Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/9arTXo7LuboXT5ma3WZLETjkBGQ.roa
File: 9arTXo7LuboXT5ma3WZLETjkBGQ.roa (raw, json)
Hash identifier: 1J5qYtxdZBwLzou1O8SQukm4XAH9BLMiLhi7CJox6oI=
Subject key identifier: F5:AA:D3:5E:8E:CB:B9:BA:17:4F:99:9A:DD:66:4B:11:38:E4:04:64
Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial: 01A08CE1DC35F6EE2196D5A51C04F545C330
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/9arTXo7LuboXT5ma3WZLETjkBGQ.roa
Signing time: Thu 10 Sep 2026 19:53:27 +0000
ROA not before: Thu 10 Sep 2026 19:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208951
IP address blocks: 31.44.0.0/22 maxlen: 22
31.44.0.0/24 maxlen: 24
31.44.1.0/24 maxlen: 24
31.44.2.0/24 maxlen: 24
31.44.3.0/24 maxlen: 24
31.44.4.0/24 maxlen: 24
31.44.5.0/24 maxlen: 24
31.44.6.0/24 maxlen: 24
31.44.7.0/24 maxlen: 24
45.14.48.0/22 maxlen: 22
45.14.48.0/24 maxlen: 24
45.14.49.0/24 maxlen: 24
45.14.50.0/24 maxlen: 24
45.14.51.0/24 maxlen: 24
45.133.16.0/22 maxlen: 22
45.133.16.0/24 maxlen: 24
45.133.17.0/24 maxlen: 24
45.133.18.0/24 maxlen: 24
45.133.19.0/24 maxlen: 24
45.138.24.0/23 maxlen: 23
45.138.24.0/24 maxlen: 24
45.138.25.0/24 maxlen: 24
45.138.26.0/24 maxlen: 24
45.138.27.0/24 maxlen: 24
45.159.172.0/24 maxlen: 24
45.159.173.0/24 maxlen: 24
45.159.174.0/24 maxlen: 24
78.111.84.0/22 maxlen: 22
78.111.84.0/24 maxlen: 24
78.111.85.0/24 maxlen: 24
78.111.86.0/24 maxlen: 24
78.111.88.0/23 maxlen: 23
78.111.90.0/23 maxlen: 23
78.111.90.0/24 maxlen: 24
78.111.91.0/24 maxlen: 24
92.246.128.0/24 maxlen: 24
92.246.129.0/24 maxlen: 24
92.246.130.0/24 maxlen: 24
92.246.131.0/24 maxlen: 24
94.141.96.0/24 maxlen: 24
94.141.97.0/24 maxlen: 24
94.141.98.0/24 maxlen: 24
94.141.99.0/24 maxlen: 24
109.207.168.0/24 maxlen: 24
109.207.169.0/24 maxlen: 24
109.207.170.0/24 maxlen: 24
109.207.171.0/24 maxlen: 24
109.207.172.0/22 maxlen: 22
109.207.172.0/24 maxlen: 24
109.207.173.0/24 maxlen: 24
109.207.174.0/23 maxlen: 23
188.227.56.0/22 maxlen: 22
188.227.57.0/24 maxlen: 24
188.227.58.0/24 maxlen: 24
188.227.59.0/24 maxlen: 24
188.227.84.0/22 maxlen: 22
188.227.84.0/24 maxlen: 24
188.227.85.0/24 maxlen: 24
188.227.86.0/24 maxlen: 24
188.227.87.0/24 maxlen: 24
188.227.106.0/24 maxlen: 24
188.227.107.0/24 maxlen: 24
2a0e:b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e1:dc:35:f6:ee:21:96:d5:a5:1c:04:f5:45:c3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
