Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/tvuzIoLyiJIFvym94hv8bmzgHfw.roa
File: tvuzIoLyiJIFvym94hv8bmzgHfw.roa (raw, json)
Hash identifier: d1cbJwNHJf6j9LeFsZuVgcijBI1BNROn5egp7OJ58jk=
Subject key identifier: B6:FB:B3:22:82:F2:88:92:05:BF:29:BD:E2:1B:FC:6E:6C:E0:1D:FC
Certificate issuer: /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial: 01A05A71BA4DF7E7091183308DFC7848565B
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/tvuzIoLyiJIFvym94hv8bmzgHfw.roa
Signing time: Tue 01 Sep 2026 00:49:57 +0000
ROA not before: Tue 01 Sep 2026 00:49:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196949
IP address blocks: 31.200.224.0/20 maxlen: 20
31.200.224.0/23 maxlen: 23
31.200.226.0/23 maxlen: 23
31.200.228.0/23 maxlen: 23
31.200.230.0/23 maxlen: 23
31.200.232.0/23 maxlen: 23
31.200.234.0/23 maxlen: 23
31.200.236.0/23 maxlen: 23
31.200.238.0/23 maxlen: 23
37.200.72.0/21 maxlen: 21
37.200.72.0/23 maxlen: 23
37.200.74.0/23 maxlen: 23
37.200.76.0/23 maxlen: 23
37.200.78.0/23 maxlen: 23
45.146.152.0/22 maxlen: 22
109.110.32.0/19 maxlen: 19
109.110.32.0/23 maxlen: 23
109.110.34.0/23 maxlen: 23
109.110.36.0/23 maxlen: 23
109.110.38.0/23 maxlen: 23
109.110.40.0/23 maxlen: 23
109.110.42.0/23 maxlen: 23
109.110.44.0/23 maxlen: 23
109.110.46.0/23 maxlen: 23
109.110.48.0/23 maxlen: 23
109.110.50.0/23 maxlen: 23
109.110.52.0/23 maxlen: 23
109.110.54.0/23 maxlen: 23
109.110.56.0/23 maxlen: 23
109.110.58.0/23 maxlen: 23
109.110.60.0/23 maxlen: 23
109.110.62.0/23 maxlen: 23
132.243.184.0/24 maxlen: 24
217.150.72.0/21 maxlen: 21
217.150.72.0/23 maxlen: 23
217.150.74.0/23 maxlen: 23
217.150.76.0/23 maxlen: 23
217.150.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:71:ba:4d:f7:e7:09:11:83:30:8d:fc:78:48:56:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
Validity
Not Before: Sep 1 00:49:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6fbb32282f2889205bf29bde21bfc6e6ce01dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:3e:f0:10:d5:23:03:10:0c:50:2e:d3:d8:
a6:03:60:bc:f4:ff:35:56:8c:ee:db:6c:fe:3b:71:
ce:b6:b1:57:c6:88:8c:08:65:99:ad:35:d4:5b:35:
6a:b6:21:23:9b:6c:3f:0b:7e:87:f1:93:81:b8:2b:
b5:09:10:02:07:7d:31:d1:11:cf:0c:af:e8:e8:d9:
ef:4b:39:d2:16:ba:d3:71:ad:6e:1e:33:55:bc:52:
6f:a1:47:9c:de:e3:2a:cf:41:fa:ad:f5:16:5f:e4:
f2:08:37:8d:cd:e6:ec:f3:d8:81:67:78:55:27:46:
bc:44:60:8a:5d:db:86:5f:a3:3f:3e:f8:da:ba:ac:
b3:e4:8f:d6:94:1c:24:94:32:3e:5b:31:a5:4d:31:
f2:a3:23:03:3d:f9:26:2b:7e:ae:a5:fc:2d:f4:7e:
3b:a6:76:1f:ab:eb:9a:4e:5f:ef:8c:3e:15:bb:cf:
72:59:80:a2:64:29:28:86:b1:bd:bf:1b:78:06:f2:
f3:76:f5:c8:61:8d:e7:ec:e9:02:c0:cf:23:c4:8f:
69:a6:d2:19:54:43:fc:39:0c:1e:5c:66:15:db:b7:
84:1f:29:c9:31:ba:06:94:62:5c:23:13:f0:b5:10:
e6:c9:0d:02:38:65:58:64:9e:43:d2:24:7d:5b:cd:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FB:B3:22:82:F2:88:92:05:BF:29:BD:E2:1B:FC:6E:6C:E0:1D:FC
X509v3 Authority Key Identifier:
keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/tvuzIoLyiJIFvym94hv8bmzgHfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.224.0/20
37.200.72.0/21
45.146.152.0/22
109.110.32.0/19
132.243.184.0/24
217.150.72.0/21
Signature Algorithm: sha256WithRSAEncryption
21:e2:c6:df:76:91:d4:47:a0:39:c2:61:35:3e:d2:23:4a:54:
80:cc:b5:5b:1c:90:64:03:87:20:1d:03:13:43:06:db:f2:cf:
d9:cd:86:6e:f9:51:74:4f:ef:52:a7:ab:23:bd:f5:04:3d:9f:
b0:e5:e6:ad:0f:29:74:99:d2:f7:88:e0:45:2b:f5:86:c9:fa:
4b:d4:0a:9a:08:7c:75:ec:e8:09:0f:47:f6:e8:13:6f:c5:a1:
f5:6d:11:a1:8d:8f:96:e1:36:d1:ab:f3:9f:fd:31:d2:93:cc:
9e:99:ed:70:b8:38:19:41:b4:45:29:b1:48:e6:71:57:e2:61:
5a:71:bc:93:4d:b1:13:ab:a0:1b:a8:c9:fc:9f:84:b2:a0:20:
4e:19:e8:81:6a:54:fe:86:66:0b:73:9e:c0:f3:84:25:bf:4d:
23:24:0a:b6:58:ac:b9:9a:e6:25:d1:c6:26:92:23:0c:1a:46:
41:18:31:41:86:19:28:f8:e2:23:4e:af:1d:c6:46:76:6c:79:
9b:1c:b7:db:15:07:2c:5b:b1:4b:42:66:a5:d8:c4:eb:ea:a1:
77:fc:d7:7a:c3:b6:b0:7a:bc:93:7c:84:c4:cd:57:73:93:bd:
5a:13:1b:94:14:be:b2:31:fb:67:86:65:81:29:19:e6:e2:0b:
8a:1d:93:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:14:36 2026 by rpki-client