Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/s9k0K6aJjOStyADPW-j4DrCiTzQ.roa
File: s9k0K6aJjOStyADPW-j4DrCiTzQ.roa (raw, json)
Hash identifier: aKe5eq+hv5FKwLnkRuiYsTzEG/OXN64m5QzBhcI3+lU=
Subject key identifier: B3:D9:34:2B:A6:89:8C:E4:AD:C8:00:CF:5B:E8:F8:0E:B0:A2:4F:34
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 019C33DF390EBB2A8071AA485C361984381E
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/s9k0K6aJjOStyADPW-j4DrCiTzQ.roa
Signing time: Fri 06 Feb 2026 16:53:12 +0000
ROA not before: Fri 06 Feb 2026 16:53:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30860
IP address blocks: 31.42.184.0/23 maxlen: 23
31.42.186.0/24 maxlen: 24
31.42.187.0/24 maxlen: 24
45.11.56.0/24 maxlen: 24
45.11.57.0/24 maxlen: 24
45.11.58.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
45.12.0.0/22 maxlen: 24
45.12.1.0/24 maxlen: 24
45.12.2.0/24 maxlen: 24
45.12.3.0/24 maxlen: 24
45.134.172.0/22 maxlen: 24
45.134.173.0/24 maxlen: 24
62.182.80.0/23 maxlen: 23
62.182.82.0/23 maxlen: 23
62.182.84.0/24 maxlen: 24
62.182.85.0/24 maxlen: 24
62.182.86.0/24 maxlen: 24
62.182.87.0/24 maxlen: 24
91.208.115.0/24 maxlen: 24
95.214.232.0/24 maxlen: 24
95.214.233.0/24 maxlen: 24
95.214.234.0/23 maxlen: 23
152.89.60.0/24 maxlen: 24
152.89.61.0/24 maxlen: 24
152.89.62.0/24 maxlen: 24
152.89.63.0/24 maxlen: 24
176.97.112.0/20 maxlen: 24
176.97.114.0/24 maxlen: 24
176.97.124.0/24 maxlen: 24
176.119.24.0/24 maxlen: 24
176.119.25.0/24 maxlen: 24
176.119.26.0/23 maxlen: 23
176.119.26.0/24 maxlen: 24
176.119.27.0/24 maxlen: 24
176.119.28.0/24 maxlen: 24
176.119.29.0/24 maxlen: 24
176.119.30.0/24 maxlen: 24
176.119.31.0/24 maxlen: 24
185.66.88.0/23 maxlen: 23
185.66.90.0/24 maxlen: 24
185.66.91.0/24 maxlen: 24
185.254.196.0/23 maxlen: 23
185.254.198.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
193.23.181.0/24 maxlen: 24
194.42.204.0/22 maxlen: 24
194.42.205.0/24 maxlen: 24
195.66.210.0/24 maxlen: 24
195.66.214.0/23 maxlen: 24
2a09:2dc0::/29 maxlen: 29
2a09:2dc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:33:df:39:0e:bb:2a:80:71:aa:48:5c:36:19:84:38:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Feb 6 16:53:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3d9342ba6898ce4adc800cf5be8f80eb0a24f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:97:b2:48:fc:c4:05:47:0d:b0:df:e3:16:b8:
0f:06:b2:22:41:a7:d6:05:7b:44:45:6b:56:51:e3:
4c:c4:f8:da:93:8b:22:6f:ab:5f:94:38:ab:6d:95:
e8:d6:e7:39:63:77:d4:f0:a3:a6:fe:77:62:aa:d9:
a4:ed:f1:ef:12:5d:18:a8:9c:70:d2:8b:83:4b:c9:
f2:eb:44:ac:5f:4e:d8:11:24:65:f2:b9:e3:40:8d:
b9:e1:71:26:fd:40:12:89:b8:c1:58:72:ae:b2:be:
80:8a:c3:f0:86:8f:a7:7e:bc:23:b5:c5:17:d3:aa:
a6:1a:53:ca:14:05:55:c6:ca:65:53:53:a5:0e:39:
a8:e8:88:67:da:d5:92:15:a4:06:1c:32:f1:4d:29:
c7:b7:55:46:f8:9c:92:dc:0b:d9:8c:d3:ed:11:61:
c1:cb:c7:32:a0:90:1c:a4:83:24:97:a8:12:67:f3:
f7:12:f2:b1:7a:e4:16:65:b9:88:ab:94:29:77:49:
9a:4b:6e:a7:3a:f1:f2:95:a1:23:43:03:ae:c0:ba:
74:7c:1d:60:13:89:14:f3:76:c5:1a:a6:62:1f:73:
6c:27:a8:26:92:af:87:b9:50:53:b4:33:d0:29:32:
f0:2a:33:4d:a2:b7:ca:d6:ea:0c:3c:c5:2e:e1:6f:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D9:34:2B:A6:89:8C:E4:AD:C8:00:CF:5B:E8:F8:0E:B0:A2:4F:34
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/s9k0K6aJjOStyADPW-j4DrCiTzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.184.0/22
45.11.56.0/22
45.12.0.0/22
45.134.172.0/22
62.182.80.0/21
91.208.115.0/24
95.214.232.0/22
152.89.60.0/22
176.97.112.0/20
176.119.24.0/21
185.66.88.0/22
185.254.196.0/22
193.23.181.0/24
194.42.204.0/22
195.66.210.0/24
195.66.214.0/23
IPv6:
2a09:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
85:70:c3:6c:c2:ed:bd:13:f7:d2:9c:ef:a3:86:c4:6f:01:60:
69:be:6f:b9:da:67:33:77:60:10:b3:3d:c3:04:d9:cf:e8:6b:
2e:be:0c:ac:4f:90:61:80:ea:02:98:56:98:97:43:49:fd:85:
92:42:4f:0a:88:d5:b2:a0:1d:ef:cf:df:3f:3a:c3:e1:f5:9e:
40:81:79:7e:ad:31:7e:22:bb:b7:16:67:bb:67:09:4b:b0:c8:
1f:69:61:d2:f8:fc:89:31:db:ba:b8:59:78:bb:e1:4e:1f:ab:
85:79:88:01:94:c1:4e:ff:33:13:56:63:d1:70:bf:b6:fb:34:
6d:4f:1c:89:2f:c7:09:ff:b4:d8:05:9b:69:b8:11:28:69:f6:
91:8d:f5:26:ab:34:cd:f7:91:7b:d2:92:70:e0:c9:01:9f:65:
b7:c2:8f:d5:84:a0:3e:13:68:9a:60:a7:b5:70:66:f4:c6:dc:
19:e0:ec:78:aa:ab:c8:d1:26:e5:49:dc:7b:74:fe:51:bd:bf:
b3:e0:ef:ab:7f:97:73:af:21:33:80:c3:e5:09:6e:76:d7:46:
7e:46:72:af:b0:6f:8e:01:e4:84:e3:cc:a3:2b:7b:d8:41:91:
44:80:75:3d:96:aa:2f:26:40:ac:3b:5e:e9:b8:1b:cd:1c:b5:
35:85:1a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:13 2026 by rpki-client