Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/xhEpzuzPdr7FtKXm7Ee8F2PUMuM.roa
File: xhEpzuzPdr7FtKXm7Ee8F2PUMuM.roa (raw, json)
Hash identifier: ZZQLbsx4gzi8cJrXW6oszW6wVIFBCSGts3XsIhFjyzo=
Subject key identifier: C6:11:29:CE:EC:CF:76:BE:C5:B4:A5:E6:EC:47:BC:17:63:D4:32:E3
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 01A134D2B0164155C7483764C58BACEB8F82
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/xhEpzuzPdr7FtKXm7Ee8F2PUMuM.roa
Signing time: Tue 13 Oct 2026 10:33:05 +0000
ROA not before: Tue 13 Oct 2026 10:33:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56547
IP address blocks: 31.24.232.0/21 maxlen: 21
31.24.232.0/22 maxlen: 22
31.24.232.0/24 maxlen: 24
31.24.233.0/24 maxlen: 24
31.24.234.0/24 maxlen: 24
31.24.235.0/24 maxlen: 24
31.24.236.0/22 maxlen: 22
31.24.236.0/24 maxlen: 24
31.24.237.0/24 maxlen: 24
31.24.238.0/24 maxlen: 24
31.24.239.0/24 maxlen: 24
185.69.108.0/22 maxlen: 22
185.69.108.0/23 maxlen: 23
185.69.108.0/24 maxlen: 24
185.69.109.0/24 maxlen: 24
185.69.110.0/23 maxlen: 23
185.69.110.0/24 maxlen: 24
185.69.111.0/24 maxlen: 24
185.76.248.0/22 maxlen: 22
185.76.248.0/23 maxlen: 23
185.76.248.0/24 maxlen: 24
185.76.249.0/24 maxlen: 24
185.76.250.0/23 maxlen: 23
185.76.250.0/24 maxlen: 24
185.76.251.0/24 maxlen: 24
2a03:2f20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:d2:b0:16:41:55:c7:48:37:64:c5:8b:ac:eb:8f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Oct 13 10:33:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c61129ceeccf76bec5b4a5e6ec47bc1763d432e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:0d:75:58:96:06:ef:a0:59:ab:4c:c9:16:
7c:ff:e2:04:f7:c7:e1:90:b7:44:e9:43:70:73:d0:
7a:45:9b:9b:c8:21:37:dd:4d:71:56:c0:55:f8:1a:
3b:16:d6:db:e5:80:c7:2a:03:ec:d5:bf:de:a8:65:
3d:d4:8b:39:18:f7:0f:b9:7f:87:86:7b:7b:a2:8f:
01:28:09:75:f3:5b:d3:16:09:d0:77:1b:9e:c4:ff:
f6:1c:ca:55:68:0a:7d:18:c3:91:e6:d9:1a:db:9b:
12:37:d8:e6:47:2e:af:f1:3a:5e:5e:8e:50:e8:71:
73:21:40:5b:ab:43:17:e5:d3:7a:bd:a6:6c:6f:28:
28:c3:21:73:e3:b2:65:08:26:0c:41:29:c3:9b:1a:
f7:ac:8b:83:60:93:02:cc:4c:7e:3b:c9:5f:1a:ce:
54:34:dc:5d:1f:76:db:0d:6e:4d:e6:28:97:54:fa:
ea:97:f2:f6:96:f4:81:99:d4:c1:c0:51:24:52:14:
b6:66:c4:56:83:00:bb:3d:cc:6e:69:b2:0b:6b:68:
a5:27:52:f6:f4:a8:ba:0d:26:f3:6b:c6:37:0e:88:
c3:f5:c3:0b:d8:8c:27:72:10:5e:96:9f:ef:9e:c2:
3f:96:5c:3e:4d:0c:eb:26:fb:c0:c8:b4:80:54:6d:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:11:29:CE:EC:CF:76:BE:C5:B4:A5:E6:EC:47:BC:17:63:D4:32:E3
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/xhEpzuzPdr7FtKXm7Ee8F2PUMuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.232.0/21
185.69.108.0/22
185.76.248.0/22
IPv6:
2a03:2f20::/32
Signature Algorithm: sha256WithRSAEncryption
3d:49:fa:35:a5:3a:76:e1:37:c2:e1:cf:d6:7e:26:08:84:94:
62:28:7e:2c:f5:c4:0f:bf:07:3b:6e:60:65:41:df:47:e3:43:
4f:3a:a7:90:c3:71:53:6a:6a:b0:9c:ff:ac:7f:6b:3d:69:c8:
a9:f3:c3:cb:2a:51:4c:e6:bb:a1:47:45:cd:5b:ec:d6:cb:38:
ea:2e:e3:27:71:71:e4:aa:9f:ad:b2:d0:72:a9:42:fe:76:27:
1e:5c:8f:bd:e9:8c:4f:7f:d8:12:a0:be:c4:3d:96:20:16:1d:
31:a1:a8:9c:80:47:02:1a:03:bf:f5:0d:dd:6e:ff:df:9e:67:
81:59:6c:de:e5:2f:db:ae:3b:96:ba:52:be:e4:4f:28:0e:60:
6d:ac:36:6d:ac:2e:76:1c:59:0e:f9:6a:57:05:a1:c9:03:7d:
df:71:00:93:89:6f:a5:ac:82:c8:4c:e9:44:db:53:be:42:09:
5a:86:3c:31:ea:3d:ab:59:9f:bb:e8:54:a1:a7:a4:eb:41:c7:
e1:3c:43:49:a6:e7:d3:94:64:ef:4b:68:b7:c7:b5:70:78:0d:
cf:79:08:e9:ed:9b:2f:11:08:a9:0b:93:84:de:c4:3a:fc:77:
7e:53:c1:65:78:fd:a9:98:37:7a:05:b4:5c:e7:ee:4b:3b:9f:
86:ad:94:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:20 2026 by rpki-client