Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/78k7N29pgqqBt_7SArx8W7gvbtY.roa
File: 78k7N29pgqqBt_7SArx8W7gvbtY.roa (raw, json)
Hash identifier: HchXuuENBfMJOEemaKoErz+AVozHGh2qeMU61xXBJBo=
Subject key identifier: EF:C9:3B:37:6F:69:82:AA:81:B7:FE:D2:02:BC:7C:5B:B8:2F:6E:D6
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01A0C2B531CC15D65B8893F14CA59C762EB9
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/78k7N29pgqqBt_7SArx8W7gvbtY.roa
Signing time: Mon 21 Sep 2026 06:44:09 +0000
ROA not before: Mon 21 Sep 2026 06:44:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202391
IP address blocks: 31.25.92.0/22 maxlen: 22
31.25.92.0/24 maxlen: 24
31.25.93.0/24 maxlen: 24
31.25.94.0/24 maxlen: 24
31.25.95.0/24 maxlen: 24
185.118.13.0/24 maxlen: 24
185.118.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:b5:31:cc:15:d6:5b:88:93:f1:4c:a5:9c:76:2e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Sep 21 06:44:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efc93b376f6982aa81b7fed202bc7c5bb82f6ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:8b:f4:ed:ac:0e:48:10:d5:cf:fc:8b:38:
f5:dc:04:b6:0c:f2:a2:9f:39:db:30:d5:7c:6e:23:
0a:85:62:62:16:26:5c:08:08:90:3a:ea:6c:bc:5d:
75:10:7a:7d:3a:4f:60:4f:6c:ae:2d:f8:b4:5f:90:
a7:b7:a8:b9:4d:ef:a7:66:49:4e:92:fb:bf:9c:4e:
78:59:97:3f:2b:46:66:13:28:95:9f:c0:c4:cb:b0:
fa:a1:5d:62:aa:6a:a2:02:43:a6:30:84:71:41:9d:
50:8b:d2:66:ab:64:e6:d9:6f:26:d1:7f:2d:c5:4f:
49:da:63:39:cf:f9:41:0e:ee:3c:e6:07:0f:01:70:
2e:8a:b2:64:36:2e:b3:61:8f:78:fa:c6:71:62:99:
7b:14:4d:f7:6c:c0:70:e0:19:23:42:ac:cb:6f:ff:
b1:4c:6b:66:f2:89:4c:6d:f8:72:73:a6:37:d7:f5:
9c:ce:e7:d7:68:28:03:9c:fa:03:ca:73:1e:f0:67:
a9:dd:f5:64:29:0a:5a:ff:b3:4e:29:52:97:95:65:
a2:ad:0b:e6:20:d7:34:a6:aa:d4:6d:97:cc:fc:88:
11:c6:05:fd:f4:3e:6e:8e:f6:26:6e:f7:9b:92:8f:
e6:bb:7d:23:24:6e:4d:75:8c:d0:df:fa:d0:61:e1:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C9:3B:37:6F:69:82:AA:81:B7:FE:D2:02:BC:7C:5B:B8:2F:6E:D6
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/78k7N29pgqqBt_7SArx8W7gvbtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.92.0/22
185.118.13.0-185.118.14.255
Signature Algorithm: sha256WithRSAEncryption
29:23:89:82:e0:73:2d:5a:83:30:48:5f:37:dd:f8:21:a3:e8:
62:7f:41:57:ed:8a:d3:89:8e:3f:07:0a:2d:9b:9f:50:29:46:
3e:53:d7:2b:c3:07:3c:b8:28:1e:4e:80:44:24:bb:15:0e:8e:
18:69:02:98:68:3c:3f:a3:d8:b5:f3:54:41:d0:a4:ea:06:54:
61:5e:30:af:27:3f:43:e5:c4:0e:d7:7a:28:83:15:d1:68:33:
b2:f2:ba:a6:64:cc:6d:e1:dc:e2:54:74:e5:ba:73:1e:56:ac:
f0:92:93:27:57:82:83:fe:85:e1:f9:29:19:3f:0b:ab:e4:f9:
d6:f4:7a:05:cd:41:79:f5:70:a4:91:b2:9a:85:ec:76:75:46:
0a:d8:5e:2b:39:1d:a9:8e:fc:7c:95:ab:60:06:da:e9:fc:7a:
37:85:90:23:c2:6b:ac:53:37:9e:09:57:4e:4c:88:c9:8b:14:
cb:2c:0c:05:bb:6e:8b:f1:78:36:57:9d:66:f7:ac:22:36:41:
77:ae:93:22:91:2c:2d:de:fe:04:b5:8f:6f:f3:e3:af:da:33:
8b:12:53:94:d1:ef:9b:e4:03:df:0e:cf:82:11:42:83:4e:d5:
a5:fb:2b:18:19:75:54:5d:b3:55:0f:89:6d:20:47:be:25:1c:
b2:c7:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:59:01 2026 by rpki-client