Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/KWcbx273ZHAayKfn1OKexVZlWvQ.roa
File: KWcbx273ZHAayKfn1OKexVZlWvQ.roa (raw, json)
Hash identifier: PaeeJ1l/Ji5ydWz0jBTUhtGKXbVfabdrj21ewU0oRmo=
Subject key identifier: 29:67:1B:C7:6E:F7:64:70:1A:C8:A7:E7:D4:E2:9E:C5:56:65:5A:F4
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 01A0B8B297ADF35D791ECF05A920B252AA1A
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/KWcbx273ZHAayKfn1OKexVZlWvQ.roa
Signing time: Sat 19 Sep 2026 08:05:07 +0000
ROA not before: Sat 19 Sep 2026 08:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.71.0.0/16 maxlen: 16
31.72.0.0/14 maxlen: 14
31.78.0.0/15 maxlen: 15
31.99.64.0/18 maxlen: 18
31.99.156.0/22 maxlen: 22
31.99.216.0/21 maxlen: 21
31.99.224.0/19 maxlen: 19
178.107.64.0/18 maxlen: 18
185.102.192.0/22 maxlen: 22
185.102.196.0/22 maxlen: 22
185.102.200.0/22 maxlen: 22
194.36.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:b2:97:ad:f3:5d:79:1e:cf:05:a9:20:b2:52:aa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Sep 19 08:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29671bc76ef764701ac8a7e7d4e29ec556655af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:62:02:94:fc:5e:09:ec:bc:c5:0c:03:cf:
3d:2e:5a:47:c0:22:57:7e:5c:e4:c1:23:44:f0:46:
4b:7f:2e:20:50:da:3f:d0:bd:53:d8:1a:f0:72:f3:
7c:2f:17:d0:8d:26:e6:71:1e:f6:85:e9:d5:18:3a:
d4:a6:02:b8:5e:60:35:cc:8b:21:26:b2:cc:b1:10:
d2:59:30:e6:9e:5a:49:7a:35:55:de:41:de:97:6f:
7c:0d:a0:41:a5:f7:e8:a6:57:34:36:a4:57:08:a1:
62:d1:df:ec:99:fc:e1:12:73:46:f9:75:56:84:85:
a9:70:00:da:a8:8b:84:dd:6c:ab:8c:51:76:5c:09:
f9:af:3d:0d:6a:32:39:26:ae:3d:b7:ae:f8:20:be:
5c:49:5f:b6:25:91:f2:e8:24:ef:87:64:05:3e:bc:
bb:17:d2:27:b1:ce:fa:35:06:e5:bf:ee:04:4c:d6:
d5:6e:21:82:a1:d6:9d:68:b4:a8:a1:96:57:2a:51:
c9:8f:4a:c6:01:6f:c4:9c:e9:f0:6b:63:aa:da:30:
c9:ed:6e:51:fc:f7:c0:63:1f:bc:3c:c5:5c:20:be:
e3:94:97:0a:d9:a0:25:12:bf:3b:2e:a9:f9:b3:9b:
55:46:00:1a:c1:ca:04:7d:6b:d4:f3:8d:eb:5c:ad:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:67:1B:C7:6E:F7:64:70:1A:C8:A7:E7:D4:E2:9E:C5:56:65:5A:F4
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/KWcbx273ZHAayKfn1OKexVZlWvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.71.0.0-31.75.255.255
31.78.0.0/15
31.99.64.0/18
31.99.156.0/22
31.99.216.0-31.99.255.255
178.107.64.0/18
185.102.192.0-185.102.203.255
194.36.212.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:bb:a6:de:76:14:5b:f2:85:2c:31:48:c0:8c:cc:70:b8:29:
b1:8e:dd:80:48:48:f4:e1:77:70:45:da:35:b2:45:01:72:bf:
15:85:97:86:e1:7b:62:83:6f:f1:6e:b5:64:8d:42:49:26:23:
68:02:27:54:a1:fa:cf:0f:18:0e:15:2a:3a:c7:01:bf:ef:5e:
1c:dd:82:1f:7d:11:62:53:2b:7b:8b:c2:3d:0d:21:16:8c:80:
f8:ef:76:dc:d3:23:bb:55:d0:96:30:e3:dd:5c:28:5a:3c:55:
8c:cd:52:47:26:ff:3f:43:49:e1:02:7d:59:44:92:62:f3:59:
02:b2:5e:de:9c:eb:7f:58:35:fb:d0:6b:ad:c2:f2:82:66:ae:
2c:56:c9:7a:d6:49:48:f8:42:53:37:f1:2d:66:64:ae:8a:d8:
82:2f:74:86:d5:03:f6:83:5f:f7:dd:e0:fe:b9:9e:8c:c9:40:
78:ef:7c:b1:04:0d:5c:4b:15:07:4a:15:09:a2:11:e2:30:c9:
48:28:79:25:c4:1d:e6:b5:82:ca:8f:3d:b4:6f:f8:25:c3:51:
89:cc:76:77:5f:dc:ed:a1:67:db:0b:7f:d2:09:03:66:52:4d:
48:f8:49:90:fd:eb:71:a7:cf:87:2c:37:32:48:4f:da:30:7e:
c2:a5:d9:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:26:52 2026 by rpki-client