Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/tuOyzSJGsdbEh4RXvNAltEvaihU.roa
File: tuOyzSJGsdbEh4RXvNAltEvaihU.roa (raw, json)
Hash identifier: G2o6sCc5sztEjyYV0w4l3dxyOyYv/hTu3DhW9esUzC8=
Subject key identifier: B6:E3:B2:CD:22:46:B1:D6:C4:87:84:57:BC:D0:25:B4:4B:DA:8A:15
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019FD2786E2CC28C3443AEA86274703F126C
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/tuOyzSJGsdbEh4RXvNAltEvaihU.roa
Signing time: Wed 05 Aug 2026 15:08:55 +0000
ROA not before: Wed 05 Aug 2026 15:08:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48108
IP address blocks: 31.222.227.0/24 maxlen: 24
94.247.137.0/24 maxlen: 24
176.53.146.0/23 maxlen: 23
185.235.230.0/24 maxlen: 24
193.43.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:78:6e:2c:c2:8c:34:43:ae:a8:62:74:70:3f:12:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Aug 5 15:08:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6e3b2cd2246b1d6c4878457bcd025b44bda8a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:df:60:ac:36:dd:f5:e5:53:ae:2c:fa:04:
5f:e4:96:e1:83:3e:8e:dd:b1:7e:52:36:9a:ab:41:
62:f2:46:1d:34:17:3a:95:96:8e:df:cf:2c:f5:ed:
7c:33:e1:13:37:1a:44:a2:17:c5:13:7f:3e:9d:75:
33:aa:84:09:05:a8:fd:99:96:8c:7f:cf:e7:79:11:
f1:a9:3e:a3:c0:d5:6b:f1:14:22:18:b5:8c:1d:37:
72:fb:f3:9c:1f:f9:a2:86:6b:59:d8:72:89:fb:ce:
99:2f:d7:f4:7f:57:b3:52:66:8f:29:db:3f:7e:da:
1e:88:3e:80:5b:13:c7:61:22:53:c8:b6:1b:34:f1:
8d:60:ea:8d:79:71:82:82:d8:a4:af:81:4d:d8:91:
04:f3:ba:30:42:e4:9f:35:1d:c7:de:35:a3:56:36:
5c:3e:fc:8b:2a:0a:51:0a:36:9f:68:2d:e5:34:72:
eb:35:1c:8a:97:df:8b:8a:b5:88:c2:f8:f6:e0:66:
2e:76:ac:3e:44:a1:04:e6:38:22:86:e3:2c:6e:64:
70:cb:99:1b:98:66:ce:db:44:14:6b:b2:10:dc:fe:
03:fd:03:0d:4d:8c:9f:f1:4a:d7:5a:1a:8a:b8:b4:
92:20:42:b7:00:81:0c:42:01:8c:0d:c6:2e:f8:e9:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E3:B2:CD:22:46:B1:D6:C4:87:84:57:BC:D0:25:B4:4B:DA:8A:15
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/tuOyzSJGsdbEh4RXvNAltEvaihU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.227.0/24
94.247.137.0/24
176.53.146.0/23
185.235.230.0/24
193.43.146.0/24
Signature Algorithm: sha256WithRSAEncryption
20:75:04:fb:24:6c:f6:d3:a9:6e:99:37:df:4f:26:eb:89:0e:
13:f9:bc:d4:5d:c7:6b:eb:78:0c:8c:c3:f3:e1:5e:d5:ae:0f:
6c:fc:72:80:14:00:93:53:42:41:5f:7a:70:81:65:a8:25:80:
4e:21:99:e9:ac:6f:a4:5b:8d:60:0e:2b:34:59:b4:a6:02:02:
af:80:26:13:74:fe:9d:e6:82:51:89:12:6a:f9:84:9c:04:6c:
37:11:00:29:49:e5:9a:58:7d:48:41:60:93:fe:71:b4:ce:ef:
60:5f:e5:c5:82:f8:66:f7:41:4e:63:56:c6:f5:10:3e:e9:2d:
fb:77:48:c3:87:7e:57:0d:89:67:51:15:ce:35:c9:3f:8e:92:
56:5b:af:c1:c4:2e:07:00:59:5b:1e:d4:b2:6d:3e:e0:df:46:
c8:61:87:c1:6c:cc:ed:b6:25:80:f3:27:8e:c8:b8:14:a8:37:
b7:73:1f:c3:dd:16:44:3f:d7:0b:d0:2f:34:5d:45:8a:9f:a4:
29:b1:4a:3c:53:2b:23:67:b2:76:c9:18:77:6e:59:a8:c6:27:
24:b4:3d:8d:56:c4:59:cf:4f:77:51:c3:72:3f:b1:f5:7b:d0:
1c:26:73:4d:ec:2e:3c:f9:95:89:c1:eb:81:46:fb:15:11:b1:
3d:9f:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:17 2026 by rpki-client