Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/ATIAuCPBI_LAWOPjAXCLbJ9aD7s.roa
File: ATIAuCPBI_LAWOPjAXCLbJ9aD7s.roa (raw, json)
Hash identifier: eiC3ZcXOxP0CMKdBIuJP/qWSy/G3o5tkMJ/fIVGASg4=
Subject key identifier: 01:32:00:B8:23:C1:23:F2:C0:58:E3:E3:01:70:8B:6C:9F:5A:0F:BB
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 01A1CB07FB27A0F8FE087C23B09F7069D598
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/ATIAuCPBI_LAWOPjAXCLbJ9aD7s.roa
Signing time: Wed 11 Nov 2026 14:34:20 +0000
ROA not before: Wed 11 Nov 2026 14:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15924
IP address blocks: 31.169.80.0/24 maxlen: 24
31.169.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:07:fb:27:a0:f8:fe:08:7c:23:b0:9f:70:69:d5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Nov 11 14:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=013200b823c123f2c058e3e301708b6c9f5a0fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:7a:60:95:53:a3:be:02:fe:35:75:2e:5f:
60:81:cb:a9:82:7b:aa:03:b2:73:cd:b1:93:7d:82:
f3:aa:6a:45:68:1f:fe:4b:61:5d:b9:e1:ea:d3:2a:
ff:d6:19:5e:b7:15:f4:a7:fc:02:b2:30:4a:db:60:
09:ed:d9:ba:ce:be:1c:14:28:b4:a1:4d:46:35:24:
90:9e:d3:8c:24:39:de:e5:65:0b:a8:c8:24:f3:b0:
d9:9b:33:e4:b3:44:35:f2:01:9f:ae:af:c5:5a:ea:
09:89:1d:4b:c8:ff:05:66:f4:6f:b6:9f:06:37:ca:
20:78:57:f9:04:c8:02:aa:36:10:a8:21:da:4a:03:
de:01:f9:11:2b:43:88:09:17:71:f5:28:cc:89:f5:
d2:99:4f:f5:db:4e:19:11:27:d0:52:67:4a:f4:b3:
a3:b1:df:d6:25:4d:3e:4d:74:d6:30:ba:df:28:fa:
f0:fd:a1:26:79:1b:1e:1e:73:bd:2f:1e:04:8c:d5:
c6:e4:c1:04:5c:b8:90:0d:d3:4f:16:2b:84:7b:f8:
9d:3f:96:b4:dc:8a:3e:dc:a5:cd:1c:47:2a:6d:f0:
f5:66:10:99:ec:bb:41:a4:c1:d7:1d:99:74:63:6e:
cf:f0:f7:a6:ef:ae:3f:3c:19:aa:08:75:0f:9a:a7:
32:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:32:00:B8:23:C1:23:F2:C0:58:E3:E3:01:70:8B:6C:9F:5A:0F:BB
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/ATIAuCPBI_LAWOPjAXCLbJ9aD7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.80.0/24
31.169.89.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f8:30:a0:e8:02:3d:23:4e:0d:95:0b:66:d8:86:21:b8:f0:
a7:64:f2:80:03:bc:9e:72:b7:1c:f3:91:c8:51:05:33:01:9f:
c1:86:ae:fc:4b:f9:97:11:26:79:a4:00:7e:ff:b5:8a:3b:64:
75:1f:52:4f:28:7e:66:3e:e9:0d:0d:1d:3e:bf:2b:27:dd:72:
50:54:a1:9c:8f:78:36:d7:bd:dc:a4:28:6d:ac:dc:10:41:b5:
95:2c:14:8c:37:b8:69:d6:d0:8e:c4:eb:95:54:f3:4b:00:56:
06:ec:94:6f:da:1b:f9:53:dd:7b:63:7a:8c:fb:72:9d:1a:21:
89:d0:eb:18:48:4f:28:3e:7c:df:98:fb:21:0d:a7:ac:2b:aa:
eb:4a:fa:4b:ba:8b:da:1d:6f:05:37:6f:e1:0b:0e:cb:c9:3e:
51:a3:2b:44:3d:89:a5:f7:20:bc:98:08:76:56:f8:33:72:64:
07:28:4a:e6:48:92:8f:2c:d1:ab:f6:f2:37:c1:50:0a:f9:68:
ff:ef:d6:99:d6:2f:db:d9:0a:af:f0:c8:2a:d5:5a:96:e3:3f:
54:71:9d:32:44:c8:03:f3:e8:4e:21:7c:a6:a1:0f:ce:84:5e:
66:dc:56:2b:14:5c:45:24:2e:e9:4e:90:ea:80:44:45:5c:f4:
fc:3f:0a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:16:47 2026 by rpki-client