Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/tHJSj1eAta6y-GF7elY0P3HQoSY.roa
File: tHJSj1eAta6y-GF7elY0P3HQoSY.roa (raw, json)
Hash identifier: aM0FUMY7W1Z6QKDoCxyyVAGXcyLgugpOHvAjA/YkwDY=
Subject key identifier: B4:72:52:8F:57:80:B5:AE:B2:F8:61:7B:7A:56:34:3F:71:D0:A1:26
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019CE21C9D16E22EFCD21A1FCB9F7B42C721
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/tHJSj1eAta6y-GF7elY0P3HQoSY.roa
Signing time: Thu 12 Mar 2026 12:54:11 +0000
ROA not before: Thu 12 Mar 2026 12:54:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200446
IP address blocks: 31.170.240.0/21 maxlen: 21
31.171.48.0/21 maxlen: 21
31.171.56.0/21 maxlen: 21
31.171.68.0/22 maxlen: 22
31.171.72.0/22 maxlen: 22
31.171.80.0/21 maxlen: 21
31.171.88.0/21 maxlen: 21
62.212.229.0/24 maxlen: 24
85.132.108.0/24 maxlen: 24
85.132.110.0/24 maxlen: 24
94.20.54.0/24 maxlen: 24
94.20.123.0/24 maxlen: 24
94.20.148.0/22 maxlen: 22
94.20.172.0/22 maxlen: 22
94.20.180.0/22 maxlen: 22
94.20.192.0/23 maxlen: 23
94.20.204.0/22 maxlen: 22
94.20.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:1c:9d:16:e2:2e:fc:d2:1a:1f:cb:9f:7b:42:c7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Mar 12 12:54:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b472528f5780b5aeb2f8617b7a56343f71d0a126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:58:58:d8:36:e9:76:73:35:de:3f:2c:30:a7:
dd:19:4d:a6:84:f3:a1:ce:dc:57:b9:ad:38:3f:dc:
63:f7:1d:1b:11:fc:ff:45:1c:7b:53:9c:07:3d:b9:
8f:b6:8e:b2:81:65:46:b8:10:10:e2:2f:58:a6:98:
ef:ff:9a:71:3f:34:ae:b0:24:72:56:2f:44:3d:75:
f6:d6:b5:ff:87:12:06:6a:c6:65:87:8b:38:01:90:
a0:a4:8a:4f:a5:6f:02:29:47:de:1c:08:0a:1e:42:
5d:c5:c4:9f:5c:52:79:d3:a4:d3:a2:a8:d8:ae:bd:
fd:4b:ba:1c:bf:d4:69:b9:d0:ab:1d:28:cf:f3:3c:
f0:9f:91:3e:fa:c5:ab:dc:a2:94:9c:a7:e4:80:bf:
6c:52:aa:88:f7:e8:79:fc:87:5b:d8:59:13:e2:01:
7e:8c:66:30:bb:3a:2e:27:0e:6d:bc:e7:65:05:dd:
69:25:2e:c7:ff:e4:00:a2:eb:83:5e:f7:a7:7a:08:
4a:f4:26:a9:cf:f2:3c:ec:39:ca:b7:c7:00:b0:f8:
32:4f:27:af:18:6c:eb:63:5f:d0:e5:ba:2b:5c:d7:
07:f3:d4:14:bf:64:1e:b5:b6:8f:8c:71:84:36:e2:
a7:45:54:77:df:89:94:51:91:40:27:a1:84:6b:3b:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:72:52:8F:57:80:B5:AE:B2:F8:61:7B:7A:56:34:3F:71:D0:A1:26
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/tHJSj1eAta6y-GF7elY0P3HQoSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.240.0/21
31.171.48.0/20
31.171.68.0-31.171.75.255
31.171.80.0/20
62.212.229.0/24
85.132.108.0/24
85.132.110.0/24
94.20.54.0/24
94.20.123.0/24
