Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/9TczblseUkLjtPwvwBqoCpOGnyE.roa
File: 9TczblseUkLjtPwvwBqoCpOGnyE.roa (raw, json)
Hash identifier: oyXv2U2pAYoaWmtTRz9kSJs+I05Z3naMXVFccIcH7vk=
Subject key identifier: F5:37:33:6E:5B:1E:52:42:E3:B4:FC:2F:C0:1A:A8:0A:93:86:9F:21
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 01A08EFEF1927114CBAB3A3D737373F8B415
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/9TczblseUkLjtPwvwBqoCpOGnyE.roa
Signing time: Fri 11 Sep 2026 05:44:27 +0000
ROA not before: Fri 11 Sep 2026 05:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200446
IP address blocks: 31.170.240.0/21 maxlen: 21
31.171.39.0/24 maxlen: 24
31.171.48.0/21 maxlen: 21
31.171.56.0/21 maxlen: 21
31.171.68.0/22 maxlen: 22
31.171.72.0/22 maxlen: 22
31.171.80.0/21 maxlen: 21
31.171.88.0/21 maxlen: 21
62.212.229.0/24 maxlen: 24
85.132.108.0/24 maxlen: 24
85.132.110.0/24 maxlen: 24
94.20.54.0/24 maxlen: 24
94.20.123.0/24 maxlen: 24
94.20.148.0/22 maxlen: 22
94.20.172.0/22 maxlen: 22
94.20.180.0/22 maxlen: 22
94.20.192.0/23 maxlen: 23
94.20.204.0/22 maxlen: 22
94.20.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:fe:f1:92:71:14:cb:ab:3a:3d:73:73:73:f8:b4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Sep 11 05:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f537336e5b1e5242e3b4fc2fc01aa80a93869f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:db:57:9c:c4:bb:18:23:ce:2f:74:83:01:
b4:3e:d4:9f:16:eb:d0:a4:c8:6e:a8:c6:7f:c1:63:
89:fb:f6:91:98:0d:cc:fd:0e:b8:7d:46:8e:24:00:
1e:0d:d6:4f:b6:09:87:7e:09:c0:d9:54:11:67:61:
ad:eb:00:96:95:f4:4b:06:c7:69:0a:b9:a3:83:38:
3d:99:1f:00:81:52:9c:3e:99:ea:bb:4a:6e:e2:f1:
5c:5c:3b:ff:18:b9:e3:46:54:12:30:9a:ae:c1:60:
fa:7d:3a:88:07:c1:c1:13:88:a2:72:95:c4:d5:89:
28:e9:53:b4:ae:06:c6:50:71:da:4b:ff:e1:9e:c6:
93:c7:d5:56:67:da:fa:ef:3f:20:67:bb:e7:f9:f9:
62:e0:c5:36:fd:ea:c5:44:e6:b1:83:f1:04:4e:8d:
dd:53:30:ed:d6:73:5e:50:a1:e9:e7:f5:b7:0c:1e:
5d:7c:af:e0:6d:35:12:f9:a3:34:02:5f:89:9f:2a:
53:df:89:df:1f:08:86:d2:56:ec:01:f7:a3:18:88:
9d:39:9e:c9:11:da:c4:a2:11:31:c4:84:d4:46:f6:
d6:e1:88:da:67:cc:ce:82:f7:56:97:03:6f:0f:33:
3b:b4:73:26:42:ba:1e:f9:2a:8c:0a:a9:07:24:b8:
ef:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:37:33:6E:5B:1E:52:42:E3:B4:FC:2F:C0:1A:A8:0A:93:86:9F:21
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/9TczblseUkLjtPwvwBqoCpOGnyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.240.0/21
31.171.39.0/24
31.171.48.0/20
31.171.68.0-31.171.75.255
31.171.80.0/20
62.212.229.0/24
85.132.108.0/24
85.132.110.0/24
94.20.54.0/24
94.20.123.0/24
94.20.148.0/22
94.20.172.0/22
94.20.180.0/22
94.20.192.0/23
94.20.204.0-94.20.215.255
Signature Algorithm: sha256WithRSAEncryption
0c:e4:b4:c9:75:b2:6d:66:27:a7:e2:98:62:d5:57:c0:2a:dd:
d0:da:0d:c8:24:8b:80:7a:e2:c5:f1:76:ee:48:22:f2:45:05:
af:9c:4b:e8:4c:e8:4d:56:46:f6:f1:94:6b:62:79:86:43:de:
e1:6a:63:26:10:cc:fb:ba:01:41:71:4f:f2:ac:dc:4c:bb:94:
f9:d9:2c:44:c1:59:e7:2e:3b:32:b4:07:1e:04:97:64:c0:64:
75:0a:00:4b:5c:f5:bc:23:f1:bd:d0:8f:af:c0:fc:55:a9:ad:
65:a3:05:90:75:0e:93:84:66:4e:5c:2e:aa:f4:3b:6f:b0:71:
a1:eb:22:84:54:3b:cf:93:30:3e:b5:7c:fd:6c:be:1f:7c:83:
25:18:51:31:66:a4:75:b3:01:f8:62:c3:3e:25:aa:6d:91:6f:
f7:80:3b:fd:74:69:79:cf:30:5a:b1:b9:65:fe:eb:af:13:89:
21:1a:35:9e:d2:27:19:09:5f:7f:66:9b:25:42:4d:b9:11:3d:
ad:5d:1f:3f:95:3e:02:4d:79:a8:23:6c:94:3d:cf:c4:82:ae:
25:94:61:c4:fc:9b:11:65:05:05:4e:6b:87:8c:23:88:3f:9b:
36:fd:78:22:95:db:e6:13:26:49:ca:0c:a1:51:75:2a:03:31:
57:4a:53:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:50:51 2026 by rpki-client