Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4QCQqOlXSPN_npA0gOeuGmaBpfE.roa
File: 4QCQqOlXSPN_npA0gOeuGmaBpfE.roa (raw, json)
Hash identifier: 01gOa5iZ0ouXoAMdDInmfj9jTxVGLXu0RJOEFTqD1bw=
Subject key identifier: E1:00:90:A8:E9:57:48:F3:7F:9E:90:34:80:E7:AE:1A:66:81:A5:F1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0FCA1F76C77CC00EB69584A57C985E144
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4QCQqOlXSPN_npA0gOeuGmaBpfE.roa
Signing time: Fri 02 Oct 2026 12:41:08 +0000
ROA not before: Fri 02 Oct 2026 12:41:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202413
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.39.0/24 maxlen: 24
31.59.209.0/24 maxlen: 24
94.183.203.0/24 maxlen: 24
94.183.208.0/24 maxlen: 24
94.183.209.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
94.183.238.0/24 maxlen: 24
94.183.239.0/24 maxlen: 24
94.183.254.0/24 maxlen: 24
217.60.8.0/23 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.67.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:a1:f7:6c:77:cc:00:eb:69:58:4a:57:c9:85:e1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 2 12:41:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e10090a8e95748f37f9e903480e7ae1a6681a5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:a7:f2:4b:dd:50:1b:bd:22:bd:81:1e:c0:
04:7a:ea:74:3d:ff:6f:de:1d:4a:14:4d:84:06:d4:
2d:21:fe:22:ea:bc:3a:a3:32:8e:ef:54:0f:2d:42:
bd:eb:5a:af:06:19:4a:4d:61:a1:db:0e:b2:4b:0b:
79:e1:57:eb:9b:d1:24:a8:b8:db:7d:fc:ee:9d:72:
9e:c0:fa:a5:e0:2b:c0:08:1d:1f:91:9a:21:7e:4f:
6c:9b:40:e9:76:8e:d8:8e:88:76:db:66:6a:e7:16:
8c:83:81:0b:a1:86:cf:2f:43:b8:9e:36:32:16:d3:
c3:b5:8d:6b:54:57:f6:5c:ca:84:f9:c9:8c:b5:57:
f6:2a:0f:23:22:2e:36:bc:3f:bb:3c:f2:67:66:95:
63:0e:30:a7:91:4e:73:7e:e8:2e:99:78:4e:78:82:
1b:d4:b7:9e:51:a8:4d:7e:40:2d:3a:60:26:2f:45:
2f:31:34:12:fc:9d:0f:04:31:0d:68:ec:5d:b9:60:
28:9c:44:6e:2f:cb:e1:f5:c6:f6:3f:c7:61:ea:30:
b8:42:9a:52:8d:0a:3b:1f:83:1e:ef:5e:53:6c:64:
e2:bd:06:20:4a:7d:49:06:23:65:0a:73:fc:75:a4:
02:f9:36:a7:e5:24:07:81:ad:73:c9:83:d2:92:bb:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:00:90:A8:E9:57:48:F3:7F:9E:90:34:80:E7:AE:1A:66:81:A5:F1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4QCQqOlXSPN_npA0gOeuGmaBpfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.39.0/24
31.59.209.0/24
94.183.203.0/24
94.183.208.0/23
94.183.226.0/24
94.183.238.0/23
94.183.254.0/24
217.60.8.0/23
217.60.24.0/24
217.60.67.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a2:74:fc:a2:a3:68:c2:bd:c3:d7:ff:96:2e:e1:cf:4e:e1:
de:1b:e1:fc:12:10:e1:76:95:ed:91:be:e9:a9:ea:df:98:e2:
1c:89:7d:1a:ec:ae:40:e0:e7:7c:ef:a3:5f:d2:07:c6:e2:9a:
21:3d:7c:f5:3e:d5:c9:50:5b:fa:45:76:2f:34:dc:3a:2e:75:
74:8c:92:70:0f:33:34:13:39:51:b8:f7:7c:73:8b:10:a1:93:
e0:96:05:eb:f1:9c:f1:18:ad:e4:2c:6c:48:21:27:93:ea:70:
98:01:4a:54:b9:67:d0:a7:68:80:7e:ba:da:70:36:a3:da:d9:
63:1f:fe:25:21:5f:0e:05:84:9b:6f:66:ae:4b:d6:c7:31:ae:
d5:4d:89:09:a5:ae:ba:93:c9:21:33:df:f5:fc:39:c2:f6:66:
22:19:15:82:dd:47:ff:2d:d9:6e:38:f8:b5:03:29:b6:1c:cc:
08:ee:59:14:e5:bc:25:9b:eb:95:0c:83:bc:99:ef:bc:e1:d3:
05:58:a9:ce:2c:cc:87:97:2e:d0:c3:9a:a4:3f:d7:90:a6:ac:
96:17:e7:ab:b8:d3:4e:f1:d5:b4:70:d4:da:4e:b7:c3:50:d0:
79:88:9f:0b:b7:d7:64:bc:5e:71:83:0c:b7:8c:a2:8b:17:ee:
f6:f5:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:02 2026 by rpki-client