Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BeDIOJSJz2VNKED-pOjeG5vy6zo.roa
File: BeDIOJSJz2VNKED-pOjeG5vy6zo.roa (raw, json)
Hash identifier: UFSR0Fw4SwT4Y9Yu5QM9T6U8DyzmjyrwoVZ/RlED4nM=
Subject key identifier: 05:E0:C8:38:94:89:CF:65:4D:28:40:FE:A4:E8:DE:1B:9B:F2:EB:3A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D66427F17ECD757482132A339404404A7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BeDIOJSJz2VNKED-pOjeG5vy6zo.roa
Signing time: Tue 07 Apr 2026 04:45:27 +0000
ROA not before: Tue 07 Apr 2026 04:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151612
IP address blocks: 31.13.224.0/24 maxlen: 24
31.13.231.0/24 maxlen: 24
81.161.230.0/24 maxlen: 24
87.120.89.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 11:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:42:7f:17:ec:d7:57:48:21:32:a3:39:40:44:04:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 7 04:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05e0c8389489cf654d2840fea4e8de1b9bf2eb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:62:f2:cd:42:9b:6c:47:07:fa:10:34:1c:
c3:89:0d:77:17:21:bd:a5:39:dd:f9:fc:f9:50:2a:
97:8e:62:b1:b6:5a:12:da:a1:a4:9c:61:a8:d6:c1:
4e:ad:8f:ca:12:24:b2:ee:2f:1b:32:39:75:72:27:
1a:4a:73:4a:23:24:61:d5:e9:7e:72:e3:49:96:cb:
9e:ed:22:90:b6:eb:18:b3:b0:36:11:ea:e6:49:74:
d1:87:ce:4d:25:e1:fd:65:f0:2f:8d:df:d9:13:44:
9c:cf:0b:d6:8e:73:15:2a:ca:b4:9e:a7:59:f3:3b:
6d:75:c4:a7:56:c3:56:5c:b7:19:ab:09:37:e6:96:
a5:d9:39:ca:24:b7:9d:79:9e:c0:d5:87:c6:4b:f3:
ae:88:f7:3c:81:cd:c5:2a:aa:de:4c:ff:85:44:3e:
ed:5d:b4:99:47:82:d1:44:1f:65:44:32:13:d1:d5:
96:f5:f4:5c:9f:1d:d2:8c:82:00:bc:db:a6:c3:f5:
0f:b1:eb:23:46:ab:14:5d:31:56:4d:74:12:c9:1c:
3a:cb:51:74:4f:72:87:09:b4:0f:21:c9:9e:63:0c:
e4:ae:f4:6e:0f:bd:d1:b5:c8:e9:cf:33:32:0c:ad:
5c:19:9f:36:33:04:ce:9b:96:43:19:8c:71:7d:a6:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E0:C8:38:94:89:CF:65:4D:28:40:FE:A4:E8:DE:1B:9B:F2:EB:3A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BeDIOJSJz2VNKED-pOjeG5vy6zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
31.13.231.0/24
81.161.230.0/24
87.120.89.0/24
193.37.47.0/24
Signature Algorithm: sha256WithRSAEncryption
30:cd:fb:d5:e6:7f:3c:1f:94:62:8a:ba:51:d6:92:ca:88:72:
7a:f9:40:1a:8b:52:11:6f:fb:0d:d7:f7:b6:1b:a7:6e:f8:53:
1d:d8:25:4d:bf:e0:95:7f:cd:57:35:d0:2c:d9:6a:b7:05:bc:
ce:06:6d:72:a2:73:fc:5f:a2:0e:3d:bf:76:8b:34:44:d9:d4:
b4:89:ce:48:33:cb:09:4f:67:44:0f:ce:bb:2f:76:8b:ed:c6:
0f:a8:d2:be:3b:0c:48:7a:5a:f0:ad:7a:d0:d2:61:a8:fe:da:
e3:e9:f0:5c:90:6e:71:ff:49:6c:e8:58:de:67:ad:51:f6:55:
3b:33:6e:5d:fd:aa:0d:5b:6e:84:ee:50:08:77:e5:4d:c2:d6:
7e:71:7f:cc:52:21:78:45:e8:be:e9:19:0d:80:3a:cd:90:bc:
d8:b0:bc:11:67:09:2f:3d:a0:c1:22:66:f4:f7:ce:2b:c0:8f:
ff:18:28:54:85:d9:fd:6c:64:85:fc:94:bc:5d:28:04:b2:54:
44:b6:b2:c8:62:c4:ed:f4:98:38:56:22:5a:36:5f:b7:b7:63:
be:cd:0b:2b:e5:65:75:0b:a7:45:49:03:1f:ee:8c:4f:22:4d:
8b:80:e7:98:63:8b:80:09:0d:79:9d:d7:ad:b8:07:41:86:63:
e2:45:26:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:27:31 2026 by rpki-client