Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/J53nLIScImiDmJQXAbAPzV_YmS0.roa
File: J53nLIScImiDmJQXAbAPzV_YmS0.roa (raw, json)
Hash identifier: adCU5A/KjEfl+/76XgaiqVc6Hsm8GAJUmNJGopCGbs0=
Subject key identifier: 27:9D:E7:2C:84:9C:22:68:83:98:94:17:01:B0:0F:CD:5F:D8:99:2D
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 01A0BFA92023FADF7A08C3B81740E962E36E
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/J53nLIScImiDmJQXAbAPzV_YmS0.roa
Signing time: Sun 20 Sep 2026 16:32:07 +0000
ROA not before: Sun 20 Sep 2026 16:32:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 31.3.64.0/24 maxlen: 24
31.3.65.0/24 maxlen: 24
31.3.66.0/24 maxlen: 24
31.3.67.0/24 maxlen: 24
31.3.68.0/24 maxlen: 24
31.3.69.0/24 maxlen: 24
31.3.70.0/24 maxlen: 24
31.3.71.0/24 maxlen: 24
31.14.216.0/24 maxlen: 24
31.14.217.0/24 maxlen: 24
46.102.117.0/24 maxlen: 24
84.247.17.0/24 maxlen: 24
84.247.21.0/24 maxlen: 24
86.104.5.0/24 maxlen: 24
86.104.11.0/24 maxlen: 24
86.105.3.0/24 maxlen: 24
86.106.11.0/24 maxlen: 24
86.106.172.0/24 maxlen: 24
89.33.82.0/24 maxlen: 24
89.33.104.0/24 maxlen: 24
89.34.109.0/24 maxlen: 24
89.34.222.0/24 maxlen: 24
89.34.223.0/24 maxlen: 24
89.42.58.0/24 maxlen: 24
89.44.244.0/24 maxlen: 24
89.46.63.0/24 maxlen: 24
89.47.235.0/24 maxlen: 24
92.114.80.0/24 maxlen: 24
93.113.200.0/24 maxlen: 24
93.113.201.0/24 maxlen: 24
93.114.48.0/24 maxlen: 24
93.114.49.0/24 maxlen: 24
93.115.247.0/24 maxlen: 24
94.176.129.0/24 maxlen: 24
185.96.161.0/24 maxlen: 24
185.191.160.0/24 maxlen: 24
185.191.161.0/24 maxlen: 24
185.191.162.0/24 maxlen: 24
185.191.163.0/24 maxlen: 24
188.208.34.0/24 maxlen: 24
188.208.35.0/24 maxlen: 24
188.212.249.0/24 maxlen: 24
188.214.28.0/24 maxlen: 24
188.214.58.0/24 maxlen: 24
188.214.80.0/24 maxlen: 24
188.214.110.0/24 maxlen: 24
188.240.50.0/24 maxlen: 24
188.240.197.0/24 maxlen: 24
188.241.8.0/24 maxlen: 24
188.241.9.0/24 maxlen: 24
188.241.14.0/24 maxlen: 24
188.241.145.0/24 maxlen: 24
188.241.147.0/24 maxlen: 24
217.19.240.0/24 maxlen: 24
217.19.241.0/24 maxlen: 24
217.19.242.0/24 maxlen: 24
217.19.243.0/24 maxlen: 24
217.19.244.0/24 maxlen: 24
217.19.248.0/24 maxlen: 24
217.19.249.0/24 maxlen: 24
217.19.250.0/24 maxlen: 24
217.19.251.0/24 maxlen: 24
217.19.252.0/24 maxlen: 24
217.19.253.0/24 maxlen: 24
217.19.254.0/24 maxlen: 24
217.19.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:a9:20:23:fa:df:7a:08:c3:b8:17:40:e9:62:e3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Sep 20 16:32:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=279de72c849c22688398941701b00fcd5fd8992d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:0f:7a:be:34:a1:a0:18:92:14:46:a9:0b:
