Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ESDaYkq2EDHYsjjKuVpO-7cwh6U.roa
File: ESDaYkq2EDHYsjjKuVpO-7cwh6U.roa (raw, json)
Hash identifier: zmIjSKtF7JLjcTmc8DzWkui3WDZKfwOAKvMURNWt43E=
Subject key identifier: 11:20:DA:62:4A:B6:10:31:D8:B2:38:CA:B9:5A:4E:FB:B7:30:87:A5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A10C696841014E7AA91660F77660659456
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ESDaYkq2EDHYsjjKuVpO-7cwh6U.roa
Signing time: Mon 05 Oct 2026 14:13:16 +0000
ROA not before: Mon 05 Oct 2026 14:13:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 31.57.144.0/24 maxlen: 24
31.58.238.0/24 maxlen: 24
94.183.220.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:69:68:41:01:4e:7a:a9:16:60:f7:76:60:65:94:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 5 14:13:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1120da624ab61031d8b238cab95a4efbb73087a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:24:55:10:01:f8:ed:f1:28:3b:ab:67:d0:
19:8f:90:0f:a3:79:67:96:15:38:e8:c5:07:21:ba:
11:62:65:ce:81:2f:37:61:87:d0:83:91:f4:af:25:
23:05:35:5c:1d:dd:f9:53:2e:71:14:e7:dc:79:97:
86:5b:55:8d:18:b9:86:1c:52:ec:cc:4e:4d:56:47:
e5:45:5e:09:7a:80:49:4b:1e:72:02:67:9e:f5:7a:
0a:1c:8c:62:af:05:a8:1c:2f:4e:6e:4c:d1:62:7c:
9b:99:a6:8d:b8:c7:f7:01:9b:e8:03:9c:64:9c:db:
b2:51:ff:00:32:b7:ae:ab:0f:9e:3e:fb:5b:3d:7b:
00:ad:83:62:f5:2e:1a:17:04:ca:75:17:f7:a2:ab:
c8:fe:1c:5e:fd:0c:3e:5d:ed:9c:ff:3f:9c:5c:6e:
e4:bb:29:02:a9:4e:f4:94:5d:e0:5b:d8:d5:aa:5b:
96:99:77:44:7c:f8:ad:10:b0:c0:ce:38:1a:6c:e5:
3d:00:2a:4c:7e:f9:eb:1e:c8:ea:ec:0a:a3:45:ba:
39:2e:92:fd:0f:76:29:4a:b1:ed:b1:c6:d1:d3:44:
dd:94:b1:4c:52:65:b9:de:96:86:92:43:7b:c1:07:
79:57:9e:51:91:e1:1a:cc:9b:f4:d9:7d:f5:af:3c:
86:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:20:DA:62:4A:B6:10:31:D8:B2:38:CA:B9:5A:4E:FB:B7:30:87:A5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ESDaYkq2EDHYsjjKuVpO-7cwh6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.144.0/24
31.58.238.0/24
94.183.220.0/24
217.60.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:51:69:9a:0e:4c:64:b8:f6:09:97:7f:81:7e:70:36:82:ea:
aa:be:64:56:fb:a3:dc:fc:c1:36:e8:87:4e:92:aa:30:af:bb:
36:a1:69:1b:42:33:3e:a2:51:81:57:fb:6f:ae:05:11:b5:f0:
60:6e:4a:55:23:98:f3:fb:a5:a4:ba:c0:b4:8e:74:4f:00:a6:
10:b0:42:65:1e:bd:91:3f:44:bc:4d:5b:58:86:93:5e:e5:34:
25:46:33:fe:20:d7:cd:c0:0d:af:5a:48:db:e4:86:c3:14:e3:
00:b9:ff:71:e2:70:7d:8d:d5:ec:b4:1e:57:c1:ac:16:4a:9d:
10:3e:7a:64:04:27:26:c6:fe:10:7d:59:28:e0:e8:ef:d3:5a:
ab:70:8f:1b:16:8b:11:25:26:76:a1:51:5a:ef:e1:4d:30:1e:
9b:ad:96:d4:80:ba:d4:ff:7c:40:dc:83:69:2d:9b:ec:aa:72:
5a:86:40:02:94:75:81:20:ad:1a:63:0f:f8:08:04:d7:c1:61:
8d:60:db:b2:66:72:46:05:02:d8:64:7a:1e:f8:bc:4f:a3:6f:
74:6f:e5:33:ac:e9:38:66:98:43:c6:9c:e1:68:6c:b4:49:d5:
e5:f3:f7:ed:94:0e:57:7a:a2:77:d8:0f:ac:af:13:63:96:3c:
48:72:5e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:06 2026 by rpki-client