Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/SdgpFGGLNOpyuJ9pUq-ISYnzn4I.roa
File: SdgpFGGLNOpyuJ9pUq-ISYnzn4I.roa (raw, json)
Hash identifier: Hf8LYx/xiTjwePK0BFELGOeJyS6c95X3LSkrmw3EoHE=
Subject key identifier: 49:D8:29:14:61:8B:34:EA:72:B8:9F:69:52:AF:88:49:89:F3:9F:82
Certificate issuer: /CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Certificate serial: 01A0BDF3809C9FDD9F9C8797BE75996C893F
Authority key identifier: 98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/SdgpFGGLNOpyuJ9pUq-ISYnzn4I.roa
Signing time: Sun 20 Sep 2026 08:34:07 +0000
ROA not before: Sun 20 Sep 2026 08:34:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50810
IP address blocks: 31.40.0.0/21 maxlen: 21
31.40.0.0/24 maxlen: 24
31.40.1.0/24 maxlen: 24
31.40.2.0/24 maxlen: 24
31.40.3.0/24 maxlen: 24
31.40.4.0/22 maxlen: 22
31.40.4.0/24 maxlen: 24
31.40.5.0/24 maxlen: 24
31.40.6.0/24 maxlen: 24
31.40.7.0/24 maxlen: 24
91.206.177.0/24 maxlen: 24
92.51.56.0/21 maxlen: 21
153.51.0.0/19 maxlen: 19
153.51.0.0/22 maxlen: 22
153.51.128.0/19 maxlen: 19
185.163.216.0/22 maxlen: 22
185.172.72.0/22 maxlen: 22
185.206.236.0/22 maxlen: 22
185.213.200.0/22 maxlen: 22
185.254.108.0/22 maxlen: 22
193.37.38.0/24 maxlen: 24
194.5.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:f3:80:9c:9f:dd:9f:9c:87:97:be:75:99:6c:89:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Validity
Not Before: Sep 20 08:34:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49d82914618b34ea72b89f6952af884989f39f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:a8:71:5e:da:ff:44:1d:2c:c7:6e:da:41:
3d:e8:ad:d0:d6:a0:fa:4b:25:24:ee:72:e6:35:66:
fc:df:4c:75:25:f2:8b:d0:ec:80:d0:6f:18:d8:33:
11:f0:93:e1:6f:cb:5a:f6:a2:e5:0e:8a:44:08:03:
2e:0d:ce:20:69:ba:4d:5d:0e:79:a6:03:8a:97:ed:
50:4c:ca:25:a3:33:49:0d:9d:0a:fd:87:20:91:a8:
d4:54:7d:0d:19:c8:37:1d:c1:5a:55:6a:e4:b3:ef:
11:f9:be:55:3a:ea:3e:a8:a1:a6:72:73:27:04:30:
a4:7a:c2:24:4d:dc:aa:54:4f:b5:61:4f:02:59:e3:
14:25:bf:1a:10:64:fb:29:e0:9d:09:32:a2:bd:0c:
bf:a9:ce:e2:2c:a6:b0:ee:70:8b:16:71:ba:74:a8:
d6:c1:17:59:9c:6f:56:0e:3d:3d:eb:1a:07:43:65:
ad:bc:9d:1c:a9:16:86:c2:08:3c:80:a9:bc:c6:ac:
ed:34:9e:7e:8d:84:04:99:e6:99:8f:74:31:19:0b:
9b:a3:d3:38:00:dc:a5:99:59:d4:f8:bd:d7:aa:c6:
34:6e:66:63:17:f6:5d:02:07:19:d8:1e:88:c0:a1:
67:95:ab:c9:56:f8:57:a7:d4:c7:0e:e2:cb:c5:5f:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D8:29:14:61:8B:34:EA:72:B8:9F:69:52:AF:88:49:89:F3:9F:82
X509v3 Authority Key Identifier:
keyid:98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/SdgpFGGLNOpyuJ9pUq-ISYnzn4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.0.0/21
91.206.177.0/24
92.51.56.0/21
153.51.0.0/19
153.51.128.0/19
185.163.216.0/22
185.172.72.0/22
185.206.236.0/22
185.213.200.0/22
185.254.108.0/22
193.37.38.0/24
194.5.16.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a0:96:c1:88:8a:a1:a2:be:b6:f6:54:ff:1d:43:ab:42:c3:
0a:af:4d:d4:0d:0e:c0:d8:9d:ce:17:08:98:19:eb:f0:ea:c5:
09:7b:c0:a6:14:5e:d5:eb:1e:1a:a1:42:b7:e4:6a:48:77:8e:
90:f7:70:54:4d:7a:cc:18:36:46:b1:8a:d1:72:12:91:95:55:
39:64:eb:c8:dd:42:50:c2:25:cb:29:61:21:63:c1:5a:6e:42:
74:7e:12:27:85:da:bd:db:b2:c1:b8:f5:0a:37:1d:8a:cd:39:
49:8f:2d:1a:e7:4c:41:5d:17:0d:1d:d5:91:c3:10:30:4f:8b:
ed:0d:08:e6:9e:64:dc:51:be:c4:ba:36:89:8e:24:c1:ff:ea:
37:28:6f:98:ff:ec:5b:02:b9:f6:19:ee:74:f0:29:a6:c0:f7:
f2:00:4e:14:4b:94:ff:34:9e:dd:28:ae:b3:a4:6c:12:01:dd:
a4:cb:09:22:19:17:09:2c:01:a0:c4:96:e8:e6:b1:43:38:6f:
27:29:51:8a:be:8e:92:a6:d7:f5:e0:1b:e7:f3:a2:d1:83:2f:
13:27:b5:29:7e:cd:1e:08:0e:6b:cf:12:52:c2:1c:f3:46:04:
f7:b5:1e:3a:a4:9b:00:8c:ec:b5:f0:3b:7d:41:8c:23:e3:54:
d8:7e:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:02:16 2026 by rpki-client