Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/suxAld0eLCOMHsl_sLkjVKo7KkM.roa
File: suxAld0eLCOMHsl_sLkjVKo7KkM.roa (raw, json)
Hash identifier: R5brUZBQQ1qEtVF7VhLeGcz1HOKovt9yr4Mr8Yt/ia8=
Subject key identifier: B2:EC:40:95:DD:1E:2C:23:8C:1E:C9:7F:B0:B9:23:54:AA:3B:2A:43
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 019D3EFA3346A9ED5555B50497E57B7A3D80
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/suxAld0eLCOMHsl_sLkjVKo7KkM.roa
Signing time: Mon 30 Mar 2026 13:41:17 +0000
ROA not before: Mon 30 Mar 2026 13:41:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39494
IP address blocks: 31.177.72.0/22 maxlen: 22
31.177.76.0/23 maxlen: 23
31.177.80.0/23 maxlen: 23
31.177.84.0/23 maxlen: 23
31.177.85.0/24 maxlen: 24
31.177.86.0/23 maxlen: 24
31.177.88.0/24 maxlen: 24
31.177.89.0/24 maxlen: 24
31.177.90.0/24 maxlen: 24
77.222.33.0/24 maxlen: 24
77.222.34.0/24 maxlen: 24
79.174.64.0/21 maxlen: 21
79.174.72.0/22 maxlen: 22
79.174.76.0/24 maxlen: 24
80.93.56.0/22 maxlen: 22
89.104.64.0/19 maxlen: 19
89.104.76.0/24 maxlen: 24
89.104.78.0/23 maxlen: 23
89.111.128.0/18 maxlen: 18
89.111.128.0/20 maxlen: 20
89.111.144.0/20 maxlen: 20
89.111.160.0/20 maxlen: 24
89.111.162.0/23 maxlen: 23
89.111.164.0/22 maxlen: 22
89.111.176.0/20 maxlen: 20
89.111.176.0/22 maxlen: 22
89.111.177.0/24 maxlen: 24
91.217.21.0/24 maxlen: 24
2a01:d8::/32 maxlen: 48
2a02:2090::/32 maxlen: 48
2a02:2090:e400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:fa:33:46:a9:ed:55:55:b5:04:97:e5:7b:7a:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Mar 30 13:41:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2ec4095dd1e2c238c1ec97fb0b92354aa3b2a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:ff:74:56:b3:3e:ab:fe:91:f8:12:0c:96:
20:8c:83:39:c7:9d:3a:b9:d4:fa:e9:df:53:13:66:
8d:81:74:57:97:45:d1:60:63:52:c1:d3:76:4d:b1:
dd:48:84:d2:0a:2e:e7:da:5c:9f:e7:b1:bb:dc:40:
b0:36:99:dc:ed:9f:aa:fa:45:05:f7:be:ae:82:b9:
ba:37:fc:0a:94:f8:f3:db:e8:62:d5:de:15:b3:35:
bc:67:91:b1:37:e6:0b:1c:ea:88:52:57:09:03:f6:
4a:89:0a:95:a2:b1:cb:ce:8d:0c:76:bd:53:2c:31:
e4:a4:7d:1b:ba:ee:e1:36:a6:55:12:2b:8a:48:1c:
f0:47:de:9e:32:e3:e8:77:70:d2:dd:b2:d8:30:e5:
f1:45:f8:94:fb:a4:08:20:c2:df:d4:53:e7:18:51:
69:d6:ef:e2:19:a5:57:b5:6d:cd:0e:9f:3b:98:2d:
59:12:35:21:a4:34:e4:ce:de:07:98:a8:ac:a8:07:
76:c4:ba:78:35:e2:5c:99:a9:e8:82:65:05:c2:8c:
f7:a2:ac:76:6d:6f:0e:00:e9:f6:9b:c2:70:68:12:
4f:18:da:29:e6:8c:3e:05:e3:24:61:a6:72:55:19:
7e:f1:a5:a1:21:e4:ca:96:31:64:75:c7:4a:74:9f:
61:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EC:40:95:DD:1E:2C:23:8C:1E:C9:7F:B0:B9:23:54:AA:3B:2A:43
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/suxAld0eLCOMHsl_sLkjVKo7KkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.72.0-31.177.77.255
31.177.80.0/23
31.177.84.0-31.177.90.255
77.222.33.0-77.222.34.255
79.174.64.0-79.174.76.255
80.93.56.0/22
89.104.64.0/19
89.111.128.0/18
91.217.21.0/24
IPv6:
2a01:d8::/32
2a02:2090::/32
Signature Algorithm: sha256WithRSAEncryption
a2:f4:26:62:22:0f:fb:b6:8c:2d:d2:fb:ff:fc:e6:9f:31:a4:
bc:97:e3:5c:19:f4:a3:cc:81:59:9a:0e:fc:d0:7a:05:80:81:
40:c8:3d:6a:93:86:19:16:4d:72:78:03:13:32:49:14:8a:ae:
3d:f4:cb:44:fd:09:b3:b7:a0:0b:36:d4:3a:53:2b:12:56:7b:
c3:07:c5:ca:18:5a:71:57:73:d9:20:b5:91:ca:f0:06:e4:af:
84:5d:11:b1:ff:56:1f:8d:c9:1d:ef:e5:68:76:89:16:e4:32:
90:d5:7e:45:2c:5c:47:3a:cc:82:46:0f:c3:01:b0:10:52:db:
64:a5:bf:e4:4b:de:8f:a5:6b:61:74:72:2a:a0:1f:3a:4b:4d:
e3:9f:71:1d:0b:97:54:06:32:2b:5b:a3:b5:6f:c9:30:56:eb:
d8:07:3d:25:84:5f:56:68:29:3f:c6:46:97:eb:b0:02:4c:5e:
ce:87:be:0b:a4:e3:2c:c7:6b:04:58:fa:95:c5:f7:6d:9e:6a:
67:0c:8f:59:c6:9a:c8:df:65:90:a1:d6:00:aa:28:24:8f:7b:
a7:76:03:ce:9b:d6:b0:09:23:51:e1:2f:fa:22:f9:6f:87:82:
72:4d:8e:1b:2e:c2:a8:4c:bf:0a:b4:56:ce:c4:8b:0e:3a:3a:
53:58:e0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:42:35 2026 by rpki-client