Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/gWB4iaMM96HatxSBLmxCY8CzZxE.roa
File: gWB4iaMM96HatxSBLmxCY8CzZxE.roa (raw, json)
Hash identifier: XwPX3f6mTdmL46PvAX+CuulPFlnUy0yUOKFFavRIR4I=
Subject key identifier: 81:60:78:89:A3:0C:F7:A1:DA:B7:14:81:2E:6C:42:63:C0:B3:67:11
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 019F3B560FB7E07481E700B61786BD7B9F91
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/gWB4iaMM96HatxSBLmxCY8CzZxE.roa
Signing time: Tue 07 Jul 2026 06:48:43 +0000
ROA not before: Tue 07 Jul 2026 06:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50330
IP address blocks: 31.220.148.0/24 maxlen: 24
31.220.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:56:0f:b7:e0:74:81:e7:00:b6:17:86:bd:7b:9f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Jul 7 06:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81607889a30cf7a1dab714812e6c4263c0b36711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:d2:68:c5:bf:a0:7c:36:b2:be:45:ce:fb:
06:e2:03:e1:e7:9d:e0:d8:02:4a:73:0e:59:c1:84:
87:5a:0a:c5:52:33:27:79:c4:ac:cb:e2:e6:91:ee:
46:9e:79:1c:7e:5a:db:df:09:8a:5d:d6:91:6c:23:
de:16:cd:f8:a4:48:eb:ca:3d:4b:52:2b:57:46:5e:
fc:ce:d1:b2:5c:bf:e3:6e:df:d1:52:1f:19:eb:5c:
14:56:80:e6:6c:59:43:f2:18:dd:01:5e:14:06:b3:
1a:ef:48:04:f1:3e:05:77:1d:ec:9c:27:97:61:97:
00:2c:0e:24:cd:b9:0e:aa:20:6e:79:a8:2e:34:f5:
18:2b:29:ff:a2:54:95:ce:e5:ec:54:05:a5:55:fa:
d1:0a:90:f1:e6:94:ce:6b:72:c2:04:81:60:d1:e4:
72:45:a1:e1:fd:ce:9a:08:86:29:ef:54:79:8c:b3:
82:65:4a:b2:dc:5d:a7:56:05:11:67:29:f2:47:19:
ef:d4:8a:27:72:21:ea:ed:8c:0b:1c:b5:74:0a:73:
71:89:80:87:cc:f5:47:46:03:96:9b:69:e7:ac:29:
f8:d0:d7:62:6a:89:ea:3f:86:fc:c9:e1:35:d0:28:
9e:1b:54:b3:6c:23:0c:21:e3:2c:26:22:4c:16:f4:
ae:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:60:78:89:A3:0C:F7:A1:DA:B7:14:81:2E:6C:42:63:C0:B3:67:11
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/gWB4iaMM96HatxSBLmxCY8CzZxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.148.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:f7:10:65:2a:9b:c0:cd:5c:46:23:9b:f4:f3:52:c1:7d:0b:
0c:bb:60:ad:e8:3a:85:1b:4b:03:99:6d:f8:33:5f:0e:8b:7e:
de:fd:9c:ab:db:1f:9d:90:35:bf:66:a3:a8:a5:63:e5:9c:6e:
b4:ae:dd:68:84:86:eb:f6:1d:e4:7d:2d:1f:b4:40:56:0d:cb:
81:0d:32:90:23:1a:c7:0e:ee:3f:5f:0d:10:b2:25:ae:1a:51:
04:02:80:87:87:3d:ff:07:c3:10:13:9d:46:5b:e5:08:0d:bc:
57:2d:c6:a6:47:0f:9d:38:af:b4:7b:19:fb:40:00:74:04:1c:
8a:82:5f:3b:57:af:12:b1:1a:e6:7f:81:de:1f:76:0e:a8:82:
64:fb:3e:62:06:b9:c6:7f:ee:9d:fd:3e:7c:ba:5f:78:05:1e:
93:b6:44:f7:1d:38:82:56:03:5c:33:f8:40:2d:cc:49:76:66:
6a:de:6d:4b:6f:01:de:82:1e:f8:56:f2:2c:d0:b6:a1:7e:e3:
4e:97:6b:27:0b:51:a5:84:cd:ea:c6:58:86:21:6c:24:16:89:
43:9d:8c:f0:b5:c0:1f:94:b4:27:75:e4:70:28:7e:8c:45:09:
06:15:15:99:2e:8b:4e:6a:c6:ac:21:0b:ac:bf:d0:13:7d:81:
13:f4:0d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:43:16 2026 by rpki-client