Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AxpKkk9kEHhMLePkVuKkfyJyyhk.roa
File: AxpKkk9kEHhMLePkVuKkfyJyyhk.roa (raw, json)
Hash identifier: JPKKAyD8WsOrjY+p68fSFLx8hRM76cgbqa1FGQz4g9M=
Subject key identifier: 03:1A:4A:92:4F:64:10:78:4C:2D:E3:E4:56:E2:A4:7F:22:72:CA:19
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0FCB5D8BADB374CDADDA8A6135665CC8B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AxpKkk9kEHhMLePkVuKkfyJyyhk.roa
Signing time: Fri 02 Oct 2026 13:02:50 +0000
ROA not before: Fri 02 Oct 2026 13:02:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201269
IP address blocks: 31.57.217.0/24 maxlen: 24
31.59.195.0/24 maxlen: 24
94.183.245.0/24 maxlen: 24
94.183.247.0/24 maxlen: 24
217.60.188.0/24 maxlen: 24
217.60.189.0/24 maxlen: 24
217.60.190.0/24 maxlen: 24
217.60.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:b5:d8:ba:db:37:4c:da:dd:a8:a6:13:56:65:cc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 2 13:02:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=031a4a924f6410784c2de3e456e2a47f2272ca19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:1c:40:b1:1a:b3:19:19:51:8a:f9:b8:17:
84:a3:b1:b3:91:61:6b:b6:7c:74:2a:85:b7:c5:2b:
86:d0:dc:43:ff:de:6d:b3:63:7d:ca:4e:b3:d8:1a:
77:6e:33:36:3e:32:ed:22:70:9b:7f:01:f0:3b:b0:
4e:19:40:c1:62:b5:fc:f9:19:82:61:f0:40:d3:bf:
ad:46:20:51:a0:5b:1f:29:83:db:c1:3a:2f:b0:8e:
2f:00:67:e7:8a:c4:22:21:73:1c:09:3e:32:57:60:
d1:ae:0d:81:98:cb:7e:ab:86:b4:83:49:dd:57:37:
fd:0e:c1:03:6f:08:57:1a:be:7c:23:04:67:bd:cc:
8f:0b:41:d0:12:1b:08:26:24:c8:ee:35:7e:db:03:
0b:e6:66:f8:f5:1c:dd:09:d7:a9:85:e8:40:79:a5:
91:7f:6d:65:de:02:1b:ee:09:5b:79:b1:ef:95:10:
fd:80:cf:ec:c4:60:c3:82:63:73:7b:79:be:21:dd:
d6:0f:28:64:e1:04:ef:9c:8d:a2:d2:49:3a:ae:5c:
9e:9d:97:9f:f9:72:2b:fa:51:b2:fb:36:64:ec:bd:
97:26:ea:18:a3:b6:71:d8:35:0a:d3:d6:b7:c5:96:
dc:0e:92:57:b2:3c:fa:ba:4e:82:1c:29:27:c6:b9:
e9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1A:4A:92:4F:64:10:78:4C:2D:E3:E4:56:E2:A4:7F:22:72:CA:19
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AxpKkk9kEHhMLePkVuKkfyJyyhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.217.0/24
31.59.195.0/24
94.183.245.0/24
94.183.247.0/24
217.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
33:62:50:03:3d:75:1f:2d:f4:64:9c:64:c6:94:be:28:bd:c6:
21:89:68:47:e2:0f:21:93:20:ea:e9:6a:e8:77:01:77:21:8d:
c0:71:72:38:31:b6:fd:dd:da:9c:07:1c:ba:ec:05:85:7d:a5:
1d:19:23:7b:a2:5d:d2:d1:12:52:e6:b0:2a:b4:a4:0e:5e:37:
1d:39:90:62:fe:12:dd:ac:3c:a5:96:52:38:d2:20:19:04:9d:
ed:bb:00:88:b9:08:89:c7:60:47:88:8e:19:1f:c0:28:15:e2:
cf:f3:05:3b:5f:ab:0f:53:ec:a8:2a:61:55:76:46:b6:6b:82:
07:a3:3d:48:76:a7:0f:d5:e8:e8:16:d7:ed:95:2d:af:02:00:
0d:81:c1:50:b7:8a:f7:81:3e:6e:8c:52:c7:f3:9a:f8:42:2a:
ba:3a:69:b9:9d:82:a9:d4:50:25:1a:06:93:2f:91:ff:f5:d4:
bf:ad:5f:3b:ea:f2:f2:8a:ba:46:9c:45:03:f2:1d:84:7e:5c:
6f:3d:fe:3b:c5:7f:ec:92:33:6e:87:47:5d:e7:8f:01:ca:2c:
8f:45:eb:1a:4b:5c:8b:dd:a0:6c:1f:10:7c:17:f4:b0:91:06:
e8:18:d0:3e:80:25:7a:bf:e2:87:a8:ff:41:be:ef:b0:32:87:
09:ec:b1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:34:03 2026 by rpki-client