Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/1-Wl5nNIYq_W3pgo34yEVZQdbxyU.roa
File: 1-Wl5nNIYq_W3pgo34yEVZQdbxyU.roa (raw, json)
Hash identifier: G+7+XKaWZcYGhV9Z4DnGNMnW/7HpmVdpN8SBoPugm7A=
Subject key identifier: F9:69:79:9C:D2:18:AB:F5:B7:A6:0A:37:E3:21:15:65:07:5B:C7:25
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 019F7A0967EA8FC2D836A0551327A1192A95
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/1-Wl5nNIYq_W3pgo34yEVZQdbxyU.roa
Signing time: Sun 19 Jul 2026 11:01:04 +0000
ROA not before: Sun 19 Jul 2026 11:01:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.79.0/24 maxlen: 24
31.169.80.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.84.0/24 maxlen: 24
31.169.85.0/24 maxlen: 24
31.169.87.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
2a00:5740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7a:09:67:ea:8f:c2:d8:36:a0:55:13:27:a1:19:2a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jul 19 11:01:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f969799cd218abf5b7a60a37e3211565075bc725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:08:00:41:85:20:bc:3f:e1:d5:19:72:cd:
dd:1b:96:7f:0c:db:b9:2e:72:9f:42:39:57:6c:ac:
db:6f:b6:74:22:c9:8c:e9:61:4d:68:e8:8f:f3:53:
c7:33:22:cd:79:39:81:70:10:a3:ee:4c:a1:75:a2:
90:9d:3b:d5:b7:f9:db:9a:47:80:11:9d:49:d8:80:
58:24:5a:f8:e4:3f:13:1e:f6:d8:05:f1:3b:50:43:
70:68:0e:12:54:53:06:b6:27:c3:04:07:54:bf:f2:
47:ee:20:8b:d9:37:6a:a5:b5:41:54:b4:1b:86:c6:
2b:0d:cb:c5:40:fd:e2:01:4f:ad:c7:74:90:70:7e:
fa:96:54:db:36:c5:2c:c0:31:ac:c4:32:40:1d:03:
c0:63:34:35:43:64:64:10:21:55:f4:20:15:02:5c:
6b:3b:cc:88:a4:37:cc:4f:66:e5:ac:6d:b8:c1:4e:
15:eb:21:7f:fc:dc:a0:e1:d3:a3:07:fb:cf:8b:e1:
9e:f2:2d:73:57:c1:3f:bc:b2:e4:20:75:6f:28:39:
51:2b:75:61:07:50:92:db:04:a4:3d:ab:85:67:e0:
e4:65:79:02:51:f4:b2:5b:a7:52:e6:81:a4:a9:30:
57:b5:e6:f0:5e:d6:3c:20:e8:db:20:9d:71:df:96:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:69:79:9C:D2:18:AB:F5:B7:A6:0A:37:E3:21:15:65:07:5B:C7:25
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/1-Wl5nNIYq_W3pgo34yEVZQdbxyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.77.0-31.169.82.255
31.169.84.0/23
31.169.87.0-31.169.88.255
31.169.90.0/24
31.169.92.0/22
185.33.63.0/24
IPv6:
2a00:5740::/29
Signature Algorithm: sha256WithRSAEncryption
09:a8:83:99:b1:96:96:5d:fc:ba:22:3d:d3:06:45:64:41:f5:
74:43:10:31:92:74:bc:67:ee:7e:2d:8b:c3:7e:02:d1:32:ba:
47:bb:d2:6e:a2:f8:00:21:8f:df:c7:c5:61:97:a6:c9:a8:a7:
4d:0d:81:67:2c:0f:9c:be:7f:c7:96:85:da:e1:66:c7:77:5f:
d3:c6:41:14:50:85:d1:df:6e:73:00:2c:ce:30:a7:6e:c1:1a:
06:5a:b0:53:cd:49:1c:21:98:2e:da:5d:6f:2c:73:ff:c4:b7:
53:b5:ba:62:bb:f3:d1:80:da:90:e5:c5:0f:e0:ea:a2:f0:2f:
f6:23:f4:67:9f:4c:c0:57:6a:15:3b:d1:85:6f:34:6c:3d:bc:
33:31:eb:4f:22:d4:9c:4a:c5:7a:1c:1b:0f:b0:09:e1:43:5b:
15:ef:30:0d:7d:8c:b4:85:37:99:4d:81:fb:58:e4:16:57:23:
4b:93:45:64:0a:67:db:5e:39:4d:fb:77:9e:f2:e7:2a:f0:09:
50:95:35:89:62:bb:7a:7d:94:9a:33:44:c5:a2:31:ca:6b:ca:
03:3e:01:da:76:9d:36:8d:17:d0:72:a8:dc:da:39:7a:e5:ba:
b3:b4:a9:24:7e:25:86:b4:c8:5e:3a:e6:c3:df:27:46:0f:01:
cc:89:b8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:35 2026 by rpki-client