12:de:8f:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:14:7A:00:15:1A:D4:FD:E2:EA:B6:92:5F:EC:90:98:69:C3:8E:BF
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/XRR6ABUa1P3i6raSX-yQmGnDjr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.136.0/21
130.255.92.0/22
159.255.160.0/21
185.14.248.0/22
185.101.236.0/22
185.184.198.0/23
185.212.33.0/24
IPv6:
2a03:bcc0:1::/48
Signature Algorithm: sha256WithRSAEncryption
6d:35:8c:a6:37:4d:f3:d9:d7:2d:9f:f1:03:5f:6c:a0:52:51:
88:41:c6:cd:ab:1f:89:1f:b7:84:a3:f9:7d:64:1b:80:f3:9b:
dc:f4:26:e7:8d:59:90:24:2d:5a:f8:53:c9:20:d7:ad:49:63:
45:98:d5:d1:6f:90:1e:ea:0a:ed:7e:80:7f:2d:20:72:ef:92:
a5:ac:ea:f4:00:0c:ec:19:8d:69:20:46:3f:c0:6c:38:93:58:
63:82:02:9b:33:ca:23:70:85:3d:0b:23:4d:60:1d:71:71:fd:
cc:fe:f4:40:91:6b:b2:a8:e1:3b:86:36:73:66:fa:3f:60:d4:
4c:f7:20:08:e5:0c:1c:8d:d9:1c:9c:78:69:ad:a1:8b:d0:7c:
73:b5:bd:fc:37:19:a0:ec:3f:ac:29:12:50:3e:0c:9a:79:02:
f6:30:7a:1d:6f:4f:e1:18:92:c9:38:84:dc:82:02:31:e1:8c:
6a:61:3e:e5:ac:c0:4c:ef:e0:eb:ae:28:b9:9b:58:85:92:39:
1e:4e:40:e4:18:17:fd:e3:7b:32:f0:7c:9b:07:b1:38:3a:93:
d8:3c:e2:05:63:94:3c:4f:1f:29:b1:6a:c7:d0:df:80:14:f9:
6c:20:80:dd:b7:c6:0e:db:5a:7a:f3:07:91:70:93:1c:a5:c2:
26:bf:b2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:26:22 2026 by rpki-client