Validity
Not Before: Sep 10 19:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5aad35e8ecbb9ba174f999add664b1138e40464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:f1:18:dc:c7:68:87:47:4b:9e:3e:c8:ab:
44:72:57:c9:e9:ea:d3:c0:b5:f5:b2:7a:eb:2c:53:
82:7f:c1:68:99:c4:10:10:a9:b5:58:08:6f:67:30:
72:22:07:78:b1:bd:11:41:4d:df:f2:82:4a:ea:fc:
f0:3f:29:29:9e:ff:b2:6a:bb:f1:6a:22:10:52:6e:
6f:c4:38:a0:59:14:92:44:cf:f3:d9:f5:25:44:b7:
53:51:18:ac:a0:98:92:46:d9:e5:e2:a5:80:cb:98:
7c:db:fb:ee:70:00:09:68:ec:21:50:55:fe:34:0e:
56:89:5e:e2:bc:7c:57:f9:f9:90:ff:50:46:a3:7c:
5a:71:45:5b:e9:c4:31:c1:5d:cd:53:a5:07:9d:6e:
4a:95:b0:e5:2e:74:ca:40:b1:d5:b3:7f:71:5a:f2:
30:b4:89:df:78:85:29:d1:8c:4e:13:65:d2:c8:f1:
63:db:b2:b6:35:f0:1d:91:39:1f:f8:94:27:4e:cd:
fc:ad:c2:a3:ae:9b:b0:b7:7c:9c:a6:98:76:ab:ff:
6d:c9:43:54:58:f8:af:60:1d:4f:7c:4e:45:40:f6:
c5:34:2a:bf:ec:38:97:1b:98:e7:31:18:33:5a:81:
da:11:9e:5c:ba:b4:ee:0b:48:eb:bd:ee:f0:63:4d:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AA:D3:5E:8E:CB:B9:BA:17:4F:99:9A:DD:66:4B:11:38:E4:04:64
X509v3 Authority Key Identifier:
keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/9arTXo7LuboXT5ma3WZLETjkBGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.0.0/21
45.14.48.0/22
45.133.16.0/22
45.138.24.0/22
45.159.172.0-45.159.174.255
78.111.84.0-78.111.91.255
92.246.128.0/22
94.141.96.0/22
109.207.168.0/21
188.227.56.0/22
188.227.84.0/22
188.227.106.0/23
IPv6:
2a0e:b80::/29
Signature Algorithm: sha256WithRSAEncryption
24:cd:34:05:0d:aa:32:0f:50:aa:80:d0:04:82:d1:33:14:38:
b5:b1:98:6b:13:00:40:87:1e:3b:15:cb:df:f4:a3:a4:f6:50:
c8:10:c5:d4:21:db:96:13:cc:3d:b6:df:8b:14:8b:aa:88:67:
5d:a2:86:95:4c:76:5b:ef:4c:c1:87:e9:f4:d8:26:42:27:ea:
d5:ba:91:97:66:ee:0c:57:9c:7b:4f:64:db:d8:49:bd:b4:1a:
28:b6:53:43:14:a5:34:24:b5:c2:f3:66:60:33:9c:75:9b:8e:
be:4b:d0:3f:58:86:96:d9:bc:16:bb:0a:db:bc:e6:f8:87:92:
28:8d:ff:cf:fb:50:25:bb:eb:42:7b:e0:4a:a0:fc:b2:27:58:
43:75:59:f4:c0:cc:82:35:a5:d2:f4:a3:6f:c9:76:34:8a:90:
9f:a4:3f:fa:88:fa:d6:b2:17:0e:ad:dd:b9:7e:c1:6b:e2:86:
30:6f:c7:70:94:13:b9:6d:e0:b3:05:38:57:71:8f:22:73:b6:
21:c2:53:57:8c:90:c2:5b:c2:31:a3:76:c1:85:fc:05:04:82:
a3:0b:69:9f:61:56:d5:96:40:d5:c9:36:8d:7d:3a:81:b0:f3:
01:c8:d4:e6:25:6f:6d:6a:a1:01:d6:87:be:ed:28:4f:f1:e3:
ca:6c:3f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:24 2026 by rpki-client