Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/aIZV0uRK5CsOfYDj0JIzyKbeZkw.roa
File: aIZV0uRK5CsOfYDj0JIzyKbeZkw.roa (raw, json)
Hash identifier: 4yLd5mUThQNWdy1JWFgNhTCT5EuvmfZ9l6+q6YACcrQ=
Subject key identifier: 68:86:55:D2:E4:4A:E4:2B:0E:7D:80:E3:D0:92:33:C8:A6:DE:66:4C
Certificate issuer: /CN=31252ce307781d0319fcd7494fa64f26045016ac
Certificate serial: 019FA471E07464ABA7C41EE73536FA3E44EF
Authority key identifier: 31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/aIZV0uRK5CsOfYDj0JIzyKbeZkw.roa
Signing time: Mon 27 Jul 2026 16:39:14 +0000
ROA not before: Mon 27 Jul 2026 16:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 224
IP address blocks: 78.91.0.0/16 maxlen: 16
158.36.0.0/14 maxlen: 14
158.36.5.88/31 maxlen: 31
158.36.5.90/31 maxlen: 31
193.156.0.0/15 maxlen: 15
2001:700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:71:e0:74:64:ab:a7:c4:1e:e7:35:36:fa:3e:44:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31252ce307781d0319fcd7494fa64f26045016ac
Validity
Not Before: Jul 27 16:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=688655d2e44ae42b0e7d80e3d09233c8a6de664c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:4d:64:ad:c3:d6:43:64:bc:c5:25:26:7c:
6a:a9:f6:a6:0d:10:4f:1b:9a:23:2a:2d:38:d1:4a:
5c:f4:dd:19:6a:db:08:a0:e4:dc:a3:32:1b:23:21:
72:2e:0b:43:03:0e:9b:d0:f2:07:9b:68:67:73:c0:
c4:74:32:0f:dd:b7:a5:84:2d:20:50:eb:26:6e:3a:
df:8e:1d:2a:02:7f:75:2b:f1:88:5d:08:27:84:cc:
bb:ae:f5:c3:75:a6:fc:c6:e9:77:d6:72:9c:5b:46:
77:1d:21:6d:fb:e1:4b:7c:df:f6:88:f7:23:24:3c:
1f:71:1f:00:21:a8:2f:90:60:1a:d6:a4:14:f3:3c:
6e:59:0d:a1:4c:b6:03:a0:5f:ef:58:8f:15:92:88:
8e:ae:7d:1c:b3:1c:98:6f:7c:c8:e5:03:c1:23:61:
29:55:71:d6:62:31:4d:55:f7:cb:40:c4:2e:7b:ef:
91:14:08:0b:73:11:62:e5:aa:86:db:8a:3b:26:ca:
f6:17:b5:f1:ec:9f:22:ab:64:cf:b2:41:9c:34:55:
c0:49:52:7e:c3:64:58:f8:04:70:9f:4d:63:01:76:
2b:47:b8:0b:47:29:49:bf:a3:22:12:44:dd:e1:dd:
91:05:7b:64:42:8e:59:14:5e:13:ac:b7:3b:09:a8:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:86:55:D2:E4:4A:E4:2B:0E:7D:80:E3:D0:92:33:C8:A6:DE:66:4C
X509v3 Authority Key Identifier:
keyid:31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/aIZV0uRK5CsOfYDj0JIzyKbeZkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.91.0.0/16
158.36.0.0/14
193.156.0.0/15
IPv6:
2001:700::/32
Signature Algorithm: sha256WithRSAEncryption
82:37:3d:d4:1d:23:7e:be:5b:f6:6a:bd:78:f8:8c:cb:66:93:
50:7b:10:dd:60:4d:3c:a8:91:31:9b:fa:ee:a9:c5:19:f9:37:
15:3b:77:b9:b9:b5:d3:7a:01:04:d0:07:c3:40:3f:bc:47:ef:
40:e8:a0:67:61:49:ff:b8:a7:3d:61:86:ed:e2:98:b9:e3:46:
cc:a1:a8:91:e4:ff:92:e3:a7:eb:94:b9:56:cb:a9:99:fd:55:
b4:5e:a4:32:b1:86:39:d6:ff:9e:ae:1f:ec:26:3a:b9:cb:67:
cc:c4:93:05:1e:be:de:8b:f1:22:9b:2a:e4:3f:63:eb:36:c4:
e6:60:e0:1a:51:76:c9:50:4c:de:2c:df:3e:d6:6c:73:c2:ae:
05:63:62:b0:3a:39:c7:55:42:4d:36:c5:84:14:76:08:90:6f:
6a:46:a5:e8:fd:ef:09:64:eb:64:0c:62:5e:55:d3:7f:9f:f2:
78:36:af:e2:42:0e:34:45:3d:af:eb:fe:64:44:cb:f2:95:0e:
d6:cd:e8:5c:7f:a6:62:b6:2e:45:d4:ac:08:c4:9f:13:89:41:
b6:a2:a6:c0:ce:ea:ee:b1:c4:42:63:fd:35:bf:e7:c9:b3:b9:
fe:79:84:e5:93:0e:bb:78:56:5a:51:fc:74:23:cf:ce:32:80:
e1:3f:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:29:17 2026 by rpki-client