Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/ZP0rASlfbI0Eh5AhSZ7uHzxbJUo.roa
File: ZP0rASlfbI0Eh5AhSZ7uHzxbJUo.roa (raw, json)
Hash identifier: GmmP2J7fyB00Xd+TiyxQingSm9m+0jcuXwcbjFstpKE=
Subject key identifier: 64:FD:2B:01:29:5F:6C:8D:04:87:90:21:49:9E:EE:1F:3C:5B:25:4A
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019CE30F3679FCC3A6B8FEB24C8A388B38C5
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/ZP0rASlfbI0Eh5AhSZ7uHzxbJUo.roa
Signing time: Thu 12 Mar 2026 17:19:10 +0000
ROA not before: Thu 12 Mar 2026 17:19:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49345
IP address blocks: 31.171.1.0/24 maxlen: 24
31.171.2.0/24 maxlen: 24
31.171.125.0/24 maxlen: 24
85.132.102.0/23 maxlen: 23
94.20.25.0/24 maxlen: 24
94.20.46.0/24 maxlen: 24
94.20.55.0/24 maxlen: 24
94.20.66.0/23 maxlen: 23
94.20.87.0/24 maxlen: 24
94.20.100.0/24 maxlen: 24
94.20.101.0/24 maxlen: 24
94.20.102.0/23 maxlen: 23
94.20.124.0/22 maxlen: 22
94.20.139.0/24 maxlen: 24
94.20.162.0/24 maxlen: 24
94.20.190.0/24 maxlen: 24
94.20.191.0/24 maxlen: 24
94.20.247.0/24 maxlen: 24
94.20.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:0f:36:79:fc:c3:a6:b8:fe:b2:4c:8a:38:8b:38:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Mar 12 17:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64fd2b01295f6c8d04879021499eee1f3c5b254a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:34:5a:07:5c:f6:74:81:51:bd:33:78:ab:
93:79:ae:9a:51:cf:a7:d8:8f:aa:b7:70:59:80:02:
cf:92:17:29:37:52:78:f4:b3:a0:f4:a9:1e:f4:9e:
80:38:3e:8a:98:28:fe:36:b5:ae:6d:cd:83:c2:7e:
74:00:87:9a:98:4b:2e:b0:ba:02:d6:b3:4b:d2:82:
6b:1e:33:00:16:f4:1f:3d:c0:da:57:e0:dd:68:1b:
14:ff:36:02:0b:98:d9:d0:bf:5f:c2:53:68:9e:13:
63:90:ca:b5:63:e4:94:5c:e6:16:a9:61:8a:4d:09:
c3:41:fe:fa:a6:f6:e1:83:68:41:f4:93:aa:f0:14:
15:10:ec:50:40:0d:ea:94:57:20:c7:2b:94:d1:12:
d7:18:de:30:aa:c7:69:9d:74:2e:bd:aa:4f:2e:a0:
c6:a9:6a:3e:8b:27:04:41:75:f4:a8:f6:b0:ce:5b:
4a:46:38:50:a2:51:0e:9b:f2:86:dd:47:f4:0a:f5:
2d:f1:97:12:2a:31:a3:e8:36:f0:9e:00:c5:4c:65:
6b:1c:78:00:11:cc:0d:e9:14:c3:af:ce:7f:3e:98:
19:b2:9d:8e:90:c9:77:da:13:6d:05:e1:66:cb:ec:
a7:d9:ae:5b:5e:80:76:07:b5:99:a6:0f:64:5c:2c:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FD:2B:01:29:5F:6C:8D:04:87:90:21:49:9E:EE:1F:3C:5B:25:4A
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/ZP0rASlfbI0Eh5AhSZ7uHzxbJUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.1.0-31.171.2.255
31.171.125.0/24
85.132.102.0/23
94.20.25.0/24
94.20.46.0/24
94.20.55.0/24
94.20.66.0/23
94.20.87.0/24
94.20.100.0/22
94.20.124.0/22
94.20.139.0/24
94.20.162.0/24
94.20.190.0/23
94.20.247.0/24
94.20.251.0/24
Signature Algorithm: sha256WithRSAEncryption
37:fc:7d:28:37:61:31:fa:c2:ed:06:46:66:8f:18:f2:d0:ca:
a6:40:66:2b:d7:b8:d5:fe:85:8e:6f:cd:6a:29:2f:81:b9:c2:
a5:09:0e:18:c7:35:61:9f:e0:57:c4:f2:c9:33:a5:bd:01:c3:
24:bb:1c:b4:53:64:1c:05:90:1c:c8:93:7b:b4:d2:7d:95:a8:
dc:bf:76:2f:91:2c:c7:85:98:91:b6:37:fd:4d:a0:b0:a8:ee:
44:ea:cb:06:45:ff:79:e5:c0:b8:f3:2f:a9:d7:d8:7b:c5:68:
81:37:e0:66:47:d4:66:4e:90:7a:14:86:5b:26:c6:ff:af:5e:
c5:b6:d1:54:31:78:27:f4:6e:8d:21:30:c4:83:c7:2c:24:9c:
d1:88:de:a8:8d:27:b8:cf:6d:3a:22:a8:1c:71:44:f1:79:05:
84:f3:aa:ce:d5:a7:f2:76:ee:a3:e4:bc:bd:0e:58:9f:ab:e3:
be:45:91:cb:a0:3f:21:95:3f:a9:b5:71:5b:51:40:1e:b3:5c:
6c:44:b0:21:b7:6d:85:93:64:cc:8e:42:40:2b:84:ad:28:69:
97:e1:30:f1:77:2e:85:ec:1b:d3:1d:9d:92:e5:80:68:f3:a6:
ec:e9:0c:5b:f6:cd:73:1e:b1:20:46:af:85:dd:d2:da:84:9f:
33:08:87:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:18 2026 by rpki-client