Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/Fk0e_c9xc84N4Glhep1WPxto6dU.roa
File: Fk0e_c9xc84N4Glhep1WPxto6dU.roa (raw, json)
Hash identifier: K8FkMtgeMOoJrKUMlJXSug1lFCmh3z6VEx2VFsgMiFg=
Subject key identifier: 16:4D:1E:FD:CF:71:73:CE:0D:E0:69:61:7A:9D:56:3F:1B:68:E9:D5
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019D05C13B3A3C226789D0A6DAF048D88D37
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/Fk0e_c9xc84N4Glhep1WPxto6dU.roa
Signing time: Thu 19 Mar 2026 11:00:42 +0000
ROA not before: Thu 19 Mar 2026 11:00:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206977
IP address blocks: 31.170.232.0/24 maxlen: 24
31.170.233.0/24 maxlen: 24
31.170.234.0/24 maxlen: 24
31.170.235.0/24 maxlen: 24
31.170.236.0/24 maxlen: 24
31.170.237.0/24 maxlen: 24
31.170.238.0/24 maxlen: 24
31.170.239.0/24 maxlen: 24
31.171.113.0/24 maxlen: 24
31.171.115.0/24 maxlen: 24
85.132.24.0/24 maxlen: 24
85.132.26.0/24 maxlen: 24
85.132.27.0/24 maxlen: 24
85.132.58.0/24 maxlen: 24
85.132.65.0/24 maxlen: 24
85.132.66.0/24 maxlen: 24
85.132.70.0/24 maxlen: 24
85.132.121.0/24 maxlen: 24
85.132.122.0/24 maxlen: 24
94.20.63.0/24 maxlen: 24
94.20.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:c1:3b:3a:3c:22:67:89:d0:a6:da:f0:48:d8:8d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Mar 19 11:00:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=164d1efdcf7173ce0de069617a9d563f1b68e9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:50:c4:ae:5f:5f:74:33:44:7f:d3:27:23:
39:99:1e:11:19:2b:59:8a:9e:b1:14:08:4b:ac:1d:
c3:e2:f9:db:f2:53:0d:e3:d0:95:df:94:e7:ea:e1:
1a:db:d3:6c:96:98:7e:7e:61:ce:fa:a7:24:c7:ef:
05:05:09:b8:f5:0f:94:64:f2:2a:24:a2:ed:55:1f:
46:e2:54:64:75:85:51:9a:9e:73:d1:6b:2c:d2:2d:
54:e6:4e:dd:c4:43:99:b1:d1:b4:ab:75:c9:ce:90:
ee:5c:0d:07:48:a0:b2:e0:3f:e3:5b:0c:13:80:f1:
72:29:73:94:44:88:9c:8c:0f:03:ef:c7:6a:77:3a:
f0:60:3b:15:97:35:5c:79:bb:06:99:48:e0:86:50:
43:65:39:37:9d:27:15:63:04:c5:38:a3:13:dd:79:
c9:ac:8d:bf:3a:60:e2:ec:ba:b6:92:cd:ed:98:e3:
19:55:8e:48:7b:ab:68:79:aa:31:7f:55:9e:e8:7a:
54:66:ec:1c:90:52:5d:de:41:f3:b4:6c:c6:ed:ea:
ce:3b:e3:68:f4:2e:b8:5d:22:b6:50:0d:43:21:b0:
4d:84:d2:60:76:36:b2:10:ea:4a:67:43:05:3d:a0:
da:8e:7a:dc:ca:7e:97:4b:3e:04:c7:0e:02:14:1d:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4D:1E:FD:CF:71:73:CE:0D:E0:69:61:7A:9D:56:3F:1B:68:E9:D5
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/Fk0e_c9xc84N4Glhep1WPxto6dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.232.0/21
31.171.113.0/24
31.171.115.0/24
85.132.24.0/24
85.132.26.0/23
85.132.58.0/24
85.132.65.0-85.132.66.255
85.132.70.0/24
85.132.121.0-85.132.122.255
94.20.63.0/24
94.20.157.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:66:98:76:1c:08:7d:fe:fd:e1:e2:4a:f0:d3:e6:6d:a9:94:
8c:66:c0:a3:5f:97:f8:cd:31:e5:dc:87:cb:c7:79:ff:ac:69:
24:63:cf:c0:de:fa:45:4a:0e:8e:8f:fa:8a:96:a2:c3:66:81:
66:18:41:d7:da:01:20:41:99:82:d6:ff:fd:c8:c3:73:2e:99:
50:40:02:7b:84:8c:3e:6e:c1:7c:7f:34:bc:f8:e9:35:a0:ba:
fa:b6:7e:f9:ee:84:97:0a:c4:9f:ec:50:e2:cb:86:7e:44:17:
16:c7:7d:a0:e9:24:d3:61:7f:fe:6f:c4:5d:ae:37:8c:2e:ea:
f0:7a:9f:47:bb:93:05:93:c4:ad:0b:cd:8d:d4:f8:d2:3c:c1:
78:c5:8a:26:1c:78:c5:26:13:5e:e6:a5:04:83:ca:02:5c:33:
3b:a2:59:e3:45:10:02:13:59:25:9c:1d:53:90:4c:2d:45:27:
93:7a:c1:c3:b8:74:97:14:a8:27:76:59:e7:31:d1:77:68:83:
27:0e:ce:77:50:4b:42:d5:c1:13:28:92:e6:50:42:2c:cf:de:
1b:03:e8:37:d4:46:f3:cc:cc:8b:8f:54:f6:9a:fe:a7:7a:66:
b0:f3:75:49:f2:ae:c2:2d:83:ca:6e:c5:84:d5:fa:f2:27:89:
2d:e1:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:03:29 2026 by rpki-client