Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/Xj_u5HjpxtCwXjP24QJOUfE1Eo0.roa
File: Xj_u5HjpxtCwXjP24QJOUfE1Eo0.roa (raw, json)
Hash identifier: wVYFKdr5Wp6EdJbjBn7zlklNK/TPT0xbcVbQunqvKdg=
Subject key identifier: 5E:3F:EE:E4:78:E9:C6:D0:B0:5E:33:F6:E1:02:4E:51:F1:35:12:8D
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 019C9427AC41D5F57191B5D71F0A57926CD0
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/Xj_u5HjpxtCwXjP24QJOUfE1Eo0.roa
Signing time: Wed 25 Feb 2026 09:35:53 +0000
ROA not before: Wed 25 Feb 2026 09:35:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39318
IP address blocks: 31.210.174.0/23 maxlen: 24
46.247.42.0/23 maxlen: 24
82.115.48.0/23 maxlen: 24
82.115.48.0/24 maxlen: 24
82.115.49.0/24 maxlen: 24
85.202.192.0/23 maxlen: 24
213.155.22.0/23 maxlen: 23
213.155.22.0/24 maxlen: 24
213.155.23.0/24 maxlen: 24
2a00:5da0:2000::/36 maxlen: 48
2a00:5da0:3000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:27:ac:41:d5:f5:71:91:b5:d7:1f:0a:57:92:6c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Feb 25 09:35:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e3feee478e9c6d0b05e33f6e1024e51f135128d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:61:ff:b1:55:ec:4a:aa:80:35:22:42:03:
ab:0f:6b:ce:5e:05:d0:c4:69:15:ac:b8:95:8d:b7:
39:4e:cc:0e:d2:4e:fd:cb:74:f5:c5:73:9e:64:40:
2b:72:6c:cd:f8:76:92:20:18:fe:b7:ea:d5:c6:fd:
77:fc:32:a2:10:40:aa:22:50:79:20:b0:8b:f4:a7:
a8:eb:9e:b1:0d:4c:65:fc:34:0d:02:4d:83:df:31:
ba:f6:34:2e:4a:22:d9:7c:c7:2e:4a:50:ad:f9:e0:
d3:ad:ad:fd:e2:ad:cb:4a:5d:a3:2a:9a:19:08:e8:
f1:cf:04:93:7d:5d:72:22:71:63:72:3c:a0:d5:2e:
8b:ee:c9:cd:2f:76:f7:70:71:20:15:57:1d:27:5e:
c6:ac:2a:7d:2b:72:82:4d:40:79:c0:75:d7:3f:ce:
bd:6e:67:28:b7:64:74:5b:6d:e7:b1:93:e5:89:40:
4a:3f:bd:fa:4b:c9:f4:eb:49:d2:48:c9:2d:8b:5d:
d5:7b:40:a8:15:5c:1e:47:03:87:aa:00:5c:39:3c:
66:3a:17:42:33:b4:9c:a2:e4:6a:0e:b4:99:cc:36:
5c:c0:37:81:f3:d7:f0:82:d7:36:38:e0:6c:2a:15:
cf:00:9f:a9:72:63:8b:17:c1:02:c7:94:4d:8f:7e:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3F:EE:E4:78:E9:C6:D0:B0:5E:33:F6:E1:02:4E:51:F1:35:12:8D
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/Xj_u5HjpxtCwXjP24QJOUfE1Eo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.174.0/23
46.247.42.0/23
82.115.48.0/23
85.202.192.0/23
213.155.22.0/23
IPv6:
2a00:5da0:2000::/35
Signature Algorithm: sha256WithRSAEncryption
23:ec:32:11:73:91:15:23:a3:40:f1:f4:7a:e3:9e:10:71:53:
2c:c5:2b:25:51:14:fa:5a:45:70:d2:a3:07:75:1c:30:2d:fd:
2e:58:0b:51:ac:7c:1b:ff:e8:a2:4b:5d:1f:57:b4:9e:2f:d9:
96:7e:0e:cc:ce:c6:51:81:61:c1:3a:07:2b:62:c2:47:65:43:
b8:6c:66:35:40:fc:9e:6a:9e:70:19:24:c6:90:ab:15:0b:93:
d7:f0:72:73:a8:88:33:33:7b:7c:0e:6a:9d:69:c3:f7:65:b8:
fc:02:52:3d:86:d2:af:14:1e:8d:b1:aa:97:54:79:4f:65:bb:
f5:33:03:da:96:50:32:82:58:7d:f8:f2:8e:45:fd:fb:84:b9:
96:33:51:7d:bb:47:bb:9c:50:2d:9d:60:b1:2a:44:d3:4c:cf:
1f:c4:b2:b8:b5:25:2e:f9:ed:33:90:22:cd:ef:d1:8a:ab:91:
cf:4a:45:36:72:7c:5f:6a:cc:62:e8:93:0c:49:bb:aa:ad:eb:
68:61:2f:ca:0c:d0:ee:4b:90:8f:b3:6f:46:9c:42:09:77:98:
e9:5a:e1:d4:d0:61:a0:a3:be:6c:94:0d:49:08:26:3e:89:29:
40:a7:96:21:ae:16:4d:88:ad:f3:2a:1d:62:cd:66:9a:fb:b9:
97:69:fa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:37:33 2026 by rpki-client