Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7XXSEHTSsA9j6s2qsubs_nhK6FI.roa
File: 7XXSEHTSsA9j6s2qsubs_nhK6FI.roa (raw, json)
Hash identifier: p4Iv3TajYn5EOVPI37oK7bFWeBKzn38bftLVksa2NAM=
Subject key identifier: ED:75:D2:10:74:D2:B0:0F:63:EA:CD:AA:B2:E6:EC:FE:78:4A:E8:52
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DA7095EFDF9C6F24F3D841D3B9EFDD036
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7XXSEHTSsA9j6s2qsubs_nhK6FI.roa
Signing time: Sun 19 Apr 2026 18:38:22 +0000
ROA not before: Sun 19 Apr 2026 18:38:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210457
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.39.0/24 maxlen: 24
94.183.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:09:5e:fd:f9:c6:f2:4f:3d:84:1d:3b:9e:fd:d0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 19 18:38:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed75d21074d2b00f63eacdaab2e6ecfe784ae852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:9e:6f:b6:73:a7:dc:f2:55:c4:b2:81:3b:
10:18:b7:d5:79:68:c2:39:2f:64:db:1c:e1:75:28:
36:3e:4b:e5:cc:a0:e1:2a:a5:26:5e:4e:8d:60:4e:
c3:f9:47:ad:4d:3f:23:b4:67:f3:fd:05:cb:e0:be:
54:70:30:66:83:b5:f9:f1:d6:84:3e:04:8d:df:17:
5a:bf:05:cb:6e:b7:b8:0b:18:89:17:67:0f:5c:03:
77:75:b8:5c:69:cd:7f:a3:0e:16:2e:82:50:fe:08:
54:89:78:ef:1f:fa:d6:28:58:51:0b:a3:03:a5:05:
50:93:a8:0e:c2:ee:80:71:41:0a:fb:0e:4f:d1:22:
c8:2a:9d:95:23:fb:e7:5d:94:18:ae:d3:7b:67:73:
7e:2a:18:9d:66:d5:84:cc:81:9c:89:3c:7d:80:59:
99:40:9c:08:0f:08:17:cb:ee:31:b0:72:3a:76:37:
f8:00:ad:d6:a0:44:b2:6a:ce:44:2c:fc:ca:5b:f5:
0a:e2:c7:49:ef:3e:68:ab:66:95:c7:3f:f5:92:92:
09:a1:c5:f1:14:5d:70:ec:c2:08:73:ad:e6:b1:a1:
a1:eb:7e:03:3a:03:16:7b:60:35:73:e0:2a:52:07:
6e:40:a6:05:5b:72:7c:ad:df:e6:d9:9e:5f:4b:d0:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:75:D2:10:74:D2:B0:0F:63:EA:CD:AA:B2:E6:EC:FE:78:4A:E8:52
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7XXSEHTSsA9j6s2qsubs_nhK6FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.36.0/24
31.59.39.0/24
94.183.170.0/24
Signature Algorithm: sha256WithRSAEncryption
13:4b:8b:8d:ba:ba:ae:81:36:fc:44:76:59:15:67:4b:5d:8d:
0a:e4:71:a6:98:84:3b:11:f2:3a:f4:ad:cc:23:ea:44:29:df:
c6:03:cf:42:fc:30:35:73:8c:08:c2:1b:1d:be:cc:83:49:2c:
51:e8:27:5c:10:c1:8d:12:61:7c:85:1f:c4:aa:c5:75:a6:12:
bc:54:cc:2b:dd:28:32:a8:ce:85:1e:68:87:53:34:f9:ab:10:
45:39:5a:2b:db:22:74:19:3a:08:e7:be:a2:95:1a:ba:b6:52:
ac:84:14:89:40:e8:6d:53:cc:f0:3e:b8:ce:37:65:a0:2e:10:
5d:b3:a2:98:b0:58:da:f4:b8:75:e0:b8:e7:4a:56:8a:51:77:
d8:96:b9:96:6c:13:d9:2a:a5:9e:8c:15:dc:a1:5c:a0:3a:86:
20:7c:b3:e9:7c:80:a4:a5:bf:c8:43:11:88:a4:a8:e8:e9:19:
bc:c3:e2:9a:19:d0:e6:c5:58:b2:0b:1a:66:08:12:3a:60:45:
dd:5e:0a:36:0b:d4:10:d9:3c:83:d1:84:ae:f8:64:01:7a:82:
0a:37:ff:44:7f:76:ca:4d:9b:0c:fa:34:af:25:11:8a:d4:f8:
c6:d4:59:bb:5e:84:47:31:67:65:ed:60:fb:99:78:71:7f:8f:
9a:53:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:32:08 2026 by rpki-client