Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/gm8yFtGuI1x0ldWMZNwkhs6JAkI.roa
File: gm8yFtGuI1x0ldWMZNwkhs6JAkI.roa (raw, json)
Hash identifier: eUogi46mfeRT3NoSOOB9GttPDNVIAGN+5Ci5DnGmL2g=
Subject key identifier: 82:6F:32:16:D1:AE:23:5C:74:95:D5:8C:64:DC:24:86:CE:89:02:42
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019E72F27B94D3C716A7CF3D68C58A7E14B3
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/gm8yFtGuI1x0ldWMZNwkhs6JAkI.roa
Signing time: Fri 29 May 2026 08:55:54 +0000
ROA not before: Fri 29 May 2026 08:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62206
IP address blocks: 31.133.80.0/22 maxlen: 24
31.133.84.0/22 maxlen: 24
31.133.88.0/22 maxlen: 24
176.103.224.0/22 maxlen: 22
176.103.232.0/22 maxlen: 24
176.103.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:72:f2:7b:94:d3:c7:16:a7:cf:3d:68:c5:8a:7e:14:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: May 29 08:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=826f3216d1ae235c7495d58c64dc2486ce890242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:a3:3c:24:4f:b1:86:6b:4a:d7:b6:a9:6e:
88:2d:b3:1d:e1:80:14:e2:0a:82:8a:16:60:97:50:
83:b2:39:f0:30:58:1f:94:aa:64:ff:7f:d7:ac:f0:
3f:9a:34:2e:90:20:f9:63:4b:51:9a:73:70:69:f0:
ad:00:86:6a:78:39:f1:46:09:9c:b8:d2:13:59:10:
7e:bc:9b:b7:ba:7e:0a:a7:cb:1b:fc:9f:7d:35:62:
99:b2:65:b8:12:5a:88:83:24:71:9b:43:fd:51:51:
83:85:7d:99:b8:0a:18:5a:5e:9b:0c:5f:44:ac:ef:
22:09:3e:0e:55:b0:78:ec:b8:63:10:ba:5a:95:93:
8b:74:e9:e9:64:2b:56:27:0f:4c:9a:78:61:97:47:
07:7b:2d:a3:30:33:b6:c7:4b:26:f6:1f:8b:c2:50:
a8:17:a6:6e:2a:29:7b:dc:79:04:56:37:d6:05:f0:
1f:10:2d:45:86:bf:6d:5e:f1:54:b5:7e:fd:34:ef:
21:6b:ea:7f:33:a6:91:ed:8f:52:39:0c:80:67:21:
a7:85:43:7b:0b:eb:b7:91:30:dd:8b:dd:2f:c0:e2:
a0:38:44:d2:82:b9:a2:02:36:53:75:31:92:9a:d2:
78:ec:59:02:41:53:45:47:c5:fb:f4:12:41:e5:30:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6F:32:16:D1:AE:23:5C:74:95:D5:8C:64:DC:24:86:CE:89:02:42
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/gm8yFtGuI1x0ldWMZNwkhs6JAkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0-31.133.91.255
176.103.224.0/22
176.103.232.0/21
Signature Algorithm: sha256WithRSAEncryption
14:c2:c3:15:1d:1d:7e:88:3a:a8:ed:45:82:85:9a:d8:bb:79:
86:ec:cc:90:f6:16:36:d2:c6:43:87:9d:38:6b:a3:b7:fb:50:
e5:6a:de:78:d1:cd:f8:e8:92:5c:7a:d0:b9:77:7f:14:46:e3:
05:6c:b0:43:af:8d:00:1a:aa:c5:63:3c:49:e4:4a:a1:ee:df:
41:11:56:24:0a:06:d3:24:3a:91:62:8c:b8:e8:3f:03:35:40:
2b:34:70:f9:25:9e:ef:75:af:f6:7b:57:91:d2:81:2c:72:1b:
ba:f3:dc:3f:19:38:8e:df:17:90:42:3f:3b:fc:9e:e9:6c:02:
75:87:aa:17:4a:1e:3d:f2:7f:c7:e0:c7:79:7d:36:b7:c1:00:
69:b7:78:95:50:90:3a:26:02:80:bb:0d:d8:06:4e:a8:a8:28:
32:1f:fc:a2:fb:46:ec:28:00:5c:95:71:f6:d3:91:11:e3:f4:
ee:75:9b:39:2f:96:e4:b6:fd:ad:20:f3:bb:6a:b2:88:cf:c8:
51:b7:88:b6:d8:cf:d3:a8:ea:48:70:92:09:f0:38:ee:7d:dd:
b5:57:2c:70:7c:78:17:07:ee:3f:d8:2a:7d:cf:5a:50:18:63:
7e:e2:09:b7:af:39:3c:a6:ad:9d:b9:4e:52:1a:00:e9:9c:35:
04:b4:0b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:41:42 2026 by rpki-client