Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/GiRiqDJW3m182UI9QPlQF8VWqB8.roa
File: GiRiqDJW3m182UI9QPlQF8VWqB8.roa (raw, json)
Hash identifier: SheJ5t+d9B+TRRIk2dtcwfI+XLN+51pNNqMhGO9Q1/M=
Subject key identifier: 1A:24:62:A8:32:56:DE:6D:7C:D9:42:3D:40:F9:50:17:C5:56:A8:1F
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 01A022C1978D6A8F99BB249853A8E6308FA2
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/GiRiqDJW3m182UI9QPlQF8VWqB8.roa
Signing time: Fri 21 Aug 2026 05:18:27 +0000
ROA not before: Fri 21 Aug 2026 05:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50959
IP address blocks: 31.171.64.0/24 maxlen: 24
31.171.65.0/24 maxlen: 24
31.171.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:22:c1:97:8d:6a:8f:99:bb:24:98:53:a8:e6:30:8f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Aug 21 05:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a2462a83256de6d7cd9423d40f95017c556a81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:9b:6e:65:fe:aa:00:a8:0d:e8:8f:36:10:
2e:73:56:b7:52:ab:29:39:69:b6:32:fe:da:66:a1:
c4:54:04:79:35:79:25:a7:17:49:9c:49:f8:8c:71:
07:7d:9d:14:29:86:15:53:0f:4f:18:50:86:96:3d:
17:31:fd:4e:da:cd:f0:b3:4b:67:c7:be:51:42:d5:
a8:39:d1:2d:9e:6b:f3:fb:db:c5:7d:07:2e:2b:a0:
c0:55:0d:5f:3d:d5:0c:12:a8:91:ed:91:a5:1d:36:
40:1a:e5:b1:ee:ee:c2:68:73:14:aa:d6:d0:e5:36:
41:d0:59:12:24:be:29:0b:aa:c9:4f:da:7f:15:36:
af:7a:4f:0f:c4:ee:a3:c7:f3:17:29:8c:ec:e2:59:
86:10:01:50:16:51:ef:e6:9c:be:71:f1:8f:fe:aa:
ab:0a:37:99:f5:fc:73:c5:7a:bc:25:e0:0f:db:fc:
bb:60:ff:3b:ae:89:fa:57:e2:16:cc:7f:ec:bf:fe:
ca:20:45:87:ef:4c:6e:a9:8e:6b:06:f3:d8:d2:2b:
9b:e0:15:61:a8:21:6f:e6:af:d2:bf:c8:0d:6a:57:
1c:c6:b2:a0:b3:a8:c4:cd:e4:49:5c:9b:1f:97:79:
7f:77:1d:e0:6d:dd:9e:e3:e4:a9:16:a9:d7:0d:0f:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:24:62:A8:32:56:DE:6D:7C:D9:42:3D:40:F9:50:17:C5:56:A8:1F
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/GiRiqDJW3m182UI9QPlQF8VWqB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.64.0-31.171.66.255
Signature Algorithm: sha256WithRSAEncryption
89:6c:f8:8d:d9:8f:f3:6d:5e:5b:bc:a3:70:4e:d2:80:f6:17:
d0:2f:01:81:9f:fb:e0:41:07:67:3e:0d:1a:f1:e7:8a:23:06:
c2:8f:75:4f:c1:bd:3a:da:18:38:54:e7:68:e0:33:ec:6d:31:
80:c9:d7:16:88:b7:dd:5c:5e:7a:31:7e:b9:7a:d2:f3:46:51:
47:ed:f1:6c:6f:32:2a:67:58:31:ca:4c:95:b9:72:c3:47:e1:
4d:82:d3:60:b7:a0:22:78:eb:3f:d9:8b:95:de:34:ed:73:27:
31:d9:30:87:9e:be:04:6e:58:df:b4:fb:6f:be:a6:b5:bd:b8:
29:7d:57:6d:9a:13:f5:0e:12:fd:2d:45:58:71:96:2d:6e:b3:
ef:d8:f8:ff:4d:db:22:d9:84:0d:91:fe:2e:19:45:fa:70:ee:
4b:4b:92:52:4e:72:a5:b2:42:38:f9:83:0c:70:fc:74:5e:87:
7e:fd:a9:23:e9:47:33:ed:6d:5b:f8:31:37:c4:08:1e:26:62:
a1:f5:98:b0:a6:05:93:fd:f1:41:24:42:29:7f:d2:b4:d1:21:
14:90:6e:68:1f:b0:c6:fd:6a:f7:f9:48:1f:cc:e8:85:69:17:
71:26:c5:8d:d8:ac:c0:62:a6:8c:fb:40:1d:a8:88:d0:bb:b8:
df:44:6d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:58:11 2026 by rpki-client