Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/X00WP5hL284UqAVGxLXaNNV_5EU.roa
File: X00WP5hL284UqAVGxLXaNNV_5EU.roa (raw, json)
Hash identifier: Qq8OZKKabuQ4bEnBcQSngOYJ+I2wL1Rk9O2ngy1HvwE=
Subject key identifier: 5F:4D:16:3F:98:4B:DB:CE:14:A8:05:46:C4:B5:DA:34:D5:7F:E4:45
Certificate issuer: /CN=4b905b92ceed0d4054fd96c7ccfd5de66d8f62ae
Certificate serial: 019F23684A4CCFFB05FB295C7AD21A3C8F6A
Authority key identifier: 4B:90:5B:92:CE:ED:0D:40:54:FD:96:C7:CC:FD:5D:E6:6D:8F:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/X00WP5hL284UqAVGxLXaNNV_5EU.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39650
IP address blocks: 31.130.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4a:4c:cf:fb:05:fb:29:5c:7a:d2:1a:3c:8f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b905b92ceed0d4054fd96c7ccfd5de66d8f62ae
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f4d163f984bdbce14a80546c4b5da34d57fe445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:09:ef:37:b3:bc:8b:09:eb:8b:c2:d2:49:12:
c8:4c:1b:de:53:4a:7b:4e:ac:c6:0a:fd:5c:7f:2f:
8f:23:2e:3e:f3:ff:2c:f3:a5:1f:d9:ca:ab:6c:e9:
4c:91:45:5c:eb:bd:5a:8b:c1:30:02:0e:9b:95:32:
d9:d7:ce:8d:bf:ec:ca:c4:6c:7d:e6:07:ba:d5:16:
e6:ef:a2:f9:a5:5c:a6:3b:15:dc:cc:03:cf:93:d1:
77:4e:b4:29:e4:26:6b:88:d0:5a:c7:0d:13:5a:a3:
7b:5e:1a:fc:e5:62:47:d3:ff:ba:ee:55:46:d8:00:
37:64:d5:73:d1:53:95:cd:55:c5:11:8c:53:9a:33:
90:77:0e:66:e8:04:39:00:14:49:6c:21:55:5b:9c:
f2:16:96:b9:de:a5:5c:a2:2c:8e:43:09:f0:63:ec:
a7:66:7f:14:b4:6e:a5:2c:e5:f6:bc:b0:16:cf:ab:
18:b3:40:d5:36:e3:7e:b3:8c:f1:01:98:b6:b3:0a:
b0:92:bb:94:4e:2b:02:de:0a:64:d2:c7:fb:4b:3a:
c5:97:56:17:52:b5:d4:1b:ca:7d:23:9b:0f:22:e9:
cd:67:1d:b7:70:fd:06:62:41:19:45:7d:da:19:40:
05:2e:0b:0c:46:43:8f:ab:81:e0:87:c3:13:32:5f:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4D:16:3F:98:4B:DB:CE:14:A8:05:46:C4:B5:DA:34:D5:7F:E4:45
X509v3 Authority Key Identifier:
keyid:4B:90:5B:92:CE:ED:0D:40:54:FD:96:C7:CC:FD:5D:E6:6D:8F:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/X00WP5hL284UqAVGxLXaNNV_5EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.181.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b2:86:1a:c7:26:ac:f2:78:51:4e:c2:77:db:ec:85:f2:56:
82:2a:70:54:24:e0:88:37:6b:a2:9a:f8:38:81:93:11:a2:61:
3f:f0:6d:b8:0a:ce:a7:ce:6e:f9:52:ae:65:b7:bc:b5:81:e8:
18:d7:4a:e7:da:81:6a:8a:e5:7b:bd:d5:4f:df:13:68:58:77:
e3:9a:2f:46:6b:59:18:d3:82:34:af:52:70:00:60:c1:d8:c4:
c4:01:e9:89:ad:21:1a:2d:ed:ae:19:c3:0b:15:f9:f8:7e:64:
63:74:51:8f:31:58:62:06:30:dd:d4:23:9c:f1:a0:17:b2:6c:
fa:48:8d:74:7e:86:15:58:a0:58:ba:26:1f:ab:ec:10:54:28:
5d:89:b2:46:81:2b:7f:05:b5:a2:18:8e:1e:1b:ef:cf:f5:b6:
eb:c0:cf:c6:2f:a8:27:18:a4:47:08:b5:39:4c:0e:8f:d6:39:
2e:01:8c:cd:66:a7:5f:60:7a:86:d7:81:7a:32:a7:da:e7:45:
cc:6c:ec:9e:77:f5:0f:fa:d1:52:45:71:47:8c:92:6d:26:33:
29:9b:a8:04:b3:ef:10:8d:90:9d:cf:34:87:f7:d1:26:1b:ae:
09:4f:fc:df:a1:dd:6e:e1:6b:16:8e:a7:b5:68:b4:bd:ae:26:
f8:26:bb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:42:01 2026 by rpki-client