94.20.148.0/22
94.20.172.0/22
94.20.180.0/22
94.20.192.0/23
94.20.204.0-94.20.215.255
Signature Algorithm: sha256WithRSAEncryption
37:35:1d:08:5d:d7:fa:5e:4d:e0:16:65:4f:cc:fe:55:d9:6f:
35:c1:47:5a:32:0b:f9:2c:a8:60:b6:66:22:2b:48:6e:0a:46:
98:bc:96:3c:44:f1:66:b6:8f:76:ed:da:6b:f1:0e:1c:69:7b:
44:d3:a3:42:38:01:55:01:f1:a6:87:62:91:51:cc:bb:96:e5:
84:6e:a9:8e:08:42:a6:61:1d:35:5a:df:f3:73:82:e9:66:82:
d3:1e:48:3a:8e:24:22:5d:9d:24:b4:96:92:22:95:53:01:9c:
eb:1e:64:ed:2a:ec:d7:92:ba:f7:51:fe:fa:9f:24:78:1e:25:
44:a6:f6:ac:5f:2f:8c:dc:08:a2:50:95:c4:de:c2:03:ef:a8:
e4:60:3f:eb:b5:15:02:01:f8:59:72:82:12:23:f0:2d:18:f3:
60:4c:18:8d:68:eb:3b:b9:50:32:07:ca:f2:0e:80:93:f7:d4:
e1:3c:9f:88:4a:3a:b3:b4:85:20:06:d7:97:70:4c:fe:c4:4f:
c2:e7:4e:3c:20:98:d0:be:93:15:3b:55:85:7b:11:a4:18:22:
3a:8c:21:c5:64:88:7a:fc:be:11:59:b8:a8:dc:08:87:f1:b5:
cd:74:34:5e:39:2f:80:37:5f:cf:e1:89:09:25:39:e1:74:80:
ab:45:ba:4d
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgISAZziHJ0W4i780hofy597QschMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjUyYTQ3NzI0MmZiNDVmMjBiYjA4MDIwYTQwM2EyYmI0
NjZhOWIwHhcNMjYwMzEyMTI1NDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDcyNTI4ZjU3ODBiNWFlYjJmODYxN2I3YTU2MzQzZjcxZDBhMTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVhY2DbpdnM13j8sMKfdGU2mhPOh
ztxXua04P9xj9x0bEfz/RRx7U5wHPbmPto6ygWVGuBAQ4i9Yppjv/5pxPzSusCRy
Vi9EPXX21rX/hxIGasZlh4s4AZCgpIpPpW8CKUfeHAgKHkJdxcSfXFJ506TToqjY
rr39S7ocv9RpudCrHSjP8zzwn5E++sWr3KKUnKfkgL9sUqqI9+h5/Idb2FkT4gF+
jGYwuzouJw5tvOdlBd1pJS7H/+QAouuDXveneghK9Capz/I87DnKt8cAsPgyTyev
GGzrY1/Q5borXNcH89QUv2QetbaPjHGENuKnRVR334mUUZFAJ6GEazuoaQIDAQAB
o4ICZzCCAmMwHQYDVR0OBBYEFLRyUo9XgLWusvhhe3pWND9x0KEmMB8GA1UdIwQY
MBaAFC4lKkdyQvtF8guwgCCkA6K7RmqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmIt
MTZmMTQ2YmVmOTk1LzEvdEhKU2oxZUF0YTZ5LUdGN2VsWTBQM0hRb1NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmItMTZmMTQ2YmVmOTk1
LzEvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQDH6rwAwQE
H6swMAwDBAIfq0QDBAIfq0gDBAQfq1ADBAA+1OUDBABVhGwDBABVhG4DBABeFDYD
BABeFHsDBAJeFJQDBAJeFKwDBAJeFLQDBAFeFMAwDAMEAl4UzAMEA14U0DANBgkq
hkiG9w0BAQsFAAOCAQEANzUdCF3X+l5N4BZlT8z+VdlvNcFHWjIL+SyoYLZmIitI
bgpGmLyWPETxZraPdu3aa/EOHGl7RNOjQjgBVQHxpodikVHMu5blhG6pjghCpmEd
NVrf83OC6WaC0x5IOo4kIl2dJLSWkiKVUwGc6x5k7Srs15K691H++p8keB4lRKb2
rF8vjNwIolCVxN7CA++o5GA/67UVAgH4WXKCEiPwLRjzYEwYjWjrO7lQMgfK8g6A
k/fU4TyfiEo6s7SFIAbXl3BM/sRPwudOPCCY0L6TFTtVhXsRpBgiOowhxWSIevy+
EVm4qNwIh/G1zXQ0XjkvgDdfz+GJCSU54XSAq0W6TQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:06:11 2026 by rpki-client