Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/vu1POpZ4fbsFLSVfm4Tq2UNs8Yo.roa
File: vu1POpZ4fbsFLSVfm4Tq2UNs8Yo.roa (raw, json)
Hash identifier: dj2PPZhraZg7Mhgjn+2qQ98wor01N03TocqybH8CZeM=
Subject key identifier: BE:ED:4F:3A:96:78:7D:BB:05:2D:25:5F:9B:84:EA:D9:43:6C:F1:8A
Certificate issuer: /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial: 019B7AC9175F483DE8EB336C8BF10940418E
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/vu1POpZ4fbsFLSVfm4Tq2UNs8Yo.roa
Signing time: Thu 01 Jan 2026 18:19:17 +0000
ROA not before: Thu 01 Jan 2026 18:19:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196949
IP address blocks: 31.200.224.0/20 maxlen: 20
31.200.224.0/23 maxlen: 23
31.200.226.0/23 maxlen: 23
31.200.228.0/23 maxlen: 23
31.200.230.0/23 maxlen: 23
31.200.232.0/23 maxlen: 23
31.200.234.0/23 maxlen: 23
31.200.236.0/23 maxlen: 23
31.200.238.0/23 maxlen: 23
37.200.72.0/21 maxlen: 21
37.200.72.0/23 maxlen: 23
37.200.74.0/23 maxlen: 23
37.200.76.0/23 maxlen: 23
37.200.78.0/23 maxlen: 23
45.146.152.0/22 maxlen: 22
109.110.32.0/19 maxlen: 19
109.110.32.0/23 maxlen: 23
109.110.34.0/23 maxlen: 23
109.110.36.0/23 maxlen: 23
109.110.38.0/23 maxlen: 23
109.110.40.0/23 maxlen: 23
109.110.42.0/23 maxlen: 23
109.110.44.0/23 maxlen: 23
109.110.46.0/23 maxlen: 23
109.110.48.0/23 maxlen: 23
109.110.50.0/23 maxlen: 23
109.110.52.0/23 maxlen: 23
109.110.54.0/23 maxlen: 23
109.110.56.0/23 maxlen: 23
109.110.58.0/23 maxlen: 23
109.110.60.0/23 maxlen: 23
109.110.62.0/23 maxlen: 23
217.150.72.0/21 maxlen: 21
217.150.72.0/23 maxlen: 23
217.150.74.0/23 maxlen: 23
217.150.76.0/23 maxlen: 23
217.150.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:17:5f:48:3d:e8:eb:33:6c:8b:f1:09:40:41:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
Validity
Not Before: Jan 1 18:19:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=beed4f3a96787dbb052d255f9b84ead9436cf18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:34:11:ec:50:b0:cd:8a:3d:ec:33:90:c0:
19:8a:60:4e:cf:61:b9:f6:4f:88:75:6f:56:ac:69:
ea:e7:17:c2:33:da:ac:ee:a5:ee:6e:15:dc:0a:65:
41:33:01:c1:17:46:6d:41:eb:c0:88:bc:55:01:77:
78:08:7d:63:9a:d5:fc:31:67:79:35:79:76:85:fa:
6a:55:02:b2:f0:96:c4:ce:e4:9c:66:25:24:2b:27:
74:8a:6f:be:05:42:48:be:d9:d4:2d:2a:aa:b9:7b:
c4:14:4d:6d:59:52:74:eb:d4:1f:21:fc:db:01:b2:
db:15:c9:4b:75:dc:88:8d:4b:58:23:50:ae:d4:10:
9b:68:f4:ce:81:c8:4a:ba:2b:96:86:f7:72:f3:2f:
60:41:f9:58:28:70:92:79:f6:6a:95:86:a7:4d:cf:
c7:03:e9:e9:f3:12:7c:ed:0c:40:62:d4:4b:7f:a5:
35:91:ed:15:25:0b:8c:ec:6e:46:7c:75:04:e7:f4:
29:e6:84:59:2e:75:32:a7:91:0f:7c:22:4e:4f:cc:
14:97:5d:6d:f0:dc:0c:8d:8a:90:fa:19:f0:8c:0b:
5d:26:0b:19:1f:5b:08:fa:64:9a:63:fe:08:b7:9b:
f5:20:9d:ec:73:46:26:4f:c8:92:d5:bd:d2:cb:7d:
90:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:ED:4F:3A:96:78:7D:BB:05:2D:25:5F:9B:84:EA:D9:43:6C:F1:8A
X509v3 Authority Key Identifier:
keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/vu1POpZ4fbsFLSVfm4Tq2UNs8Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.224.0/20
37.200.72.0/21
45.146.152.0/22
109.110.32.0/19
217.150.72.0/21
Signature Algorithm: sha256WithRSAEncryption
12:21:69:13:98:1e:22:f9:2f:af:96:2c:1f:1a:87:c6:1b:5e:
b9:b3:98:d1:fc:6c:21:f5:b4:02:2b:f1:78:a2:52:7f:a3:22:
e9:92:72:84:00:8a:71:3c:16:35:55:df:77:a3:db:c0:1c:7b:
72:cd:9f:d5:a8:e1:3a:3a:ef:36:c9:6d:96:a4:84:9a:dc:76:
97:9c:de:33:44:fa:52:e5:e6:f5:5d:91:c5:8b:f0:3f:e1:27:
69:39:15:b4:cf:a2:06:7d:46:72:f5:cc:9c:7f:a6:31:e4:02:
9e:a5:71:ba:7e:58:e8:96:eb:ad:bb:c9:be:ff:20:77:30:c2:
82:b2:4b:b8:c6:9b:a3:dc:54:3e:a9:37:5b:26:6e:f2:04:92:
c7:11:5b:7f:68:08:e3:5f:f8:d7:6d:3a:0d:54:1b:e3:9d:35:
56:49:80:81:45:7e:4d:4a:ab:cf:f6:8c:34:17:d6:36:50:45:
ca:7e:10:87:10:a2:01:4a:8f:87:3b:22:c7:2d:89:54:2b:76:
69:df:72:47:50:29:dd:9e:4e:e5:86:d3:de:44:ef:27:d6:87:
ae:da:22:b7:97:13:73:38:b3:cc:e8:19:7b:d7:66:fa:0e:4e:
57:e6:cb:22:b2:8b:77:0b:a1:76:c9:7a:fc:94:0f:18:cd:ab:
5c:34:a9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:21:54 2026 by rpki-client