Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/fEncnR88mSqEJWMNWTIXg4lFzfs.roa
File: fEncnR88mSqEJWMNWTIXg4lFzfs.roa (raw, json)
Hash identifier: /RpRJ3PMp1V4UJbi4pjqgkWVQnQsDzYoemUQ+O6OQTc=
Subject key identifier: 7C:49:DC:9D:1F:3C:99:2A:84:25:63:0D:59:32:17:83:89:45:CD:FB
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A068B2C1650D6E70D7713AB29BD8D7C52B
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/fEncnR88mSqEJWMNWTIXg4lFzfs.roa
Signing time: Thu 03 Sep 2026 19:15:40 +0000
ROA not before: Thu 03 Sep 2026 19:15:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51202
IP address blocks: 31.22.72.0/24 maxlen: 24
31.22.75.0/24 maxlen: 24
31.25.11.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
89.36.32.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
95.175.150.0/24 maxlen: 24
109.175.211.0/24 maxlen: 24
185.121.132.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
192.40.69.0/24 maxlen: 24
194.117.225.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
2a0c:2500::/29 maxlen: 48
2a0c:2501::/32 maxlen: 48
2a0c:2502::/32 maxlen: 48
2a0c:2503::/32 maxlen: 48
2a14:6781::/32 maxlen: 48
2a14:6781:305::/48 maxlen: 48
2a14:6782:1::/48 maxlen: 48
2a14:6782:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:b2:c1:65:0d:6e:70:d7:71:3a:b2:9b:d8:d7:c5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Sep 3 19:15:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c49dc9d1f3c992a8425630d593217838945cdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:b9:a0:aa:ce:95:95:5b:d5:25:b8:3e:5b:
ec:8b:57:28:b2:c4:38:c5:8f:3f:fc:e5:bd:4b:e0:
92:25:2e:f2:a3:40:0b:eb:b1:85:a4:13:48:75:da:
ff:0f:49:1a:dc:51:bc:da:d2:00:e0:e5:c8:d9:bb:
59:f2:4d:27:3c:d0:4f:c2:7d:f3:4f:e2:ae:1f:dc:
87:19:8c:3c:7b:61:11:e6:72:07:09:e7:c0:32:39:
c7:6a:66:bf:32:52:8b:fd:0e:47:f2:97:62:d9:fb:
98:58:35:cf:eb:d9:26:09:c8:0d:f6:c0:46:fc:2b:
06:3a:6c:b1:da:87:a9:a0:fd:f7:9e:20:85:d7:bd:
e5:37:94:7d:60:cb:59:22:1b:4d:28:2e:25:fa:71:
0f:2b:31:35:98:2d:c2:b8:08:61:75:53:77:76:40:
5b:ff:ad:4f:40:3e:c1:86:df:23:16:25:6e:96:60:
b5:5e:0a:e1:97:89:1d:02:1e:16:76:f2:86:57:ec:
82:9a:a0:8c:43:19:76:e5:0e:9c:86:4e:1d:c2:95:
f4:73:51:fb:1d:db:8c:cc:53:d6:94:2d:34:bf:d0:
0b:b8:c4:3f:70:36:46:07:27:49:48:3b:2c:1e:93:
c3:75:d5:4a:ec:f1:6b:cb:de:80:ea:2a:c0:bf:40:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:DC:9D:1F:3C:99:2A:84:25:63:0D:59:32:17:83:89:45:CD:FB
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/fEncnR88mSqEJWMNWTIXg4lFzfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.72.0/24
31.22.75.0/24
31.25.11.0/24
62.169.152.0/24
89.36.32.0/24
89.36.35.0/24
95.175.150.0/24
109.175.211.0/24
185.121.132.0/23
185.121.135.0/24
185.144.70.0/23
192.40.69.0/24
194.117.225.0/24
212.232.18.0/23
IPv6:
2a0c:2500::/29
2a14:6781::/32
2a14:6782:1::/48
2a14:6782:3::/48
Signature Algorithm: sha256WithRSAEncryption
9b:82:40:31:cd:56:f3:f5:b3:46:b3:c1:b2:ff:ce:1a:12:14:
9f:59:69:e9:b4:a5:42:68:1c:8a:74:ec:9d:16:ad:46:e5:57:
98:0b:3b:45:94:05:7a:c9:6b:bd:90:9d:d0:8b:e2:3e:57:b6:
7c:5e:95:d5:e2:ed:cf:86:60:0f:18:73:09:f4:57:27:09:a7:
f5:df:25:af:1d:0c:46:4e:66:c2:37:fd:b9:df:5e:f7:81:70:
24:78:cc:98:5b:bf:cb:d6:2c:12:ca:89:48:df:b3:98:e7:ec:
7e:69:3d:b2:2a:97:bd:9f:3d:a1:33:9e:f6:2b:19:05:c7:be:
e5:39:fc:a4:c0:0f:a1:c2:54:03:51:38:18:b9:3f:cd:a0:18:
cf:ed:b5:ef:5e:05:70:d5:74:d8:0e:64:4a:2d:51:5d:8a:a4:
f4:f2:e3:00:18:fe:08:02:3f:35:60:1d:bb:1d:e3:90:7a:3e:
74:1d:fb:7e:62:36:94:db:ac:77:74:d1:17:8c:63:08:c2:ec:
f3:62:dd:5f:5b:8a:f9:4e:d6:b9:dd:aa:cd:b5:2c:25:dd:4c:
b8:40:fe:2d:36:0d:d7:4c:a7:5c:15:cb:97:14:8a:68:71:51:
03:96:06:f6:ad:55:b9:15:29:5c:f7:87:4b:70:7c:64:30:32:
97:51:e3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:22 2026 by rpki-client