Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/_tgh7D8loaPDJ7r7Pxf9_WvTx34.roa
File: _tgh7D8loaPDJ7r7Pxf9_WvTx34.roa (raw, json)
Hash identifier: xcNwVxfY4wqx0USwx2W9FdmwKxqPegHXOT+mDy7Il/s=
Subject key identifier: FE:D8:21:EC:3F:25:A1:A3:C3:27:BA:FB:3F:17:FD:FD:6B:D3:C7:7E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 01A0D1501C28D18C39C9031016AAB8909638
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/_tgh7D8loaPDJ7r7Pxf9_WvTx34.roa
Signing time: Thu 24 Sep 2026 02:48:03 +0000
ROA not before: Thu 24 Sep 2026 02:48:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60976
IP address blocks: 31.214.168.0/21 maxlen: 24
31.214.168.0/24 maxlen: 24
31.214.169.0/24 maxlen: 24
31.214.170.0/24 maxlen: 24
31.214.171.0/24 maxlen: 24
31.214.172.0/24 maxlen: 24
31.214.173.0/24 maxlen: 24
31.214.174.0/24 maxlen: 24
31.214.175.0/24 maxlen: 24
134.255.200.0/21 maxlen: 24
134.255.200.0/24 maxlen: 24
134.255.201.0/24 maxlen: 24
134.255.202.0/24 maxlen: 24
134.255.203.0/24 maxlen: 24
134.255.204.0/24 maxlen: 24
134.255.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:50:1c:28:d1:8c:39:c9:03:10:16:aa:b8:90:96:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Sep 24 02:48:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fed821ec3f25a1a3c327bafb3f17fdfd6bd3c77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f2:65:34:01:f9:71:56:0e:5f:ce:61:03:73:
6c:c5:04:0a:fe:47:4e:96:90:f4:d6:f0:4e:0f:2b:
ff:18:79:22:d5:99:33:6e:92:0f:e7:a5:8f:9e:ff:
7f:c0:b1:ba:42:c0:a6:bd:fe:69:85:2b:d2:79:32:
33:1c:08:a0:d7:25:be:14:c5:60:b1:8f:18:bd:a8:
ad:02:06:3e:bd:b7:e1:40:5e:ec:89:24:d7:a8:2a:
b8:0e:25:78:27:73:ef:d5:e5:8f:d7:e6:59:26:91:
1f:88:a6:40:23:d2:25:96:1e:e1:b5:72:5b:74:e1:
9e:1d:5d:86:e3:28:9f:b4:4a:65:58:9f:47:7b:48:
0d:e8:a3:99:1e:9b:0c:6d:e2:32:94:1f:c6:7e:c7:
93:b9:99:97:01:ee:36:b9:1d:dd:4f:e1:fc:d7:fc:
17:0f:b1:04:22:46:1d:0e:67:12:59:2e:e7:58:0b:
51:b6:b9:7a:81:d8:d0:64:d7:65:eb:3a:02:90:5e:
96:21:06:d4:43:de:d9:4c:27:a3:00:d3:bf:27:f2:
4a:d4:89:0c:9e:3a:53:1a:b5:35:52:94:34:e5:15:
f4:64:eb:65:8a:86:ab:44:05:0a:53:d5:b7:86:02:
f0:fa:88:33:49:50:9d:ca:ac:28:b1:57:62:75:6d:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D8:21:EC:3F:25:A1:A3:C3:27:BA:FB:3F:17:FD:FD:6B:D3:C7:7E
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/_tgh7D8loaPDJ7r7Pxf9_WvTx34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.168.0/21
134.255.200.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:38:23:fb:2b:4e:e1:09:77:fa:7b:c7:e2:f5:20:13:f2:01:
74:eb:8d:ba:ae:2b:99:c2:79:ba:2b:8e:9e:f1:ef:24:34:9f:
0a:ec:b3:53:95:43:e9:09:56:56:41:0e:92:c1:08:63:ae:63:
29:d3:f8:ee:95:ba:78:12:8c:34:7a:4f:29:da:c4:44:fb:3d:
4b:98:d3:98:a8:95:7c:5e:38:17:68:ea:14:8c:f2:ae:77:4f:
45:03:51:b1:7d:4f:8e:3c:fe:c5:cd:aa:0f:b3:74:01:31:4d:
07:32:11:be:1c:97:a0:db:3a:e0:45:6a:a3:16:ed:a3:04:85:
09:e8:14:58:53:76:19:e0:b4:51:b5:9c:82:dc:2c:c5:a8:56:
2a:ff:a0:a5:1c:90:06:5d:c9:4b:84:b1:3a:76:aa:09:96:24:
f1:c2:42:87:e7:02:5f:fe:a2:23:71:5f:ec:72:aa:14:df:29:
2a:1d:8c:7e:13:20:e1:59:e4:d7:32:6e:51:60:43:0f:ad:57:
75:be:98:f8:c5:69:17:3a:ff:7d:da:7c:74:ff:19:33:35:05:
3f:b5:f6:61:3d:22:b9:0c:de:17:bc:ac:27:d8:72:70:41:2b:
9a:a8:bb:04:a1:5b:ca:ab:5e:c5:4e:88:88:dc:e1:78:02:17:
a6:6c:02:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:31 2026 by rpki-client