Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/4G5CX3RoxpLNsz7xFs_RlT-B8yo.roa
File: 4G5CX3RoxpLNsz7xFs_RlT-B8yo.roa (raw, json)
Hash identifier: UzvEzTLQyvUlh8NzX1HUp0Znvv2LEVNFfUDFzEGVWfI=
Subject key identifier: E0:6E:42:5F:74:68:C6:92:CD:B3:3E:F1:16:CF:D1:95:3F:81:F3:2A
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 01A0BFA920CD1ED5EFE0C57ECE5FFCA2A069
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/4G5CX3RoxpLNsz7xFs_RlT-B8yo.roa
Signing time: Sun 20 Sep 2026 16:32:07 +0000
ROA not before: Sun 20 Sep 2026 16:32:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60819
IP address blocks: 31.3.64.0/21 maxlen: 21
31.3.64.0/22 maxlen: 22
31.3.64.0/24 maxlen: 24
31.3.65.0/24 maxlen: 24
31.3.66.0/24 maxlen: 24
31.3.67.0/24 maxlen: 24
31.3.68.0/24 maxlen: 24
31.3.69.0/24 maxlen: 24
31.3.70.0/24 maxlen: 24
31.3.71.0/24 maxlen: 24
31.14.216.0/24 maxlen: 24
31.14.217.0/24 maxlen: 24
46.102.117.0/24 maxlen: 24
84.247.17.0/24 maxlen: 24
84.247.21.0/24 maxlen: 24
86.104.5.0/24 maxlen: 24
86.104.11.0/24 maxlen: 24
86.105.3.0/24 maxlen: 24
86.106.11.0/24 maxlen: 24
86.106.12.0/24 maxlen: 24
86.106.172.0/24 maxlen: 24
89.33.82.0/24 maxlen: 24
89.33.104.0/24 maxlen: 24
89.34.109.0/24 maxlen: 24
89.34.222.0/24 maxlen: 24
89.34.223.0/24 maxlen: 24
89.42.58.0/24 maxlen: 24
89.44.244.0/24 maxlen: 24
89.46.63.0/24 maxlen: 24
89.47.235.0/24 maxlen: 24
92.114.80.0/24 maxlen: 24
93.113.200.0/24 maxlen: 24
93.113.201.0/24 maxlen: 24
93.114.48.0/24 maxlen: 24
93.114.49.0/24 maxlen: 24
93.115.247.0/24 maxlen: 24
94.176.129.0/24 maxlen: 24
185.96.161.0/24 maxlen: 24
185.191.160.0/22 maxlen: 22
185.191.160.0/24 maxlen: 24
185.191.161.0/24 maxlen: 24
185.191.162.0/24 maxlen: 24
185.191.163.0/24 maxlen: 24
188.208.34.0/24 maxlen: 24
188.208.35.0/24 maxlen: 24
188.212.249.0/24 maxlen: 24
188.214.28.0/24 maxlen: 24
188.214.58.0/24 maxlen: 24
188.214.80.0/24 maxlen: 24
188.214.110.0/24 maxlen: 24
188.240.50.0/24 maxlen: 24
188.240.197.0/24 maxlen: 24
188.241.8.0/24 maxlen: 24
188.241.9.0/24 maxlen: 24
188.241.14.0/24 maxlen: 24
188.241.145.0/24 maxlen: 24
188.241.147.0/24 maxlen: 24
217.19.240.0/24 maxlen: 24
217.19.241.0/24 maxlen: 24
217.19.242.0/24 maxlen: 24
217.19.243.0/24 maxlen: 24
217.19.244.0/22 maxlen: 22
217.19.244.0/24 maxlen: 24
217.19.248.0/24 maxlen: 24
217.19.249.0/24 maxlen: 24
217.19.250.0/24 maxlen: 24
217.19.251.0/24 maxlen: 24
217.19.252.0/24 maxlen: 24
217.19.253.0/24 maxlen: 24
217.19.254.0/24 maxlen: 24
217.19.255.0/24 maxlen: 24
2a00:a900::/32 maxlen: 32
