Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/s2I8WlcDu0qyeND8yhbMSlsV72k.roa
File: s2I8WlcDu0qyeND8yhbMSlsV72k.roa (raw, json)
Hash identifier: f/mdWOXq9J9Y4Rcm8jYlEliu/mcqK0l0GStpJCyfj8M=
Subject key identifier: B3:62:3C:5A:57:03:BB:4A:B2:78:D0:FC:CA:16:CC:4A:5B:15:EF:69
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 01A022C62B4506BF59BB61B5FB6661C89097
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/s2I8WlcDu0qyeND8yhbMSlsV72k.roa
Signing time: Fri 21 Aug 2026 05:23:27 +0000
ROA not before: Fri 21 Aug 2026 05:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49345
IP address blocks: 31.171.1.0/24 maxlen: 24
31.171.2.0/24 maxlen: 24
31.171.41.0/24 maxlen: 24
31.171.125.0/24 maxlen: 24
85.132.102.0/23 maxlen: 23
94.20.25.0/24 maxlen: 24
94.20.46.0/24 maxlen: 24
94.20.55.0/24 maxlen: 24
94.20.66.0/23 maxlen: 23
94.20.87.0/24 maxlen: 24
94.20.100.0/24 maxlen: 24
94.20.101.0/24 maxlen: 24
94.20.102.0/23 maxlen: 23
94.20.124.0/22 maxlen: 22
94.20.139.0/24 maxlen: 24
94.20.162.0/24 maxlen: 24
94.20.190.0/24 maxlen: 24
94.20.191.0/24 maxlen: 24
94.20.247.0/24 maxlen: 24
94.20.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:22:c6:2b:45:06:bf:59:bb:61:b5:fb:66:61:c8:90:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Aug 21 05:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3623c5a5703bb4ab278d0fcca16cc4a5b15ef69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3c:60:9a:2c:54:01:f8:22:28:b1:51:57:b4:
b6:35:b4:99:71:af:59:e9:e2:13:4a:2a:86:2b:d1:
e5:e5:11:a9:1e:10:c9:fa:d0:a2:25:a1:d5:5d:29:
ae:9b:4d:23:46:ce:3a:99:dc:fa:ce:1c:07:4d:f7:
a6:2b:2a:e6:64:82:fa:d8:cf:fd:b7:0b:b3:79:04:
0c:61:5c:41:94:7b:ed:ab:48:78:66:12:f8:5b:bd:
2d:d7:02:ec:7e:cf:90:45:f5:38:28:64:31:49:17:
b1:d0:d8:64:45:65:a1:2f:4b:5e:d9:4f:1f:15:2d:
7a:b5:b4:c0:54:82:da:db:0b:de:bd:bb:c8:06:95:
9f:ae:ea:cf:0c:7d:f7:99:04:b3:14:eb:77:70:75:
21:5f:73:5c:0d:b9:ea:3a:6c:e3:33:25:b9:da:c7:
22:72:cb:45:e7:8a:b8:97:dd:d9:ce:3f:de:96:ec:
11:14:f7:43:ff:8e:36:b7:3d:c4:c8:2e:bf:35:e6:
54:69:4b:1e:a2:1d:e2:bd:b4:df:92:2a:59:11:60:
dc:bf:17:9e:bb:ae:55:d5:35:0d:d2:56:f7:18:a8:
f3:8f:03:65:9c:f3:d2:94:79:c2:37:b4:11:05:e4:
6e:4c:15:a8:1c:be:61:83:e0:5d:a8:b7:9f:7a:11:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:62:3C:5A:57:03:BB:4A:B2:78:D0:FC:CA:16:CC:4A:5B:15:EF:69
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/s2I8WlcDu0qyeND8yhbMSlsV72k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.1.0-31.171.2.255
31.171.41.0/24
31.171.125.0/24
85.132.102.0/23
94.20.25.0/24
94.20.46.0/24
94.20.55.0/24
94.20.66.0/23
94.20.87.0/24
94.20.100.0/22
94.20.124.0/22
94.20.139.0/24
94.20.162.0/24
94.20.190.0/23
94.20.247.0/24
94.20.251.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c3:99:d8:e6:11:68:a4:c5:7a:27:a1:9f:9f:74:35:cb:0e:
95:f8:f8:57:03:a1:8a:65:36:16:b2:69:7b:03:de:14:8f:6b:
5b:ed:b4:08:59:fb:b6:20:fa:68:6f:03:4e:c9:97:05:2b:20:
18:ff:ee:a9:e3:cb:17:0a:b8:c1:c8:cf:e9:28:32:1c:43:4e:
40:c7:86:23:b1:0c:a1:36:ae:b8:55:05:2e:61:49:09:b6:b0:
36:bd:45:93:c6:2c:6d:b7:fc:34:ea:ce:91:50:cb:35:45:d8:
a5:d5:7d:50:d6:db:8a:20:95:99:89:6d:b8:bc:32:83:c6:dd:
8f:ba:32:f2:4a:64:91:ed:49:6b:49:70:71:41:d1:ea:31:e0:
5a:93:0d:fe:db:8c:55:ac:0c:48:e8:83:38:ca:8e:bb:89:c9:
8f:51:c3:6d:59:7b:07:f6:51:cf:5d:a1:9b:1e:b9:f7:2d:12:
fa:3b:db:f6:09:09:11:a6:8e:15:ce:ca:7a:35:fb:6f:13:25:
dd:9f:dd:34:68:3a:c2:2c:e3:77:ed:5e:af:ef:0f:aa:49:40:
d1:63:12:d5:4f:a2:c6:12:db:cd:c6:9e:9c:57:14:8a:7f:fb:
3a:6c:92:02:ea:79:e6:57:c3:4b:b2:48:c5:75:b6:0b:44:73:
26:59:f8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:51:17 2026 by rpki-client