Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/mT6v6jSgHIygycLQjCb9jIj1ZFo.roa
File: mT6v6jSgHIygycLQjCb9jIj1ZFo.roa (raw, json)
Hash identifier: 3STcbpvfvavXclx/IAHFXEuz539gDMyFZGfO/1xoJjw=
Subject key identifier: 99:3E:AF:EA:34:A0:1C:8C:A0:C9:C2:D0:8C:26:FD:8C:88:F5:64:5A
Certificate issuer: /CN=4b905b92ceed0d4054fd96c7ccfd5de66d8f62ae
Certificate serial: 019F23684C97B8E4B5A2678C5D0D8107111F
Authority key identifier: 4B:90:5B:92:CE:ED:0D:40:54:FD:96:C7:CC:FD:5D:E6:6D:8F:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/mT6v6jSgHIygycLQjCb9jIj1ZFo.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56749
IP address blocks: 31.130.182.0/24 maxlen: 24
31.130.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4c:97:b8:e4:b5:a2:67:8c:5d:0d:81:07:11:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b905b92ceed0d4054fd96c7ccfd5de66d8f62ae
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=993eafea34a01c8ca0c9c2d08c26fd8c88f5645a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fd:a6:da:20:2f:ea:e4:9b:26:50:f4:0c:4a:
69:99:8b:56:5a:52:ec:71:c6:45:66:fb:e6:5d:1e:
3c:1c:96:a4:89:2d:5d:60:fe:25:41:9b:d7:a4:35:
c3:36:75:6e:92:ea:b1:bd:e3:ea:d4:9e:8c:68:b7:
22:3e:ef:25:d0:54:b6:57:df:05:cf:86:13:04:bb:
05:e2:81:37:3e:2a:58:e2:fb:63:1f:63:06:ba:8c:
67:8c:29:6e:53:40:c1:f5:e3:f2:ec:1b:62:65:a3:
61:27:84:45:70:6c:1b:63:4f:f4:83:93:e7:38:09:
39:78:69:23:d3:ba:cb:1b:3f:61:85:a1:f0:3d:9b:
74:2e:32:6b:df:32:e2:33:af:81:a3:77:a3:3b:c1:
38:4d:75:b9:9f:2c:1b:dc:c6:3a:7e:d2:1f:05:6c:
8f:eb:ca:b7:76:d7:b3:9b:fe:8f:70:cc:79:1c:fc:
eb:65:94:69:c9:7f:4a:e3:83:ab:83:9d:44:b5:8e:
dd:1d:ae:72:be:d9:82:9f:8b:ef:6a:5e:d4:e0:82:
a1:11:28:9d:45:57:ba:73:1d:08:0c:40:83:e6:91:
f7:82:ff:9f:10:7b:3d:5f:3d:fa:6e:18:1f:e5:f3:
e2:87:9a:02:8a:18:6f:9f:06:88:d4:e1:cd:bd:d3:
80:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3E:AF:EA:34:A0:1C:8C:A0:C9:C2:D0:8C:26:FD:8C:88:F5:64:5A
X509v3 Authority Key Identifier:
keyid:4B:90:5B:92:CE:ED:0D:40:54:FD:96:C7:CC:FD:5D:E6:6D:8F:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/mT6v6jSgHIygycLQjCb9jIj1ZFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.182.0/23
Signature Algorithm: sha256WithRSAEncryption
97:cd:e4:2e:87:d8:83:e5:d0:69:a9:8c:b3:ca:18:21:1b:db:
e7:66:82:44:30:ac:ab:81:ca:c0:63:da:d6:1b:ac:d7:2e:c7:
1c:91:1f:b2:aa:80:24:86:ec:d1:53:1a:e0:bf:b1:95:97:ef:
26:e6:f9:fe:6b:61:26:40:76:b6:05:17:9b:d4:4c:08:18:6a:
2d:f4:8b:86:49:f5:d4:6c:2c:0c:63:74:56:f5:e5:13:66:10:
cc:2c:75:31:bb:d5:f1:72:ae:8d:da:5e:b2:73:66:58:88:5f:
7e:d8:df:57:92:a3:f2:0e:21:32:1a:a4:40:70:9e:bd:95:f5:
6c:55:95:ae:23:2c:f6:43:46:bb:ee:0b:bf:8c:22:48:9a:b6:
11:f3:6a:5d:21:89:91:72:12:30:a6:e2:42:2a:9e:4f:22:9a:
c1:88:e3:df:ae:99:2e:1f:39:7b:ff:4d:e8:0c:ed:28:57:43:
6c:30:09:0b:bd:99:19:f2:1c:51:fc:e7:c4:a2:4a:38:8f:4a:
ae:d3:d5:78:1d:a3:4b:71:6e:de:a3:4a:70:5e:c4:c7:6b:ee:
a3:b1:c9:d2:3c:2f:ab:ae:cb:ea:c2:58:17:1d:3d:28:66:02:
36:16:69:61:f0:ae:ae:81:c3:96:9f:31:2e:1a:14:79:23:5d:
ee:72:81:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:24 2026 by rpki-client