Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/vxSqdv48X8WdmWmETmDsRXRMplY.roa
File: vxSqdv48X8WdmWmETmDsRXRMplY.roa (raw, json)
Hash identifier: nBJA73qmFTOHwZPmfsBkJJmaAYUprigjdf6qVQX64x8=
Subject key identifier: BF:14:AA:76:FE:3C:5F:C5:9D:99:69:84:4E:60:EC:45:74:4C:A6:56
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 01A1CB07109DAA6643622E0448EF5BDF0401
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/vxSqdv48X8WdmWmETmDsRXRMplY.roa
Signing time: Wed 11 Nov 2026 14:33:20 +0000
ROA not before: Wed 11 Nov 2026 14:33:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.79.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.84.0/24 maxlen: 24
31.169.85.0/24 maxlen: 24
31.169.87.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
2a00:5740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:07:10:9d:aa:66:43:62:2e:04:48:ef:5b:df:04:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Nov 11 14:33:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf14aa76fe3c5fc59d9969844e60ec45744ca656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:18:ae:37:29:63:3c:15:4c:ac:6b:50:ae:
b7:34:11:f4:5b:2b:95:82:4b:25:22:d2:ca:2d:93:
23:2b:dc:b8:a4:82:03:e5:06:c8:ec:1d:21:a9:63:
92:2d:da:b0:82:a2:3d:76:8a:d0:60:76:dd:fe:21:
aa:d5:b3:7f:c1:4f:2f:56:05:c8:6e:0b:1b:c5:85:
9f:ae:3a:3b:52:2f:80:52:31:b6:46:a3:68:ab:78:
62:77:59:77:59:20:86:ff:0b:a4:7e:d1:5d:0c:5a:
40:f0:84:18:60:3a:61:fc:a5:94:de:9a:13:d6:a3:
de:42:61:d8:88:57:46:9c:7a:fc:5c:b3:20:ae:ef:
b0:79:94:bb:1f:28:78:02:ba:9b:8e:27:9c:f7:2d:
7b:41:5e:8a:14:63:50:69:50:ec:d1:48:98:bf:db:
b0:58:a2:a7:22:8b:a7:75:d3:b5:2e:e4:91:ed:ac:
d1:c5:21:aa:1d:d7:a9:91:fe:4f:7e:3a:fa:e1:11:
93:21:51:bf:3e:8f:82:d8:2e:96:52:85:3d:e8:fc:
d4:ac:f0:5f:53:fe:7d:f5:0d:ee:39:7c:bc:33:5f:
a1:da:a5:e7:fd:10:02:c4:7a:ad:a5:64:e6:4b:b1:
32:37:ac:c7:34:d0:de:77:e6:4c:37:49:c2:1f:dd:
77:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:14:AA:76:FE:3C:5F:C5:9D:99:69:84:4E:60:EC:45:74:4C:A6:56
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/vxSqdv48X8WdmWmETmDsRXRMplY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.77.0-31.169.79.255
31.169.81.0-31.169.82.255
31.169.84.0/23
31.169.87.0/24
31.169.90.0/24
31.169.92.0/22
185.33.63.0/24
IPv6:
2a00:5740::/29
Signature Algorithm: sha256WithRSAEncryption
7d:d3:5a:1a:09:88:2d:4c:08:05:5a:71:89:10:c7:97:ea:2a:
68:68:c1:5f:80:69:32:c1:bf:8a:db:79:9a:70:b5:6e:8f:80:
a1:fa:84:95:de:57:72:20:2f:05:8f:ce:01:94:0e:66:44:ca:
51:6d:b5:a1:76:b7:67:96:f8:51:48:45:5b:92:5d:0f:7d:f2:
46:b5:b2:ca:71:2d:e0:00:29:0d:93:a6:26:91:f8:dd:06:2b:
6b:1f:fe:62:7f:65:da:06:28:85:65:59:ea:87:66:8a:0f:6f:
e3:94:e1:b2:4c:fd:5e:7e:d2:12:a8:a8:98:b8:70:c6:cf:d8:
41:84:8e:3f:06:b7:52:8a:d2:16:c2:cd:13:20:55:f5:1d:ad:
b4:e1:e2:f5:1c:25:e1:c8:e5:a6:71:ac:8f:ea:e4:90:08:d3:
16:d7:68:3d:4e:05:46:06:20:b1:96:45:a2:bd:81:e3:a4:71:
0b:bb:b5:87:a6:f2:95:5f:51:c2:14:9a:9d:72:2b:5e:3a:d8:
1d:50:e4:80:dd:8a:df:57:49:da:49:47:51:17:4a:94:1d:7c:
5c:18:e2:f9:da:8e:e7:03:2e:23:37:bd:e3:02:56:68:d4:a2:
8c:d9:64:5b:db:40:41:e9:99:6c:73:b4:bc:89:af:2f:b5:5f:
c4:ee:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:51:26 2026 by rpki-client