Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/pCNJAJU2R_Ey7VRPw_hxPf5bZjE.roa
File: pCNJAJU2R_Ey7VRPw_hxPf5bZjE.roa (raw, json)
Hash identifier: KbIRipx6ZRLe6wuu8/y9hOVzulQ9nb+SwsRwZvvvJjY=
Subject key identifier: A4:23:49:00:95:36:47:F1:32:ED:54:4F:C3:F8:71:3D:FE:5B:66:31
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 01A0669B2CCE903C0FAB1FDD339478FC2ABA
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/pCNJAJU2R_Ey7VRPw_hxPf5bZjE.roa
Signing time: Thu 03 Sep 2026 09:30:40 +0000
ROA not before: Thu 03 Sep 2026 09:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197706
IP address blocks: 31.171.152.0/24 maxlen: 24
31.171.153.0/24 maxlen: 24
31.171.154.0/24 maxlen: 24
31.171.155.0/24 maxlen: 24
45.74.144.0/24 maxlen: 24
45.74.145.0/24 maxlen: 24
45.74.146.0/24 maxlen: 24
45.74.147.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
62.101.165.0/24 maxlen: 24
103.124.165.0/24 maxlen: 24
103.124.167.0/24 maxlen: 24
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
136.148.192.0/24 maxlen: 24
136.148.193.0/24 maxlen: 24
136.148.200.0/24 maxlen: 24
136.148.201.0/24 maxlen: 24
136.148.202.0/24 maxlen: 24
136.148.203.0/24 maxlen: 24
144.48.54.0/24 maxlen: 24
144.48.55.0/24 maxlen: 24
185.53.100.0/24 maxlen: 24
185.53.101.0/24 maxlen: 24
185.153.125.0/24 maxlen: 24
185.153.126.0/24 maxlen: 24
185.153.127.0/24 maxlen: 24
195.146.16.0/24 maxlen: 24
195.146.18.0/24 maxlen: 24
195.146.20.0/24 maxlen: 24
195.146.22.0/24 maxlen: 24
195.146.24.0/24 maxlen: 24
195.146.26.0/24 maxlen: 24
195.146.28.0/24 maxlen: 24
195.146.30.0/24 maxlen: 24
209.23.44.0/24 maxlen: 24
209.23.45.0/24 maxlen: 24
209.23.46.0/24 maxlen: 24
209.23.47.0/24 maxlen: 24
2a04:27c0::/29 maxlen: 48
2a04:27c0:fffd::/48 maxlen: 48
2a04:27c0:fffe::/48 maxlen: 48
2a09:6e40::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0d:27c4::/32 maxlen: 32
2a0d:42c0::/29 maxlen: 48
2a0d:4a40::/29 maxlen: 48
2a0d:4a46::/32 maxlen: 32
2a0e:3f00::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0e:4f05::/32 maxlen: 32
2a0e:d4c0::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0f:a880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:9b:2c:ce:90:3c:0f:ab:1f:dd:33:94:78:fc:2a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Sep 3 09:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4234900953647f132ed544fc3f8713dfe5b6631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bf:e0:cf:09:23:de:58:33:42:e9:21:ea:21:
8f:27:6c:f5:90:24:cf:e1:97:cd:7f:8e:13:47:28:
03:40:d0:6a:0a:c5:29:dc:b0:82:12:bb:da:df:bf:
a3:50:d3:e4:48:f2:5f:4f:0d:67:61:da:93:c5:f4:
91:fc:9d:38:dc:08:48:a6:11:ba:5a:1b:42:49:42:
bf:63:97:57:3d:80:2a:5b:b9:93:fe:4b:25:10:04:
c3:ca:ab:78:d4:ba:fe:5f:3e:fa:ca:d5:2d:01:dd:
ac:bf:32:37:47:b1:5b:82:9d:47:93:17:3f:5a:6c:
de:7c:17:30:42:44:a5:84:72:39:e5:d7:e1:75:b4:
eb:b4:11:64:cd:d8:37:e8:8c:d2:0d:95:bf:ba:e1:
52:ab:f7:c0:6d:9b:2d:3a:50:28:79:ca:20:04:95:
9c:42:79:b3:21:c0:14:f8:e5:1b:bf:55:32:81:49:
84:d1:77:4a:ff:ba:67:ef:f3:b9:60:a8:6c:b1:ac:
81:81:6c:61:f5:c8:2c:90:86:75:71:44:ab:6d:50:
31:d0:5d:d1:14:49:13:f6:3e:dc:a6:21:97:b5:c7:
a0:ed:35:9f:f9:1f:64:e0:b6:a5:68:0a:e8:d1:3a:
0c:77:fd:fb:d4:72:f6:1e:9c:3c:11:5e:0d:e9:2c:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:23:49:00:95:36:47:F1:32:ED:54:4F:C3:F8:71:3D:FE:5B:66:31
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/pCNJAJU2R_Ey7VRPw_hxPf5bZjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/22
45.74.144.0/22
45.142.26.0/24
62.101.165.0/24
103.124.165.0/24
103.124.167.0/24
109.104.140.0/23
136.148.192.0/23
136.148.200.0/22
144.48.54.0/23
185.53.100.0/23
185.153.125.0-185.153.127.255
195.146.16.0/24
195.146.18.0/24
195.146.20.0/24
195.146.22.0/24
195.146.24.0/24
195.146.26.0/24
195.146.28.0/24
195.146.30.0/24
209.23.44.0/22
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
1d:37:84:26:3f:df:8d:7f:f6:d7:2c:79:50:69:09:af:ef:4a:
96:4f:eb:0e:d2:f1:ae:f4:bc:f5:6f:e7:e9:35:12:24:7c:40:
6c:32:6b:3e:ca:e2:47:ca:9f:c1:e8:5f:32:4d:54:3a:f9:f0:
33:fa:06:4b:9b:5e:df:32:a4:83:ab:f0:cf:69:f8:50:f4:df:
0b:93:da:d2:5e:da:24:53:8f:b7:6e:22:ee:3b:6c:02:66:f1:
f7:42:4f:cd:e0:87:1a:da:87:c7:b4:a7:1e:1e:10:a4:b2:2c:
08:3a:f2:47:dd:98:e9:90:30:18:7e:29:92:88:98:5b:8c:c7:
67:44:3b:3e:39:22:37:84:f3:bc:00:de:d6:ec:1f:fe:82:7d:
a4:16:20:93:b0:68:8c:5a:10:73:78:3b:84:7c:65:21:79:2b:
48:9f:0f:02:29:b3:1e:5a:b8:3e:b5:89:a0:39:b3:88:02:98:
ff:84:8f:a2:a9:69:81:d3:d2:78:75:8c:d7:ef:e6:e2:0a:cf:
93:ba:d3:08:c5:12:75:62:19:b2:1d:bf:06:38:ee:99:82:88:
ec:18:4f:8c:c1:d7:02:96:bc:6f:3a:53:70:eb:19:f8:ce:51:
a3:a4:5f:50:02:4f:fc:60:07:69:99:19:81:43:29:ca:85:e9:
bd:67:57:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:53:02 2026 by rpki-client