Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/dVy69fLGMOo8FwSSN3UwAlS882A.roa
File: dVy69fLGMOo8FwSSN3UwAlS882A.roa (raw, json)
Hash identifier: NDJLf7dSrw0PZVg4660IJDVpEuw7OX76mS1bdnbf9Eg=
Subject key identifier: 75:5C:BA:F5:F2:C6:30:EA:3C:17:04:92:37:75:30:02:54:BC:F3:60
Certificate issuer: /CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Certificate serial: 019FA40F005099090FDE94CCC73E1E402B47
Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/dVy69fLGMOo8FwSSN3UwAlS882A.roa
Signing time: Mon 27 Jul 2026 14:51:14 +0000
ROA not before: Mon 27 Jul 2026 14:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207430
IP address blocks: 31.14.4.0/22 maxlen: 22
31.14.4.0/23 maxlen: 23
31.14.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:0f:00:50:99:09:0f:de:94:cc:c7:3e:1e:40:2b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Validity
Not Before: Jul 27 14:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=755cbaf5f2c630ea3c1704923775300254bcf360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:1e:ac:83:0d:6e:6c:28:19:07:0f:6c:ae:
80:0d:e0:a3:c0:b8:30:71:77:22:da:91:a6:a0:cf:
df:2d:ef:6a:ee:8c:99:31:8a:d0:32:56:c6:4b:b3:
42:1f:c8:c4:12:00:28:03:f5:84:5d:17:13:52:46:
51:df:c6:cc:49:dc:1b:1e:2b:84:d0:da:3b:06:eb:
ce:db:d5:ab:14:5e:69:07:0a:a1:e1:6f:73:06:e4:
0a:f7:40:b6:41:ab:59:c6:94:77:b1:e4:c7:1f:cc:
8e:e1:a0:d8:3f:a9:a6:a2:80:55:2c:1c:84:00:eb:
c6:87:6d:21:a4:06:3c:f0:6f:4b:26:fd:32:44:0d:
d7:08:53:ff:0e:7f:ad:53:57:67:91:82:d2:63:65:
99:96:82:a0:cb:de:74:a1:19:88:73:e2:38:5f:81:
64:6c:4d:e4:ee:28:c7:00:b0:2c:11:eb:c8:ee:c5:
8d:c4:3b:80:42:9e:8e:34:08:16:2e:25:ae:f0:bc:
e4:32:ee:3c:65:f1:6e:89:ae:7c:f6:2b:b1:09:55:
3d:09:1e:6e:b5:93:0f:2a:fa:00:ac:06:b1:2d:3a:
b3:92:ec:12:5e:8d:8a:92:c1:11:5a:6e:8a:c2:67:
22:7f:b2:b2:c5:30:36:35:bf:5f:09:b6:e5:e8:7d:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5C:BA:F5:F2:C6:30:EA:3C:17:04:92:37:75:30:02:54:BC:F3:60
X509v3 Authority Key Identifier:
keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/dVy69fLGMOo8FwSSN3UwAlS882A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.4.0/22
Signature Algorithm: sha256WithRSAEncryption
65:d3:b5:2f:58:7f:03:ab:c4:01:c5:ea:4c:7c:b3:2c:55:fe:
2f:05:47:1b:73:8a:ef:01:5a:86:d1:b6:1b:f6:5e:a1:64:ab:
50:c0:f4:01:27:72:20:be:11:4e:75:cd:a1:00:e2:1f:81:38:
ef:d1:56:00:18:4f:66:26:e5:e1:fb:e2:83:6e:5c:f2:d3:e4:
95:13:3c:6a:03:7f:e5:f6:ce:3b:b2:da:bc:4b:9c:a4:9e:0c:
ad:d6:4c:dc:0c:08:2d:98:1b:1a:90:e0:ef:8f:ed:46:7d:bb:
28:4a:a5:6a:50:3f:77:ed:ff:0d:0b:2d:33:ab:38:e4:74:dd:
77:b2:1e:cf:59:a6:3c:65:33:a7:b6:2a:bb:e1:ad:fc:ec:c0:
c2:22:f6:31:28:60:57:14:cc:6b:17:35:ba:f3:8b:d9:85:56:
4d:c2:98:bf:7f:f8:e9:d5:5c:de:e3:75:6b:c9:87:33:11:b6:
d2:1f:c5:5e:33:59:d9:d6:d4:83:05:fe:3b:18:69:5e:7c:95:
c1:c5:65:9f:d8:70:5b:23:7b:48:d5:59:84:d4:ea:37:00:76:
66:d6:6e:d6:79:49:75:9f:e3:18:0a:a7:75:44:3a:a6:7c:b6:
04:d1:8f:64:37:3d:e1:9a:85:3a:7a:25:f9:03:94:51:df:09:
07:e5:82:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:33 2026 by rpki-client