Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/u8MLWT18Nu8BHyf9ivle9iCZ9X0.roa
File: u8MLWT18Nu8BHyf9ivle9iCZ9X0.roa (raw, json)
Hash identifier: NIDA5dmMGI5AcAIOuhQAUZ61MWVR6Ebmjumhjj2BjCI=
Subject key identifier: BB:C3:0B:59:3D:7C:36:EF:01:1F:27:FD:8A:F9:5E:F6:20:99:F5:7D
Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial: 01A0F126FD810226C3B4A163B1625BB2C4CB
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/u8MLWT18Nu8BHyf9ivle9iCZ9X0.roa
Signing time: Wed 30 Sep 2026 07:10:59 +0000
ROA not before: Wed 30 Sep 2026 07:10:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49814
IP address blocks: 31.24.24.0/21 maxlen: 21
80.72.208.0/22 maxlen: 22
80.72.212.0/23 maxlen: 23
80.72.215.0/24 maxlen: 24
91.226.73.0/24 maxlen: 24
176.65.32.0/19 maxlen: 19
2a00:9700::/32 maxlen: 32
2a00:9700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:26:fd:81:02:26:c3:b4:a1:63:b1:62:5b:b2:c4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
Validity
Not Before: Sep 30 07:10:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbc30b593d7c36ef011f27fd8af95ef62099f57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:70:e3:3a:df:3a:f5:85:ec:13:c4:75:78:
55:13:fe:5a:21:28:61:83:75:cb:5c:77:1b:64:1a:
57:9e:f0:a5:2b:88:28:99:58:c2:3b:26:93:6a:ce:
ba:ef:be:5f:bb:21:45:44:8a:a3:6c:7b:26:cc:0c:
15:31:61:af:b2:c4:f0:24:56:94:72:e0:91:ed:04:
b0:2a:af:d4:81:4d:5b:8f:d6:9f:05:2f:9a:6e:a0:
da:93:bb:c5:e2:f7:23:05:a5:c7:5c:f7:73:7c:2a:
d0:ea:2b:93:81:69:56:23:a6:5e:24:3b:1e:c3:e2:
63:54:a3:6d:85:6a:c5:73:0d:88:83:ee:6c:28:1b:
9d:48:9a:30:33:7f:b5:c7:fb:7c:52:52:2a:1f:ec:
32:2c:4e:53:c2:e9:fe:e3:fd:83:d2:73:5c:54:66:
f3:f0:44:04:c6:0f:3e:0a:9c:53:36:cd:77:11:6e:
b0:5b:15:b7:80:48:8c:3e:c4:ad:40:92:59:86:07:
70:0d:88:85:de:64:22:56:36:d0:22:5b:06:e1:07:
4c:06:de:73:26:ed:ea:f5:78:01:08:25:83:88:86:
4c:4d:34:88:c7:43:a0:66:7e:94:3b:4d:43:c9:8a:
48:0a:78:8a:4d:00:a1:c6:99:89:f6:fd:ec:c6:a1:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C3:0B:59:3D:7C:36:EF:01:1F:27:FD:8A:F9:5E:F6:20:99:F5:7D
X509v3 Authority Key Identifier:
keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/u8MLWT18Nu8BHyf9ivle9iCZ9X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.24.0/21
80.72.208.0-80.72.213.255
80.72.215.0/24
91.226.73.0/24
176.65.32.0/19
IPv6:
2a00:9700::/32
Signature Algorithm: sha256WithRSAEncryption
4e:96:cb:ef:44:7c:55:5c:f2:ee:e5:0f:12:4f:3b:d3:08:60:
99:5a:c7:27:5c:5b:b3:e5:9f:c6:f4:fc:ad:e8:e5:5b:e9:6b:
48:04:07:c6:e2:a6:48:ce:72:3b:5f:95:7c:23:ba:86:df:58:
ec:0f:e7:30:90:77:11:e9:84:3a:b1:ed:92:fd:74:cb:88:02:
40:f9:76:96:56:e9:a2:93:70:09:ed:15:02:5e:85:a9:92:4e:
22:53:7c:3d:87:12:df:3e:4c:18:3c:af:8c:80:62:2c:3e:77:
a1:59:95:b1:86:75:ba:e8:c7:5d:49:8b:83:4e:c4:23:4c:55:
1d:8c:fc:c1:13:09:b2:e3:cb:55:6a:9a:dd:db:71:04:a4:7d:
54:94:e6:20:b4:3c:62:7c:4e:60:54:2c:97:56:07:dd:d7:e4:
bd:ea:46:08:54:17:46:ae:43:e7:a5:d0:e9:2b:65:a9:c6:67:
df:d1:49:5e:a8:d8:a0:c7:6b:c4:40:c1:d1:4a:3b:a7:3d:3f:
39:2c:4b:10:ec:af:9a:7e:5b:02:91:98:a2:82:32:fd:2a:ed:
c1:82:46:7d:b6:fa:47:a8:2c:d5:d6:71:27:31:02:af:09:39:
ba:84:11:ba:0b:eb:31:49:74:74:fd:b5:f3:fc:81:b5:c4:e9:
e8:6f:69:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:45:00 2026 by rpki-client