2a00:a900:7afe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:a9:20:cd:1e:d5:ef:e0:c5:7e:ce:5f:fc:a2:a0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Sep 20 16:32:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e06e425f7468c692cdb33ef116cfd1953f81f32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:92:3d:62:80:f3:72:92:fc:f0:16:41:c7:
f3:f5:f3:9d:ad:3f:9e:4e:97:3a:20:82:c1:cb:0e:
26:70:d2:31:31:be:2b:82:7b:fd:cd:64:fb:fe:e5:
06:00:74:42:e1:f9:95:83:61:db:f5:f6:45:68:1c:
73:ae:35:83:7d:da:e1:76:de:1a:71:b9:e5:3c:4c:
47:11:31:da:41:5c:df:aa:d4:be:12:af:e1:65:83:
4f:43:34:16:a3:d2:3f:7f:b1:dd:30:dc:bf:30:d5:
f3:e6:a5:92:4a:ac:32:50:1b:67:6c:31:1d:b7:95:
d1:81:6b:54:37:9a:6c:9c:9c:40:4b:1d:d2:70:dc:
85:8b:99:5b:bc:e3:45:db:1c:2a:c2:2f:a7:5f:b4:
9d:ef:3f:f9:41:bc:4f:47:d7:69:1c:9a:8a:e6:ab:
5c:69:08:c3:19:9f:31:13:d6:fd:f8:d7:fc:25:ef:
90:69:db:4e:48:3e:9e:92:28:91:7a:59:8f:02:e9:
72:aa:80:5a:2a:d9:94:30:59:0a:54:ce:3e:a8:3d:
28:11:4b:0e:b6:ac:99:79:15:f4:ec:32:42:d0:7c:
04:29:cb:1b:74:5b:b5:27:45:b9:9a:5e:ba:12:cf:
13:20:c4:06:06:d9:db:e3:02:d0:ad:97:d2:24:fa:
d3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6E:42:5F:74:68:C6:92:CD:B3:3E:F1:16:CF:D1:95:3F:81:F3:2A
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/4G5CX3RoxpLNsz7xFs_RlT-B8yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.64.0/21
31.14.216.0/23
46.102.117.0/24
84.247.17.0/24
84.247.21.0/24
86.104.5.0/24
86.104.11.0/24
86.105.3.0/24
86.106.11.0-86.106.12.255
86.106.172.0/24
89.33.82.0/24
89.33.104.0/24
89.34.109.0/24
89.34.222.0/23
89.42.58.0/24
89.44.244.0/24
89.46.63.0/24
89.47.235.0/24
92.114.80.0/24
93.113.200.0/23
93.114.48.0/23
93.115.247.0/24
94.176.129.0/24
185.96.161.0/24
185.191.160.0/22
188.208.34.0/23
188.212.249.0/24
188.214.28.0/24
188.214.58.0/24
188.214.80.0/24
188.214.110.0/24
188.240.50.0/24
188.240.197.0/24
188.241.8.0/23
188.241.14.0/24
188.241.145.0/24
188.241.147.0/24
217.19.240.0/20
IPv6:
2a00:a900::/32
Signature Algorithm: sha256WithRSAEncryption
84:69:b8:35:a5:32:63:e9:18:d5:4c:d1:ab:cd:61:90:ae:c2:
cf:55:aa:1b:90:00:12:10:91:28:35:98:d3:9f:bc:cf:41:67:
2d:eb:f8:f2:2a:ea:ed:f2:7b:4f:7b:b1:b4:7e:49:59:27:62:
98:8c:a2:99:bd:0b:68:58:dc:e6:9f:ad:ea:ec:7a:fa:41:d3:
4b:e5:bb:15:0b:72:f9:00:24:96:5a:58:12:53:0f:d2:10:81:
85:56:62:da:45:9d:cd:e7:ed:68:3f:a4:af:31:ef:11:ed:07:
11:ea:55:33:17:3e:ba:db:bb:74:1a:44:18:ad:52:43:5d:b9:
68:58:37:17:64:7f:2d:3d:81:81:b8:ec:9b:c2:eb:27:6b:46:
af:ec:e9:a2:8e:87:c4:dc:0d:68:b2:ef:ae:55:55:6f:7d:04:
97:0c:f7:6a:15:00:7b:ed:3b:50:1c:4f:af:ff:38:6b:03:7b:
c1:82:9d:97:e2:9c:b0:16:49:c4:dc:d1:f8:fc:2a:b6:f2:3e:
91:e3:f6:4d:50:4e:47:18:c9:4c:a5:3e:95:31:57:42:41:8b:
a2:03:e7:68:c0:8e:25:6b:7b:0d:72:dd:37:15:8f:a7:e6:4d:
f7:4a:d8:80:21:8e:ad:ad:d2:e9:e6:63:27:a0:78:ca:28:8c:
58:b9:71:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:05:22 2026 by rpki-client