Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/l-XkXuf9XggQYZxtWN0dMNbMQYA.roa
File: l-XkXuf9XggQYZxtWN0dMNbMQYA.roa (raw, json)
Hash identifier: VtVN/POmbvS7tbXroTKgBcOB9/D/3PdK83che1VmeOE=
Subject key identifier: 97:E5:E4:5E:E7:FD:5E:08:10:61:9C:6D:58:DD:1D:30:D6:CC:41:80
Certificate issuer: /CN=4b905b92ceed0d4054fd96c7ccfd5de66d8f62ae
Certificate serial: 019F23684BF234776EEA2ADCA07D86A53072
Authority key identifier: 4B:90:5B:92:CE:ED:0D:40:54:FD:96:C7:CC:FD:5D:E6:6D:8F:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/l-XkXuf9XggQYZxtWN0dMNbMQYA.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49100
IP address blocks: 31.130.176.0/22 maxlen: 22
31.130.176.0/24 maxlen: 24
31.130.177.0/24 maxlen: 24
31.130.178.0/24 maxlen: 24
31.130.179.0/24 maxlen: 24
31.130.180.0/24 maxlen: 24
31.130.184.0/21 maxlen: 21
31.130.184.0/24 maxlen: 24
31.130.185.0/24 maxlen: 24
31.130.186.0/24 maxlen: 24
31.130.187.0/24 maxlen: 24
31.130.188.0/24 maxlen: 24
31.130.189.0/24 maxlen: 24
31.130.190.0/24 maxlen: 24
31.130.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4b:f2:34:77:6e:ea:2a:dc:a0:7d:86:a5:30:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b905b92ceed0d4054fd96c7ccfd5de66d8f62ae
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97e5e45ee7fd5e0810619c6d58dd1d30d6cc4180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:96:c0:81:61:d7:aa:e2:85:f3:67:0c:ae:
1a:c0:3c:37:3b:b8:23:10:0f:fe:cb:99:f5:1b:e7:
0f:af:b7:1c:13:e3:90:d7:cd:60:f9:f7:7b:c7:26:
c1:95:d7:72:5d:2f:49:65:97:e7:30:a7:bc:9c:29:
db:2d:26:48:f4:8f:04:0d:e3:a3:87:48:a8:10:fe:
71:10:db:94:2e:cd:2d:27:3c:d3:0b:d2:d0:28:b5:
bd:68:5c:3f:54:54:0b:0b:ed:23:fc:d0:5d:2d:9c:
67:18:98:64:d8:87:cc:28:ff:68:2c:42:f9:7f:60:
c4:61:36:4c:9b:70:c9:c1:fa:9d:77:9e:f8:06:71:
2e:f3:09:56:76:34:f1:57:2c:a5:66:ec:01:fd:df:
d2:a6:f6:ce:6b:bd:00:4a:09:04:f5:da:24:97:d8:
d4:25:2d:04:0e:3b:8a:77:43:f9:83:46:6a:db:b8:
40:de:2a:3f:5f:fb:71:25:00:8e:d3:87:e2:5b:f1:
07:3c:1a:1c:fa:b8:3a:01:5c:7d:2b:6b:bf:ef:c4:
29:a9:9e:1e:15:73:b2:d5:82:95:f7:2a:f6:22:53:
ab:e9:21:e2:2d:54:0c:cf:75:e3:41:a0:1b:49:0d:
c5:dd:1a:e8:fd:bf:b9:50:5d:e5:34:23:1c:2c:71:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:E4:5E:E7:FD:5E:08:10:61:9C:6D:58:DD:1D:30:D6:CC:41:80
X509v3 Authority Key Identifier:
keyid:4B:90:5B:92:CE:ED:0D:40:54:FD:96:C7:CC:FD:5D:E6:6D:8F:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/l-XkXuf9XggQYZxtWN0dMNbMQYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.176.0-31.130.180.255
31.130.184.0/21
Signature Algorithm: sha256WithRSAEncryption
78:40:20:f7:7e:1d:e8:01:2a:93:3c:b7:6d:fe:7f:01:f8:2c:
59:2b:e4:20:45:24:ce:72:25:21:43:64:3a:56:d9:d5:25:e8:
a3:e3:f6:54:75:69:36:29:d2:ed:a4:35:7e:33:38:38:e4:8b:
e3:64:ec:47:1e:f9:87:df:12:3f:de:ff:a5:d9:09:30:dc:16:
cd:5c:f6:d6:87:9c:b5:2d:c2:81:3d:98:52:3a:4d:6d:f3:db:
0b:6b:5a:06:8b:2e:7e:3b:23:ec:cd:b9:8d:be:c7:b3:ca:c3:
a8:8a:31:b5:14:0a:0f:01:e2:ff:af:8d:5c:8b:3b:71:21:6d:
d1:56:dc:2a:82:f6:d8:cd:c1:22:26:96:89:ed:20:08:94:2c:
86:dc:cb:b9:26:b1:ac:96:54:bd:9e:00:d5:40:12:1a:d1:a4:
56:8c:9a:35:58:80:b5:0d:87:7e:e0:94:90:b5:f7:21:fc:dc:
e6:e8:2c:d8:12:76:94:62:30:3b:42:b0:e5:57:28:21:6d:3d:
02:e6:16:11:45:47:44:9e:31:fd:e2:fb:04:52:4f:d3:bc:93:
e7:1d:11:2c:ee:74:ce:d0:e1:a3:f0:69:f7:e8:98:3b:a9:1b:
76:63:05:9a:a1:72:e9:a0:3e:18:a3:93:eb:4b:ad:73:d9:bf:
06:ef:8e:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:36 2026 by rpki-client