Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1-D3Zdi1vts5KjP7RmxQLA9UYg6o.roa
File: 1-D3Zdi1vts5KjP7RmxQLA9UYg6o.roa (raw, json)
Hash identifier: hoHcODmJJgPQpTZdHEGND9iKMDld4SHBAWsV/csj4EY=
Subject key identifier: F8:3D:D9:76:2D:6F:B6:CE:4A:8C:FE:D1:9B:14:0B:03:D5:18:83:AA
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 01A0D36DF7B60FF89E53CE7127BCD05BF435
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1-D3Zdi1vts5KjP7RmxQLA9UYg6o.roa
Signing time: Thu 24 Sep 2026 12:39:54 +0000
ROA not before: Thu 24 Sep 2026 12:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212961
IP address blocks: 31.216.132.0/22 maxlen: 22
194.180.144.0/22 maxlen: 22
194.180.146.0/24 maxlen: 24
194.180.147.0/24 maxlen: 24
194.180.148.0/23 maxlen: 23
194.180.149.0/24 maxlen: 24
2a0c:abc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:6d:f7:b6:0f:f8:9e:53:ce:71:27:bc:d0:5b:f4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Sep 24 12:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f83dd9762d6fb6ce4a8cfed19b140b03d51883aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:7b:fd:83:a7:99:b0:95:5f:21:b6:f4:9f:
b7:b6:21:1d:c0:c7:d1:86:54:90:1c:2e:71:d7:69:
a8:66:ea:7e:af:af:f5:9c:c4:ba:60:9e:63:06:e8:
28:48:ca:54:90:5a:37:67:f5:2b:3f:05:97:c5:79:
2f:48:e3:1c:ae:b8:34:a4:bd:7c:f8:ad:59:ec:a7:
96:da:27:a1:4d:3d:ca:c1:34:a4:8e:82:06:e7:94:
5c:ac:53:88:02:1b:65:bf:1b:3f:50:5e:71:20:c8:
cf:a2:d5:df:a0:d9:c0:04:03:5f:ea:69:5c:42:79:
1e:25:1d:c1:8c:a3:45:6d:e0:47:cd:fe:b4:65:a9:
5d:66:5f:30:33:aa:3d:da:78:3c:0f:f5:83:c0:6c:
dd:67:d9:41:c4:f1:d7:3a:41:f5:37:23:69:0f:db:
ad:71:2e:74:a2:55:7b:46:3a:df:64:f4:0f:c9:5e:
34:37:e2:ae:d4:90:8c:52:bd:5a:84:69:ea:34:6c:
49:61:c3:70:58:9d:3d:6b:76:e5:1c:84:48:ca:43:
e3:ae:92:c3:9d:c6:bd:73:26:de:39:fb:0a:a9:14:
41:79:20:e2:5c:64:db:a0:21:65:86:45:c1:8e:b3:
b7:3c:c2:3e:80:91:d4:ed:8b:90:e2:ef:4d:09:b2:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3D:D9:76:2D:6F:B6:CE:4A:8C:FE:D1:9B:14:0B:03:D5:18:83:AA
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1-D3Zdi1vts5KjP7RmxQLA9UYg6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.132.0/22
194.180.144.0-194.180.149.255
IPv6:
2a0c:abc0::/29
Signature Algorithm: sha256WithRSAEncryption
94:88:2a:dd:94:4e:20:5c:a0:a4:d0:e4:21:66:fc:69:30:0d:
5c:2e:97:cc:04:eb:e6:6b:0b:09:f6:10:40:09:18:ef:0b:ad:
c6:39:19:fc:a2:1b:0c:b1:b7:13:40:f0:ba:ad:29:18:f3:02:
8f:17:16:30:29:fe:ce:44:31:aa:5b:8a:36:e4:ba:0b:70:0d:
87:8d:15:a4:99:d3:18:f7:05:99:38:5f:b8:b1:a9:0e:69:ab:
f9:e4:94:1e:e1:cd:ba:35:cc:0d:99:ec:ff:94:0b:c8:7f:d8:
a1:e8:1f:c5:68:e2:77:1d:1f:b9:f6:98:ff:3c:77:da:18:1f:
79:b0:45:d7:1e:66:60:de:24:cb:97:7c:f9:b1:26:3a:f9:97:
18:d7:9f:f5:59:75:98:65:6b:36:20:8c:74:9b:88:cf:e4:7b:
8c:06:0e:ca:02:a2:33:0e:b7:df:85:e2:ef:36:95:0d:17:36:
82:62:cf:ea:55:d6:d3:3e:6b:6b:f7:41:47:2c:f6:2e:e7:7c:
31:c9:d2:48:4a:0d:0f:fa:4b:b9:f2:3f:62:13:b4:02:39:ce:
86:b4:88:10:d6:bd:be:b4:4e:71:5a:ed:c1:0c:a2:04:1a:9e:
7d:d8:67:9d:1a:6c:67:8c:38:ab:d8:e0:0f:07:8a:b8:c4:a4:
dc:3e:3e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:17:50 2026 by rpki-client