Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/5-O3kCpdmq18iNUwmO0ZTCpUo08.roa
File: 5-O3kCpdmq18iNUwmO0ZTCpUo08.roa (raw, json)
Hash identifier: Pn13Ni86cbQVGEtITYrHSb+ijN3wYdEs/RyamQlC+Nw=
Subject key identifier: E7:E3:B7:90:2A:5D:9A:AD:7C:88:D5:30:98:ED:19:4C:2A:54:A3:4F
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 019D1F105BCA2F8DE58ED7E7F5CE185BDCE3
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/5-O3kCpdmq18iNUwmO0ZTCpUo08.roa
Signing time: Tue 24 Mar 2026 08:57:38 +0000
ROA not before: Tue 24 Mar 2026 08:57:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39494
IP address blocks: 31.177.72.0/22 maxlen: 22
31.177.76.0/23 maxlen: 23
31.177.80.0/23 maxlen: 23
31.177.84.0/23 maxlen: 23
31.177.85.0/24 maxlen: 24
31.177.86.0/23 maxlen: 24
31.177.88.0/24 maxlen: 24
31.177.89.0/24 maxlen: 24
31.177.90.0/24 maxlen: 24
77.222.33.0/24 maxlen: 24
77.222.34.0/24 maxlen: 24
79.174.72.0/22 maxlen: 22
89.104.64.0/19 maxlen: 19
89.104.76.0/24 maxlen: 24
89.104.78.0/23 maxlen: 23
89.111.128.0/18 maxlen: 18
89.111.128.0/20 maxlen: 20
89.111.144.0/20 maxlen: 20
89.111.160.0/20 maxlen: 24
89.111.162.0/23 maxlen: 23
89.111.164.0/22 maxlen: 22
89.111.176.0/20 maxlen: 20
89.111.176.0/22 maxlen: 22
89.111.177.0/24 maxlen: 24
91.217.21.0/24 maxlen: 24
2a01:d8::/32 maxlen: 48
2a02:2090::/32 maxlen: 48
2a02:2090:e400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:10:5b:ca:2f:8d:e5:8e:d7:e7:f5:ce:18:5b:dc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Mar 24 08:57:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7e3b7902a5d9aad7c88d53098ed194c2a54a34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bf:1d:de:6f:35:0d:f8:eb:c8:7d:14:50:3f:
e9:01:98:b3:81:21:2a:a0:32:49:47:69:4c:0c:54:
db:b0:e6:05:0f:b2:97:2a:6a:a3:2e:2b:c1:3f:b3:
c2:d7:e8:a7:dc:8d:29:4f:4d:50:94:00:f3:34:00:
e5:62:4d:e9:e4:1f:22:ae:a9:4d:88:e4:f2:3e:9d:
be:9c:f4:b4:b0:84:dc:43:fa:53:39:80:01:4c:b3:
d3:eb:54:1e:5b:ff:e2:2e:a6:85:a1:a2:71:5a:f0:
2a:ce:cc:e8:be:45:94:43:1e:68:9e:bf:ca:35:f8:
e2:87:6b:70:92:ad:a7:d7:0e:59:b9:1f:bc:5d:3d:
d8:26:c9:89:66:1c:ca:4a:a9:57:fb:9b:4f:92:ba:
14:3d:8f:48:f7:64:ba:05:08:c6:11:40:b6:22:3f:
5a:ee:b5:b0:be:46:74:b8:c8:31:69:33:ac:63:76:
f4:3f:19:37:73:2c:10:cc:5a:2b:89:10:51:f6:91:
df:0c:32:30:a9:b2:97:ec:65:f8:06:c2:32:a4:58:
f7:62:8d:85:3a:ff:f3:6d:a9:e5:7f:0b:a8:f3:5b:
3b:61:6a:be:69:e3:8f:fe:b7:cf:94:86:05:48:5e:
2e:a5:cf:b1:e3:32:a4:d2:2f:34:cc:5f:89:58:2d:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E3:B7:90:2A:5D:9A:AD:7C:88:D5:30:98:ED:19:4C:2A:54:A3:4F
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/5-O3kCpdmq18iNUwmO0ZTCpUo08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.72.0-31.177.77.255
31.177.80.0/23
31.177.84.0-31.177.90.255
77.222.33.0-77.222.34.255
79.174.72.0/22
89.104.64.0/19
89.111.128.0/18
91.217.21.0/24
IPv6:
2a01:d8::/32
2a02:2090::/32
Signature Algorithm: sha256WithRSAEncryption
27:b2:24:d5:23:c0:2d:fa:d4:aa:da:24:eb:a7:cb:45:7a:11:
97:66:a0:9c:75:26:8e:61:5f:0a:f7:55:29:bc:8f:69:29:55:
c4:b9:f7:aa:23:14:de:8d:0b:02:00:ab:0b:f2:fd:52:4b:49:
5d:2a:4f:cf:29:c9:9a:95:9e:d3:75:f2:9b:72:d9:68:29:0a:
2f:e1:41:70:ad:90:50:c2:80:02:bc:ca:cc:92:dd:08:df:49:
ee:a9:b9:90:d5:8d:67:19:f0:0f:9a:86:af:6c:56:2a:98:5c:
5b:c3:88:1e:13:62:15:09:4b:a9:d0:ff:1d:aa:af:8e:a4:ea:
7f:8c:88:34:c9:0b:c3:5b:86:83:cd:08:f5:cd:4a:a2:ea:b3:
d0:a5:00:90:dd:ce:63:3c:66:e0:94:53:5b:17:75:80:dd:10:
91:ef:54:04:4e:da:b9:f0:85:f6:7d:4e:03:8d:06:bc:8b:13:
0f:90:04:cc:33:0b:7c:f7:1e:c6:e9:4e:62:7b:74:8b:c6:32:
c4:fd:9f:b9:e5:9e:d8:cc:b7:d2:b2:52:68:92:bc:e6:df:82:
f1:4a:a2:f5:5e:4f:c8:22:20:35:52:a4:0e:2b:0a:7f:12:04:
9e:49:4f:c9:7a:6e:e8:61:96:bf:14:39:63:9d:d3:b8:95:e8:
fa:f4:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:38 2026 by rpki-client