Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/Hi2coNGbS0SNcLHmaFZqC-JisHw.roa
File: Hi2coNGbS0SNcLHmaFZqC-JisHw.roa (raw, json)
Hash identifier: 726vn6l/gn+j6OaaVF2Ab7Hnoisjkt4zXJbf/U52Rek=
Subject key identifier: 1E:2D:9C:A0:D1:9B:4B:44:8D:70:B1:E6:68:56:6A:0B:E2:62:B0:7C
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 019F2B9AA7E0F41D7CF7B9EC19A696056D3B
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/Hi2coNGbS0SNcLHmaFZqC-JisHw.roa
Signing time: Sat 04 Jul 2026 05:29:43 +0000
ROA not before: Sat 04 Jul 2026 05:29:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207728
IP address blocks: 31.10.5.0/24 maxlen: 24
31.210.170.0/23 maxlen: 24
31.210.172.0/24 maxlen: 24
31.210.173.0/24 maxlen: 24
46.28.234.0/24 maxlen: 24
62.171.228.0/22 maxlen: 22
62.171.228.0/24 maxlen: 24
62.171.229.0/24 maxlen: 24
62.171.230.0/24 maxlen: 24
62.171.231.0/24 maxlen: 24
62.204.42.0/24 maxlen: 24
85.136.112.0/24 maxlen: 24
85.136.113.0/24 maxlen: 24
85.136.114.0/24 maxlen: 24
85.136.115.0/24 maxlen: 24
85.136.180.0/24 maxlen: 24
85.136.181.0/24 maxlen: 24
85.136.182.0/24 maxlen: 24
85.136.183.0/24 maxlen: 24
87.236.177.0/24 maxlen: 24
93.88.74.0/24 maxlen: 24
93.88.75.0/24 maxlen: 24
103.65.230.0/24 maxlen: 24
103.65.231.0/24 maxlen: 24
104.192.42.0/24 maxlen: 24
138.226.220.0/24 maxlen: 24
138.226.221.0/24 maxlen: 24
138.226.222.0/24 maxlen: 24
138.226.223.0/24 maxlen: 24
148.227.170.0/24 maxlen: 24
185.162.8.0/24 maxlen: 24
185.162.9.0/24 maxlen: 24
185.162.11.0/24 maxlen: 24
185.204.52.0/24 maxlen: 24
185.204.54.0/24 maxlen: 24
185.204.55.0/24 maxlen: 24
194.146.127.0/24 maxlen: 24
2a12:9cc0::/48 maxlen: 48
2a12:9cc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2b:9a:a7:e0:f4:1d:7c:f7:b9:ec:19:a6:96:05:6d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Jul 4 05:29:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e2d9ca0d19b4b448d70b1e668566a0be262b07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:e4:29:e8:7e:c7:9f:06:0c:a1:bf:63:06:
de:4b:3e:73:44:44:3d:14:ad:20:a5:67:d6:8d:86:
85:ba:1b:20:00:72:d6:84:1a:3d:1c:cd:b7:7d:9b:
44:f1:6f:50:39:b1:fe:da:e6:b1:7d:5e:81:4b:35:
31:44:16:31:11:16:02:99:39:7e:d7:6b:0d:2c:fb:
6d:3d:ea:d3:24:99:95:34:95:b1:b2:f2:f5:b4:5e:
48:8f:79:d8:de:76:2f:bd:2b:84:c5:64:03:78:89:
2d:e4:13:a7:55:30:4d:51:e9:50:bf:3c:93:c3:a8:
09:65:07:3b:64:0e:dc:68:e6:e1:dc:e9:2d:3e:c8:
be:cd:af:f4:61:7a:00:98:68:78:b1:de:2c:a3:13:
45:75:8c:0b:c1:58:db:07:a1:72:b9:59:2f:60:f8:
2a:8b:5e:6b:16:60:94:37:bf:ab:50:ba:5a:84:1e:
74:0d:1e:4b:9e:78:01:ab:aa:12:25:20:58:b7:e4:
78:ba:fb:29:51:cf:ca:fc:cf:59:31:79:37:51:c9:
b3:5f:2d:85:72:9a:dc:0b:62:5f:4d:15:fa:a4:f1:
ba:c7:dd:22:f4:85:6f:8b:0e:78:c4:e1:cc:9d:72:
bd:c9:0f:28:31:2c:77:12:17:77:8a:6f:76:9f:fb:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2D:9C:A0:D1:9B:4B:44:8D:70:B1:E6:68:56:6A:0B:E2:62:B0:7C
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/Hi2coNGbS0SNcLHmaFZqC-JisHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.5.0/24
31.210.170.0-31.210.173.255
46.28.234.0/24
62.171.228.0/22
62.204.42.0/24
85.136.112.0/22
85.136.180.0/22
87.236.177.0/24
93.88.74.0/23
103.65.230.0/23
104.192.42.0/24
138.226.220.0/22
148.227.170.0/24
185.162.8.0/23
185.162.11.0/24
185.204.52.0/24
185.204.54.0/23
194.146.127.0/24
IPv6:
2a12:9cc0::/47
Signature Algorithm: sha256WithRSAEncryption
c0:c8:f4:2f:1e:3f:db:6f:77:c0:99:77:5c:c3:0d:a5:e2:f0:
65:56:df:33:68:c8:a6:d5:bc:74:44:39:af:97:81:93:9c:fa:
e9:f2:0c:f5:9c:43:75:08:1b:d9:14:d7:df:db:58:a0:11:36:
b3:40:b1:a8:0c:86:14:45:e5:10:83:b8:86:f5:6c:17:b0:b6:
c2:21:fb:77:aa:aa:e9:04:d0:d6:e3:7f:52:6a:50:27:52:cf:
97:68:cb:f5:3d:e3:da:d8:57:a1:89:f3:f7:ad:e5:17:71:5f:
96:53:f8:12:eb:ef:a3:67:8b:83:44:91:c1:a7:89:fb:f7:22:
d9:e4:09:6a:6b:0f:6a:69:0d:8c:6b:31:02:ee:43:9a:ea:37:
f3:e0:9c:78:9b:ed:e8:12:b4:7c:e3:e4:48:1f:7d:0f:0e:12:
da:66:2a:66:0e:ad:b8:5f:49:c5:b6:53:91:4f:1a:9a:46:6c:
ea:72:33:d4:cc:c8:81:95:1d:66:54:3d:f8:69:9b:9a:27:e2:
fd:f7:c0:df:e8:a5:09:7a:7b:59:21:88:d1:c6:40:f6:7e:01:
9b:30:b2:14:07:90:66:b8:29:67:5c:28:73:07:38:f9:85:d2:
16:ce:6a:34:58:b5:dc:92:95:bd:af:38:9e:d2:1c:06:db:49:
a6:2e:bf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:02 2026 by rpki-client