Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/mce2p1fPsX5a_y4_ilbdDer9d-s.roa
File: mce2p1fPsX5a_y4_ilbdDer9d-s.roa (raw, json)
Hash identifier: 7i4vyc1AnlCo3zns/VGw/hgH1Aenqlugd0WBI06FgoA=
Subject key identifier: 99:C7:B6:A7:57:CF:B1:7E:5A:FF:2E:3F:8A:56:DD:0D:EA:FD:77:EB
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 01A1679B90C94B9D078A0A24BC394CC09C8C
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/mce2p1fPsX5a_y4_ilbdDer9d-s.roa
Signing time: Fri 23 Oct 2026 07:13:30 +0000
ROA not before: Fri 23 Oct 2026 07:13:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6282
IP address blocks: 31.131.8.0/23 maxlen: 23
31.131.10.0/23 maxlen: 23
31.132.192.0/22 maxlen: 22
64.43.100.0/22 maxlen: 22
77.36.24.0/22 maxlen: 22
77.36.116.0/22 maxlen: 22
81.161.0.0/23 maxlen: 23
81.161.2.0/23 maxlen: 23
91.234.156.0/23 maxlen: 23
91.234.158.0/23 maxlen: 23
91.237.44.0/22 maxlen: 22
93.120.20.0/22 maxlen: 22
176.96.52.0/22 maxlen: 22
176.111.160.0/23 maxlen: 23
176.111.162.0/23 maxlen: 23
176.116.36.0/22 maxlen: 22
178.159.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:9b:90:c9:4b:9d:07:8a:0a:24:bc:39:4c:c0:9c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Oct 23 07:13:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99c7b6a757cfb17e5aff2e3f8a56dd0deafd77eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:37:d5:a1:5a:35:f0:de:44:91:e2:b3:2b:
6f:36:5e:53:9f:dc:d6:fd:34:57:26:28:4a:92:ea:
a6:3a:6d:fa:0e:e6:d9:69:df:fa:bf:27:dd:63:20:
5a:92:c1:25:26:8a:b6:6c:1a:93:9f:46:6f:fd:71:
f2:cf:83:ee:29:82:9d:a7:b2:e6:15:cb:3b:0e:ef:
ae:06:41:f7:41:c6:36:97:a7:c0:40:c8:b5:49:5f:
11:b2:c0:aa:d5:b5:e9:e3:cf:b3:95:5e:df:7c:01:
a8:35:6c:10:d7:a1:4c:26:b8:a8:3b:bd:c5:17:5a:
33:1f:fb:d9:9b:ea:08:ea:18:ea:d0:37:b7:11:d4:
57:03:8f:f4:e2:3f:e5:18:6d:10:42:59:df:00:99:
76:e6:73:78:d1:86:56:5b:d8:95:23:42:a4:c9:74:
84:c9:80:b5:3c:8d:ed:70:7c:bf:97:cf:9d:f3:f1:
dc:16:5a:9e:bd:23:32:b0:b3:a9:56:77:0a:f3:93:
78:ce:2e:18:2c:b3:bb:f8:78:74:7f:98:2b:1c:23:
88:90:e6:72:c0:3b:f2:9c:fb:3b:6e:08:bb:26:1a:
25:3e:3b:d6:60:cc:b7:a2:01:43:79:2f:e9:1b:9c:
2d:99:cf:86:d7:1d:8c:73:5c:1d:de:4b:22:9f:f2:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C7:B6:A7:57:CF:B1:7E:5A:FF:2E:3F:8A:56:DD:0D:EA:FD:77:EB
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/mce2p1fPsX5a_y4_ilbdDer9d-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.8.0/22
31.132.192.0/22
64.43.100.0/22
77.36.24.0/22
77.36.116.0/22
81.161.0.0/22
91.234.156.0/22
91.237.44.0/22
93.120.20.0/22
176.96.52.0/22
176.111.160.0/22
176.116.36.0/22
178.159.144.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:2e:25:d7:c3:cc:c2:f5:c5:6c:ad:79:74:cb:cf:39:cb:02:
30:c6:b4:05:31:73:77:05:35:af:ba:d7:6e:9e:fd:f8:ff:f8:
91:2d:dc:e2:b6:d5:0a:86:b9:d3:f4:9f:46:97:cc:04:bf:74:
3c:5a:80:61:39:d3:69:aa:f3:00:55:9c:8a:05:39:a4:ca:b0:
99:1f:10:24:9a:0a:f0:d0:61:81:44:ac:a7:76:e2:d2:a5:f8:
27:06:e5:1c:43:46:c8:04:37:12:0e:1b:7b:91:9e:01:c7:ba:
06:81:56:0b:a4:39:65:f4:c6:16:63:af:20:1e:2e:97:38:95:
0a:41:f5:b8:21:f3:db:93:26:ca:4c:b8:f4:52:34:c9:24:6e:
ad:36:41:58:69:66:f2:13:4b:4d:2c:c5:af:c0:7c:d5:d9:14:
1e:8c:0d:94:fa:3a:a8:c7:db:fa:00:57:da:a5:48:6d:e8:6e:
f1:14:aa:e0:17:1c:62:a5:19:ce:d9:9b:06:81:2b:0c:7d:90:
ca:b6:0a:47:73:3b:1f:c2:97:2e:49:ec:b3:8d:a7:db:18:8a:
cd:bb:49:92:e6:43:76:5e:2a:ca:8b:2f:eb:0b:ef:94:3d:7e:
d1:66:9c:3b:d9:55:0b:82:c8:c1:55:88:d6:4c:4c:ae:b6:a9:
90:82:0f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 10:50:39 2026 by rpki-client