Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/RfN__qffquGy6Jl-oAr1ULrDRTQ.roa
File: RfN__qffquGy6Jl-oAr1ULrDRTQ.roa (raw, json)
Hash identifier: cg7FpXigP2DxU854Bug1E5wVuJN0WwHOYIEyjRHG5Go=
Subject key identifier: 45:F3:7F:FE:A7:DF:AA:E1:B2:E8:99:7E:A0:0A:F5:50:BA:C3:45:34
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 01A1058A468362A6E423C64A5DC886AB2325
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/RfN__qffquGy6Jl-oAr1ULrDRTQ.roa
Signing time: Sun 04 Oct 2026 06:11:50 +0000
ROA not before: Sun 04 Oct 2026 06:11:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211559
IP address blocks: 31.11.48.0/21 maxlen: 21
31.11.55.0/24 maxlen: 24
37.186.38.0/24 maxlen: 24
37.186.49.0/24 maxlen: 24
37.186.56.0/24 maxlen: 24
37.186.57.0/24 maxlen: 24
37.186.60.0/22 maxlen: 22
37.186.60.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.166.0/23 maxlen: 23
80.76.166.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/23 maxlen: 23
80.76.168.0/24 maxlen: 24
80.76.169.0/24 maxlen: 24
87.61.192.0/23 maxlen: 23
103.14.208.0/22 maxlen: 22
103.14.208.0/24 maxlen: 24
103.14.211.0/24 maxlen: 24
103.17.0.0/24 maxlen: 24
103.23.126.0/24 maxlen: 24
103.23.127.0/24 maxlen: 24
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
185.247.88.0/22 maxlen: 22
185.247.89.0/24 maxlen: 24
212.70.100.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.105.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
212.70.121.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.123.0/24 maxlen: 24
212.70.124.0/24 maxlen: 24
2a04:7f80:84::/48 maxlen: 48
2a04:7f80:85::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:8a:46:83:62:a6:e4:23:c6:4a:5d:c8:86:ab:23:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Oct 4 06:11:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45f37ffea7dfaae1b2e8997ea00af550bac34534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:f8:67:f1:54:3c:95:7d:ba:11:33:42:b8:
a4:88:f8:7a:f8:34:95:60:63:72:25:45:68:03:68:
21:05:12:71:d1:95:23:a2:73:3c:87:97:6b:9d:46:
9c:40:aa:4a:b4:6b:e4:e7:fb:07:4d:67:30:52:bc:
d4:33:05:f4:f6:79:d8:0f:0e:e4:0f:17:87:01:0c:
5a:a4:10:d9:0b:55:bd:8d:67:38:43:ce:64:b4:32:
ba:08:87:94:7f:46:dc:8c:5a:5c:53:d5:19:ca:7a:
7e:41:60:d8:98:4d:90:ed:ea:73:48:b5:fd:8a:21:
0a:d6:d7:b7:7e:fe:2a:ea:44:e7:e0:3a:0a:0b:cc:
dc:4e:d6:aa:71:02:3c:2d:94:91:8a:ea:e0:0b:82:
21:32:cd:d0:01:18:81:54:44:93:2a:e9:64:70:93:
84:46:79:67:8a:d4:e4:b9:23:c3:0d:5b:e8:de:09:
ed:89:77:48:74:2f:6a:fc:d4:90:95:28:54:55:15:
ec:e7:7c:dc:7a:e5:16:99:57:66:0e:28:66:61:6c:
57:29:36:8f:28:d2:d4:dd:25:72:8c:70:8e:0b:38:
70:72:de:ff:65:8e:ae:15:e5:b5:8b:c4:24:cd:5c:
6d:d6:a0:d5:ba:45:68:18:0c:17:ca:54:95:e8:56:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F3:7F:FE:A7:DF:AA:E1:B2:E8:99:7E:A0:0A:F5:50:BA:C3:45:34
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/RfN__qffquGy6Jl-oAr1ULrDRTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.38.0/24
37.186.49.0/24
37.186.56.0/23
37.186.60.0/22
80.76.165.0-80.76.169.255
87.61.192.0/23
103.14.208.0/22
103.17.0.0/24
103.23.126.0/23
103.225.72.0-103.225.74.255
185.247.88.0/22
212.70.100.0-212.70.105.255
212.70.109.0/24
212.70.120.0-212.70.124.255
IPv6:
2a04:7f80:84::/47
Signature Algorithm: sha256WithRSAEncryption
65:61:37:67:36:dd:a5:3c:0c:b4:1e:86:ea:37:fb:00:6b:10:
8e:c4:ca:09:d2:c7:6a:d9:5c:29:bb:b5:5e:b2:4d:96:48:7a:
42:da:b4:ab:4f:74:e7:78:9e:d0:a5:f8:e3:00:bc:9b:6b:62:
22:aa:aa:0a:19:10:d3:1c:91:df:36:38:9f:d4:a9:6a:08:13:
20:ca:19:3d:95:b5:2c:de:dd:6e:37:48:9d:fe:86:6c:f5:23:
d6:c8:9c:5b:99:83:ef:e4:f3:f0:0b:c7:da:1b:3b:63:b5:4c:
49:51:4d:cf:57:9b:76:02:58:3b:22:e3:eb:59:68:41:3e:58:
34:ab:5f:92:0f:af:39:f6:a6:dc:33:47:22:8d:9b:5d:1f:20:
41:9b:74:16:79:f5:5f:ea:0f:b2:58:ec:00:3b:9e:6c:60:f9:
b5:80:7d:4a:33:1d:7f:be:d3:98:87:8b:67:51:f9:22:c4:86:
07:34:18:81:42:a6:9e:91:11:55:2e:4b:3b:82:13:ca:20:99:
9e:f6:cd:ac:0b:95:f8:dd:92:96:f8:0f:b3:25:53:f7:f0:51:
e8:cb:14:db:57:9b:fa:4e:39:f1:bf:57:27:49:8a:d2:7a:0d:
65:c4:a0:24:50:5e:a4:3d:84:45:5a:90:5f:af:df:05:06:b7:
d3:be:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:26 2026 by rpki-client