Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/m0oKdcSNV-cSKH7tgVrl_MXsI3E.roa
File: m0oKdcSNV-cSKH7tgVrl_MXsI3E.roa (raw, json)
Hash identifier: E8GDwRTv3+qdGdGj3xjkdxl47KDWNgRWU6Jc+RCaCnQ=
Subject key identifier: 9B:4A:0A:75:C4:8D:57:E7:12:28:7E:ED:81:5A:E5:FC:C5:EC:23:71
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 01A0223DC15FCD916729C92277AF47383EC0
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/m0oKdcSNV-cSKH7tgVrl_MXsI3E.roa
Signing time: Fri 21 Aug 2026 02:54:27 +0000
ROA not before: Fri 21 Aug 2026 02:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38176
IP address blocks: 31.47.88.0/21 maxlen: 21
31.47.88.0/24 maxlen: 24
31.47.89.0/24 maxlen: 24
31.47.90.0/24 maxlen: 24
31.47.91.0/24 maxlen: 24
31.47.92.0/24 maxlen: 24
31.47.93.0/24 maxlen: 24
31.47.94.0/24 maxlen: 24
31.47.95.0/24 maxlen: 24
185.198.104.0/23 maxlen: 23
185.198.104.0/24 maxlen: 24
185.198.105.0/24 maxlen: 24
185.198.106.0/23 maxlen: 23
185.198.106.0/24 maxlen: 24
185.198.107.0/24 maxlen: 24
2a0a:1a40::/34 maxlen: 34
2a0a:1a40:4000::/34 maxlen: 34
2a0a:1a40:8000::/34 maxlen: 34
2a0a:1a40:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:22:3d:c1:5f:cd:91:67:29:c9:22:77:af:47:38:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Aug 21 02:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b4a0a75c48d57e712287eed815ae5fcc5ec2371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:25:5f:fe:e2:8b:88:de:7a:3c:58:e3:52:
c1:15:1b:45:bc:ec:6b:59:db:6a:27:bb:3c:ca:c8:
a9:72:77:2e:43:e6:92:19:84:99:6f:1f:6b:cc:3b:
88:9d:96:2a:fb:40:4b:8e:70:9b:48:33:1f:d2:35:
92:81:20:e1:e6:dd:87:b0:4d:48:a4:96:96:c6:8f:
7b:17:49:bd:d4:b7:da:91:d1:42:61:d4:8b:90:d5:
28:7d:fc:6b:df:38:0f:b6:11:0a:7f:bb:12:06:ea:
71:6b:af:a7:5c:ef:a0:35:d6:8c:17:d3:37:8a:db:
ab:ff:17:7c:f3:e1:be:99:17:79:00:5d:88:76:1a:
dd:db:4d:1f:9b:7b:43:2f:d8:dd:ba:7e:86:bc:90:
b0:dc:3b:85:3f:0b:a4:bf:e8:04:f5:6e:8f:84:31:
ad:dd:2a:80:bd:af:60:ad:9c:ad:81:3b:05:09:8d:
a5:3c:e8:4b:ea:2f:2c:8a:ad:0a:79:77:c8:64:06:
6f:ed:1c:83:7c:6c:ad:fb:b2:91:00:40:18:ac:86:
52:a8:48:d0:e6:b4:5a:48:ce:7e:a8:96:24:6d:1b:
f8:07:e0:1f:e5:86:86:7d:26:b2:8c:19:c7:69:45:
7a:46:a3:71:d5:ea:d5:1a:6c:52:f0:44:ab:0b:af:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4A:0A:75:C4:8D:57:E7:12:28:7E:ED:81:5A:E5:FC:C5:EC:23:71
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/m0oKdcSNV-cSKH7tgVrl_MXsI3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.88.0/21
185.198.104.0/22
IPv6:
2a0a:1a40::/32
Signature Algorithm: sha256WithRSAEncryption
a5:30:22:f8:de:6f:1e:a3:07:64:7a:f7:fe:d2:e7:5a:35:70:
62:3b:7a:96:d1:04:60:a3:4d:5c:9e:27:59:eb:a0:a2:9f:ca:
32:25:54:2c:fa:a4:45:1c:f0:ba:fd:60:83:d3:96:81:90:ca:
cc:b3:66:9f:52:c9:14:5f:a4:24:f2:b5:b8:57:2b:ac:23:bd:
e8:6d:0f:c0:ea:06:3e:45:05:4c:d6:d1:02:8c:c3:cb:02:c3:
e5:09:bd:8a:55:0d:e5:18:cc:cc:b8:a4:e3:d8:07:87:dc:4d:
ab:17:e3:b0:eb:4f:e3:fe:9c:af:8f:fa:dc:a8:1f:e5:05:1d:
f2:90:3d:ef:b3:38:e9:0a:e5:02:e7:87:e2:46:da:97:ea:8a:
f7:06:9b:d3:8c:2f:6f:79:2d:de:56:fe:a9:c7:6d:1d:74:00:
e5:03:94:d4:18:50:5a:01:99:cf:32:a2:17:ee:f3:bb:d2:1a:
71:36:e5:14:af:33:2e:c2:4f:f8:08:e1:f4:40:bd:b4:6a:ec:
a7:e2:e6:64:ce:8f:9b:7c:31:c3:79:cf:7a:eb:c1:96:76:d8:
a8:12:38:2e:f5:2e:a1:4e:4d:4b:62:89:8b:8b:f5:7c:ee:92:
43:b2:5e:5f:fa:34:d3:38:8f:44:ec:7a:f8:de:af:89:65:2b:
95:14:28:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:31:24 2026 by rpki-client