Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/RXQM9gzMA86OdJ_o3oITgzSAn4U.roa
File: RXQM9gzMA86OdJ_o3oITgzSAn4U.roa (raw, json)
Hash identifier: N7XxugUmLl+vhJ2qFay+IQbBlHfHaTGSGSUT7MLKqf0=
Subject key identifier: 45:74:0C:F6:0C:CC:03:CE:8E:74:9F:E8:DE:82:13:83:34:80:9F:85
Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial: 019F14DF73B95486D5D4003124E0560A94DB
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/RXQM9gzMA86OdJ_o3oITgzSAn4U.roa
Signing time: Mon 29 Jun 2026 19:33:36 +0000
ROA not before: Mon 29 Jun 2026 19:33:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199486
IP address blocks: 31.47.64.0/21 maxlen: 21
31.47.69.0/24 maxlen: 24
185.123.132.0/22 maxlen: 22
185.214.156.0/24 maxlen: 24
185.214.157.0/24 maxlen: 24
185.214.158.0/24 maxlen: 24
185.214.159.0/24 maxlen: 24
2a09:2e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:df:73:b9:54:86:d5:d4:00:31:24:e0:56:0a:94:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
Validity
Not Before: Jun 29 19:33:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45740cf60ccc03ce8e749fe8de82138334809f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:7d:87:22:63:f5:fe:b9:9c:01:e6:02:e5:
d0:54:22:87:e0:5f:c3:c5:ca:9d:70:4d:20:93:a6:
34:51:42:2f:36:a2:69:39:c0:e0:b1:08:18:6a:38:
f2:c4:9b:b4:48:f8:5a:db:87:1e:2d:b2:20:81:d3:
86:1e:53:eb:d8:c5:c0:0b:af:a9:fe:9e:38:6f:3e:
cd:ff:48:c1:a3:d3:cf:0f:35:d2:1e:13:b2:c8:6b:
c2:60:19:67:b6:e7:46:be:e1:a5:a2:bc:83:49:de:
b3:35:6c:a6:46:4a:1b:56:65:63:b2:a6:11:64:bd:
c5:0e:23:ae:bf:98:dd:f6:36:29:a0:90:a1:27:12:
e5:5d:a4:b2:5a:f3:ff:92:88:d0:69:23:1d:a7:79:
a5:ef:22:29:4d:ca:80:fb:4a:a5:b8:d8:47:57:03:
09:48:26:05:6f:33:52:c4:dd:b0:f8:a8:c9:7e:88:
1c:01:0b:47:d6:ab:8a:61:a0:26:d7:e6:2e:7d:e3:
af:b6:f9:21:72:03:49:11:be:e5:59:28:e5:1b:74:
87:c5:8c:1a:6f:03:74:87:0a:92:e9:7b:04:37:c1:
e0:59:8b:40:24:0f:92:bb:a6:ea:75:48:cb:7e:43:
7e:37:d2:ec:09:dc:90:e9:89:bd:78:cc:9f:4e:37:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:74:0C:F6:0C:CC:03:CE:8E:74:9F:E8:DE:82:13:83:34:80:9F:85
X509v3 Authority Key Identifier:
keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/RXQM9gzMA86OdJ_o3oITgzSAn4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.64.0/21
185.123.132.0/22
185.214.156.0/22
IPv6:
2a09:2e80::/29
Signature Algorithm: sha256WithRSAEncryption
12:e2:77:46:2d:3f:20:3a:35:c0:16:6b:1f:97:7b:92:e4:ed:
f2:ac:5b:64:a4:d5:5e:05:e5:62:b9:ca:1f:e7:18:bb:2e:17:
a0:0c:13:2e:41:e5:13:cf:4c:71:b9:f5:3a:0f:70:71:5e:e5:
de:b3:44:f5:28:39:c8:68:7d:9f:3e:51:19:32:94:86:d5:9a:
ee:7a:07:cf:3e:cd:10:26:0b:3b:c9:38:b6:48:cf:20:32:5f:
c4:9c:b3:bc:3f:70:70:5e:00:d8:a3:be:ff:5b:8d:02:49:0c:
85:8d:cd:8b:24:95:3c:7b:45:4d:cd:8a:d4:ed:14:e5:94:1f:
86:7e:a3:10:52:8c:4e:8a:95:8d:2e:4d:df:6a:a9:4e:d6:22:
86:27:e5:a8:81:be:02:b0:da:72:0c:16:01:3e:60:c3:13:83:
49:02:20:4d:74:61:dd:10:8b:b2:48:12:75:2a:b0:0f:99:b5:
3b:74:b9:a8:56:5f:c6:b5:b1:62:fa:6e:f1:2b:71:19:7a:64:
53:04:cf:63:97:d9:12:23:0b:38:1e:1d:c9:e7:82:c5:c8:29:
3a:c8:10:1c:a4:2d:95:46:a4:1c:09:44:b2:0f:50:f1:d8:22:
68:c2:df:5f:d1:39:f1:1e:a6:95:a5:d1:e2:31:36:de:d3:74:
3e:e4:6c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:51:53 2026 by rpki-client