Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/sjjd2NSPITr68O034mRL8pEZKMI.roa
File: sjjd2NSPITr68O034mRL8pEZKMI.roa (raw, json)
Hash identifier: 30S0+p6CD4KKucy2+C7TNS9Bj85H/OWFO73Ch6x2P2o=
Subject key identifier: B2:38:DD:D8:D4:8F:21:3A:FA:F0:ED:37:E2:64:4B:F2:91:19:28:C2
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 019FA3BE6F65D74A728E478D74B972EA085B
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/sjjd2NSPITr68O034mRL8pEZKMI.roa
Signing time: Mon 27 Jul 2026 13:23:14 +0000
ROA not before: Mon 27 Jul 2026 13:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41327
IP address blocks: 31.185.96.0/24 maxlen: 24
31.185.98.0/24 maxlen: 24
31.185.99.0/24 maxlen: 24
31.185.100.0/24 maxlen: 24
31.185.101.0/24 maxlen: 24
31.185.102.0/23 maxlen: 24
93.94.88.0/21 maxlen: 24
185.61.168.0/22 maxlen: 24
185.157.228.0/22 maxlen: 24
185.172.206.0/24 maxlen: 24
2a03:b020::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:be:6f:65:d7:4a:72:8e:47:8d:74:b9:72:ea:08:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: Jul 27 13:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b238ddd8d48f213afaf0ed37e2644bf2911928c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:8d:86:d6:9f:86:ff:3c:7d:c4:26:f3:27:
dd:4b:9d:79:e8:6c:02:5c:82:12:6a:13:8a:e8:f5:
59:24:30:8b:0b:e6:59:67:84:81:27:33:0e:33:1a:
3a:e0:cb:62:09:41:c7:2b:d7:8c:0a:8f:70:66:ab:
f3:6e:d4:01:b3:28:91:6c:bc:a5:60:a8:61:1f:c0:
e0:1c:a7:ac:11:8e:73:07:6d:e3:fa:02:0e:d5:1a:
a8:55:96:41:3e:3d:87:88:15:d9:c1:2c:d8:82:d2:
05:36:8f:29:1c:18:18:3e:35:81:44:5a:ce:89:d3:
b8:3f:20:dd:eb:73:d2:c9:5b:50:80:3e:18:b3:26:
9a:a0:70:b6:12:72:50:88:dd:dc:19:33:09:5c:80:
31:84:75:0b:15:b1:a5:c3:be:48:70:78:5e:be:43:
b3:f9:c5:f1:65:9e:80:01:c3:d8:36:11:d5:b8:79:
a3:25:14:61:26:18:72:7c:ca:0a:70:33:ae:59:6f:
a8:cf:94:09:b0:92:25:1c:27:b2:f8:f2:9d:15:aa:
67:4b:e3:bb:da:54:12:c2:8c:67:b6:0f:c4:6a:01:
f8:04:5f:ec:a0:19:3f:d9:dc:ea:0a:6a:66:dc:92:
a6:9d:20:ab:d0:6b:0b:ba:ee:2b:e2:53:d6:80:19:
ea:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:38:DD:D8:D4:8F:21:3A:FA:F0:ED:37:E2:64:4B:F2:91:19:28:C2
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/sjjd2NSPITr68O034mRL8pEZKMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.96.0/24
31.185.98.0-31.185.103.255
93.94.88.0/21
185.61.168.0/22
185.157.228.0/22
185.172.206.0/24
IPv6:
2a03:b020::/29
Signature Algorithm: sha256WithRSAEncryption
65:7f:27:1b:90:90:34:59:53:ad:96:3e:b1:a6:24:7d:72:e2:
9a:04:b4:68:15:b3:f1:85:df:25:44:19:4c:77:8a:3c:9b:74:
2c:77:98:56:2c:a0:47:c5:a7:c9:86:77:b7:7d:b9:05:3f:7b:
a1:ce:a3:c3:ac:61:47:68:d9:76:6d:f7:10:11:30:3f:f4:ef:
f9:e9:ff:bf:3a:91:8a:35:a5:f9:05:86:f2:a7:67:4a:02:7b:
6d:f9:a7:ac:b9:12:ce:53:85:13:0b:70:69:bd:f1:98:b4:e5:
26:7e:62:3b:42:04:fa:01:6d:db:0c:9f:b9:6b:4d:42:60:4d:
3d:77:03:a2:5b:f9:c3:ac:33:a8:7a:07:c6:5f:5b:ff:0f:0c:
de:0b:6b:09:c2:2a:98:28:31:8d:bf:a8:36:f7:72:a3:35:67:
9a:cd:38:d5:fa:9f:27:96:2e:89:ce:9a:45:f4:ab:9b:af:5e:
73:77:48:cb:ca:3f:56:23:78:64:09:3e:3a:8d:ba:11:54:33:
1e:44:9b:72:14:01:9d:cb:fa:87:ed:5a:b0:a6:26:f3:a0:df:
18:31:b6:4c:5c:d3:21:97:e0:ea:89:30:51:f3:c1:5a:f7:db:
5c:4c:7b:d8:10:e4:e4:16:12:14:78:6a:75:54:59:44:ec:8a:
2f:e1:ab:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:41:08 2026 by rpki-client