50:28:69:4e:5c:ca:03:a8:d7:9b:78:f6:4a:6e:88:
e8:08:d2:9a:8d:6f:28:80:2d:a0:e0:b7:98:5f:1b:
0b:13:60:bb:96:0f:7c:50:7e:80:69:e7:27:b1:80:
05:aa:47:ab:a7:e1:40:11:3f:91:92:9b:4a:52:60:
03:b2:1a:14:b5:20:8b:51:0d:28:9a:3a:a0:ae:3d:
82:62:63:70:7c:1e:85:bf:6a:8a:31:9b:3f:b0:e5:
ef:28:75:4e:28:b9:43:2a:ec:9d:c0:16:6f:10:d2:
4e:31:72:8d:05:65:39:5b:90:de:05:ab:43:eb:a5:
e2:d4:eb:93:07:63:fa:4c:16:28:81:7f:53:28:9e:
7c:57:27:4f:5e:a7:a0:4a:ca:a0:a0:4c:08:2c:ca:
f6:c8:e1:dd:5a:01:cc:f8:7f:c5:d7:7d:83:53:48:
70:3f:45:c9:66:73:b7:ec:36:d2:b4:1e:ae:06:0e:
09:d3:b4:7a:26:90:9e:44:01:be:20:bf:2b:ee:d0:
e3:2e:c2:92:13:50:43:13:2b:0a:34:e5:84:44:5c:
52:24:75:34:f8:75:26:20:47:e1:39:e0:77:16:ca:
be:1a:e9:ad:95:fd:73:73:f0:e8:19:08:aa:2c:7f:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9D:E7:2C:84:9C:22:68:83:98:94:17:01:B0:0F:CD:5F:D8:99:2D
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/J53nLIScImiDmJQXAbAPzV_YmS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.64.0/21
31.14.216.0/23
46.102.117.0/24
84.247.17.0/24
84.247.21.0/24
86.104.5.0/24
86.104.11.0/24
86.105.3.0/24
86.106.11.0/24
86.106.172.0/24
89.33.82.0/24
89.33.104.0/24
89.34.109.0/24
89.34.222.0/23
89.42.58.0/24
89.44.244.0/24
89.46.63.0/24
89.47.235.0/24
92.114.80.0/24
93.113.200.0/23
93.114.48.0/23
93.115.247.0/24
94.176.129.0/24
185.96.161.0/24
185.191.160.0/22
188.208.34.0/23
188.212.249.0/24
188.214.28.0/24
188.214.58.0/24
188.214.80.0/24
188.214.110.0/24
188.240.50.0/24
188.240.197.0/24
188.241.8.0/23
188.241.14.0/24
188.241.145.0/24
188.241.147.0/24
217.19.240.0-217.19.244.255
217.19.248.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:67:3e:2f:99:7a:e5:f5:22:7f:d4:96:bc:ff:a1:9a:58:e7:
32:80:ef:0d:d0:a0:03:9d:80:fe:69:b6:8e:53:77:da:81:e9:
da:af:a6:78:53:7d:62:16:2f:76:57:5b:a1:24:3d:e7:8f:8c:
90:80:e8:a2:61:0c:ea:52:f0:c5:95:df:f7:71:ba:a6:f2:b4:
61:85:a7:1c:cd:6f:cc:e0:02:3b:2e:0a:af:84:10:ea:75:82:
25:b8:a1:e2:dc:ee:28:13:44:ed:29:19:42:e7:e3:91:ff:fb:
4c:46:ff:c1:f9:2d:9c:22:57:c0:bf:4c:04:68:fd:ac:de:b4:
35:af:c4:23:36:bd:24:87:fd:aa:49:47:66:5b:1d:35:80:64:
df:75:e2:c7:96:3e:fb:e5:4c:16:af:a1:ff:75:2c:80:26:53:
9c:49:52:b7:14:64:cd:49:47:25:33:c3:f5:a0:c5:da:42:a4:
7c:33:f9:7f:89:8e:95:81:07:e1:32:39:94:7e:a8:fd:e5:07:
fb:86:28:97:27:1f:45:19:d0:6e:d3:47:27:b9:c4:15:36:7b:
0c:80:7f:78:cd:c2:4c:16:0d:4a:40:96:92:e9:b2:94:a0:b6:
99:19:e8:1e:1b:55:d6:57:04:a0:b3:bb:f8:6b:98:cc:56:53:
45:52:03:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:50:22 2026 by rpki-client