Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/4rHkukJZlmv4as-4xMu4r_3jmNE.roa
File: 4rHkukJZlmv4as-4xMu4r_3jmNE.roa (raw, json)
Hash identifier: +bpTdQ8MOcqEZXfHNxSdTdJOkYSVdHAINcyN0oTieLw=
Subject key identifier: E2:B1:E4:BA:42:59:96:6B:F8:6A:CF:B8:C4:CB:B8:AF:FD:E3:98:D1
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019F21C2364E9E5A7682EF269169A1CD5DC1
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/4rHkukJZlmv4as-4xMu4r_3jmNE.roa
Signing time: Thu 02 Jul 2026 07:36:43 +0000
ROA not before: Thu 02 Jul 2026 07:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62206
IP address blocks: 31.133.80.0/22 maxlen: 24
31.133.88.0/22 maxlen: 24
176.103.224.0/22 maxlen: 22
176.103.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:c2:36:4e:9e:5a:76:82:ef:26:91:69:a1:cd:5d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jul 2 07:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2b1e4ba4259966bf86acfb8c4cbb8affde398d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b5:f1:0a:68:eb:4b:93:77:cd:9d:1b:54:60:
fa:39:1d:39:c9:25:ba:60:0c:f6:0e:a5:e3:ac:be:
eb:23:33:12:42:ae:7b:14:af:ad:f1:59:95:bf:8c:
83:d7:aa:1d:c4:ab:74:d0:4d:1c:d9:9e:ca:a1:fa:
07:2e:8a:2d:80:28:43:2b:6e:e1:21:1c:df:0f:e6:
79:4a:96:29:5e:71:0b:3e:ea:fd:ce:4e:49:e8:ec:
01:22:a0:62:ba:4a:70:ef:b3:dd:ca:9b:74:4a:39:
04:74:fb:02:53:ac:51:d0:9e:9a:ce:dc:49:3d:63:
4c:1d:20:8a:33:e7:59:51:96:78:e1:26:93:ae:af:
8d:84:3f:53:ea:48:3c:13:18:79:98:94:e6:5a:0e:
25:0d:10:da:87:6b:55:4a:fc:02:d2:e2:2a:36:bb:
0f:64:0d:c3:f5:cc:73:fd:8c:78:73:fb:f9:ea:56:
1b:1d:2c:c5:2e:c1:ff:7c:25:fe:75:9c:f0:84:5a:
26:e5:42:5a:29:eb:d5:58:27:25:ab:3a:6a:f7:95:
ff:75:00:25:b1:2f:b3:28:5e:2e:97:f0:d9:f5:c1:
66:a6:59:ac:d0:a5:ce:86:3d:5e:d2:8b:59:5e:25:
ef:d0:23:cd:e0:96:88:6e:c9:69:56:7a:db:ac:a4:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B1:E4:BA:42:59:96:6B:F8:6A:CF:B8:C4:CB:B8:AF:FD:E3:98:D1
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/4rHkukJZlmv4as-4xMu4r_3jmNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0/22
31.133.88.0/22
176.103.224.0/22
176.103.236.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:d4:06:5e:14:df:62:8a:b4:ba:10:c8:86:2f:6c:34:37:64:
68:d4:b1:25:68:59:a1:b9:bc:ad:a2:e9:d8:53:cb:a9:d9:6f:
dd:a1:1f:db:ac:8a:b9:a4:62:96:01:07:c0:e9:3c:70:d4:23:
d4:9e:8f:c1:60:54:39:20:7b:e0:49:8a:7f:27:32:7e:52:d6:
f5:16:e2:cf:79:22:0f:70:56:36:70:60:6c:ea:a7:66:82:23:
fb:fc:99:ac:6c:6d:e0:9c:4b:5b:c8:2d:d8:71:ed:12:b5:b3:
77:3e:36:06:72:2e:a6:42:b0:c6:45:ea:98:55:40:ef:b7:3a:
75:c0:c1:30:7b:d8:29:7e:8b:20:7e:98:5c:9e:43:69:c9:cc:
f1:14:4f:c7:0a:e5:11:15:38:89:a5:da:23:b5:c3:1d:17:87:
80:c5:6b:02:fb:f7:68:fb:c5:65:5c:a6:53:e5:62:b2:0b:5d:
2e:df:2e:23:b3:37:e2:51:92:91:db:73:d9:47:2c:d9:11:44:
e8:6b:6b:e5:7a:a7:7e:ef:0d:3a:45:31:0c:32:c2:2e:8c:50:
2f:82:93:26:ce:bd:5d:ff:f5:b8:4e:c2:6b:4f:df:f8:86:20:
4e:c2:c7:c8:65:d4:d4:d0:ac:74:f3:c9:ce:24:b6:e9:90:78:
d0:84:d4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:28 2026 by rpki-client