Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/anxwGT_hdXpk7cbEV0EpXEFDWqA.roa
File: anxwGT_hdXpk7cbEV0EpXEFDWqA.roa (raw, json)
Hash identifier: 8r+8KS8jGQEq5fnlkaNPMhStA1hIa0zPj5xBUeOCXTw=
Subject key identifier: 6A:7C:70:19:3F:E1:75:7A:64:ED:C6:C4:57:41:29:5C:41:43:5A:A0
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019D1F398ED7A1F307971F7BDA43B73E2F2D
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/anxwGT_hdXpk7cbEV0EpXEFDWqA.roa
Signing time: Tue 24 Mar 2026 09:42:39 +0000
ROA not before: Tue 24 Mar 2026 09:42:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.133.80.0/24 maxlen: 24
31.133.81.0/24 maxlen: 24
31.133.82.0/24 maxlen: 24
31.133.83.0/24 maxlen: 24
31.133.88.0/24 maxlen: 24
31.133.89.0/24 maxlen: 24
31.133.90.0/24 maxlen: 24
31.133.91.0/24 maxlen: 24
176.103.224.0/24 maxlen: 24
176.103.225.0/24 maxlen: 24
176.103.226.0/24 maxlen: 24
176.103.227.0/24 maxlen: 24
176.103.232.0/24 maxlen: 24
176.103.233.0/24 maxlen: 24
176.103.234.0/24 maxlen: 24
176.103.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:39:8e:d7:a1:f3:07:97:1f:7b:da:43:b7:3e:2f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Mar 24 09:42:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a7c70193fe1757a64edc6c45741295c41435aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:6e:98:bf:fe:31:f6:11:30:bc:2b:52:0e:
c1:01:36:e0:83:a4:02:9d:0d:1b:a8:59:d3:47:4d:
14:0c:e7:61:1f:f6:ae:c9:81:47:57:1c:b4:4d:7e:
96:61:45:00:6c:cf:b3:bf:55:77:c2:e3:ba:a3:35:
35:4b:35:de:5c:e7:e9:4b:11:c8:aa:89:19:95:84:
18:c5:65:a3:5e:9a:80:be:b2:b8:0d:bf:f2:ea:50:
cf:fd:fd:de:6a:ed:bc:cc:d8:ec:32:cd:67:0c:18:
89:21:f2:02:c0:09:f9:28:0f:00:e3:a4:8b:d5:27:
ec:33:22:cf:cb:a1:a0:d5:40:43:78:27:1b:ef:4b:
35:95:88:71:da:3e:ab:df:22:a8:2c:f9:da:e3:9f:
25:cb:76:97:86:a4:bc:5e:54:61:18:33:6f:b8:c7:
c1:b6:66:68:37:0a:6a:80:c7:ae:6e:98:58:56:be:
24:2c:5a:6c:ce:0b:a4:01:28:69:e4:7d:2b:fa:1f:
0d:0d:4c:18:09:03:c2:2d:d6:db:f4:07:7a:40:2b:
be:f0:f0:6f:77:7f:8b:bf:37:38:59:52:e1:f3:f0:
10:1a:2d:ab:24:15:68:59:16:ad:f8:70:86:8b:76:
d0:c2:7a:7a:97:4b:8b:9d:36:32:2c:76:b9:e2:12:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7C:70:19:3F:E1:75:7A:64:ED:C6:C4:57:41:29:5C:41:43:5A:A0
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/anxwGT_hdXpk7cbEV0EpXEFDWqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0/22
31.133.88.0/22
176.103.224.0/22
176.103.232.0/22
Signature Algorithm: sha256WithRSAEncryption
30:4f:d0:5c:42:89:8b:15:be:64:f9:53:60:9e:d9:34:ec:b9:
14:f1:58:da:b2:13:20:8d:fa:39:bd:36:b2:6a:d8:f4:74:4f:
52:80:ac:69:6d:ff:42:e3:b9:eb:09:78:f7:d1:a9:4f:2b:97:
34:c5:10:6b:ee:b8:ab:da:a5:c4:95:98:f5:ef:95:94:9a:52:
e7:71:5d:be:04:31:5e:d4:c8:8a:2c:f4:8b:21:60:81:9e:98:
ca:93:1a:bc:b2:99:a2:f2:76:49:de:cd:9a:3d:4a:0c:45:b4:
aa:74:aa:4a:03:38:87:2d:11:2e:85:06:2e:cd:7d:50:a9:25:
85:12:23:eb:6d:d8:15:54:f5:6d:f2:50:5c:8d:e5:cd:9f:ec:
ad:cc:6f:4a:68:5a:43:c3:e3:44:e3:1c:b6:03:39:5e:49:c1:
69:e0:15:6a:4e:b9:20:e2:1f:10:f6:85:97:ea:4d:45:af:38:
67:e6:a1:f8:8e:35:6a:c3:8b:b3:ee:c9:c8:a4:85:12:af:48:
0b:5b:01:6e:fe:b8:28:d3:5d:1b:1e:a8:d6:44:00:99:96:47:
36:a7:94:80:fb:56:95:60:d2:ec:9f:cd:34:e8:ea:1d:27:5d:
91:fe:8b:30:4b:0f:45:89:cc:b0:86:22:3b:97:a9:ab:b1:ec:
7c:3a:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:33:05 2026 by rpki-client