Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ei9pWEpcS5PwvdYxVusMMdc7pCI.roa
File: Ei9pWEpcS5PwvdYxVusMMdc7pCI.roa (raw, json)
Hash identifier: efeRuoG2iVGt4GFXdSrrNmLajgDL2qb5pSbH9dLQDbM=
Subject key identifier: 12:2F:69:58:4A:5C:4B:93:F0:BD:D6:31:56:EB:0C:31:D7:3B:A4:22
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A01075C68B4C9EC62EFA3B620228BE2CA1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ei9pWEpcS5PwvdYxVusMMdc7pCI.roa
Signing time: Mon 17 Aug 2026 16:02:29 +0000
ROA not before: Mon 17 Aug 2026 16:02:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202413
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.39.0/24 maxlen: 24
94.183.203.0/24 maxlen: 24
94.183.208.0/24 maxlen: 24
94.183.209.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
94.183.238.0/24 maxlen: 24
94.183.239.0/24 maxlen: 24
94.183.254.0/24 maxlen: 24
217.60.8.0/23 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:75:c6:8b:4c:9e:c6:2e:fa:3b:62:02:28:be:2c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 17 16:02:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=122f69584a5c4b93f0bdd63156eb0c31d73ba422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:2e:3b:d0:d3:4a:85:08:b1:2b:28:01:f6:
ad:b6:cf:37:ad:84:9d:bf:e9:05:22:0f:cc:27:34:
e2:3f:ef:e9:e4:53:5b:43:f0:b8:58:cf:61:d7:f7:
67:09:f5:b1:85:64:68:43:83:69:97:23:1d:45:a8:
7b:2a:33:68:dc:aa:c1:a9:a2:73:6d:0c:cb:46:ed:
ab:c5:3f:75:de:71:f2:b4:1d:46:ef:e1:4e:28:88:
2e:61:06:8a:88:b4:db:98:04:33:d4:21:12:72:e1:
df:15:4c:5d:29:5a:50:49:35:37:45:9f:c1:03:37:
20:d2:bb:3b:d9:e3:5b:d8:05:0f:6a:7d:90:cd:8d:
81:e3:ba:64:81:28:b3:7a:f0:26:d7:38:f7:98:a3:
05:b2:f6:5b:f8:c5:aa:22:06:f6:b5:c7:49:41:08:
93:03:c0:2b:50:09:20:71:db:82:7a:13:4f:6d:e3:
31:08:ac:c6:0b:9f:3d:02:c2:eb:60:38:1a:42:c8:
2d:01:5f:28:31:5f:88:b7:98:7d:67:40:f1:76:5f:
51:79:31:1b:1d:66:00:90:9a:63:f1:9a:87:76:0a:
7c:66:d1:f5:4f:84:c8:f0:24:ec:3d:48:72:6c:b0:
da:04:14:cc:1d:c2:8e:66:f7:50:67:02:b4:02:18:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:69:58:4A:5C:4B:93:F0:BD:D6:31:56:EB:0C:31:D7:3B:A4:22
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ei9pWEpcS5PwvdYxVusMMdc7pCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.39.0/24
94.183.203.0/24
94.183.208.0/23
94.183.226.0/24
94.183.238.0/23
94.183.254.0/24
217.60.8.0/23
217.60.24.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
02:55:72:33:67:da:bd:8e:19:f3:0e:e3:5c:8f:1d:8f:74:4b:
eb:66:35:15:d9:e4:b3:68:3e:0c:8c:13:fe:5a:cf:ec:f5:1b:
92:d0:3d:7e:7b:cd:f7:04:6e:65:df:cd:fa:9a:91:cb:02:cc:
8c:b9:84:78:04:9b:da:4f:af:f3:7b:2e:05:cb:24:73:05:d9:
22:45:18:17:10:13:f4:ec:8f:3b:35:90:bb:32:29:86:d8:26:
15:fb:82:00:92:f1:e9:d0:d9:4f:af:c5:5f:c5:2f:c0:82:14:
3b:69:b9:22:51:d4:9c:b2:16:3a:4a:ab:ba:26:3a:bd:eb:4c:
3f:63:11:8a:12:fb:84:1b:76:3b:d0:7e:60:17:2e:49:99:db:
41:d0:2a:10:1c:60:7c:88:bc:61:33:39:d1:88:38:a5:8b:10:
89:a8:48:b9:5b:a9:b0:1c:7f:7b:d9:d0:cf:5c:6f:2a:d8:4e:
8a:98:5d:e3:dc:f6:3a:6f:3d:75:a9:83:a9:80:23:bd:02:ca:
95:9a:ff:f5:c9:a0:a9:fa:8d:27:a3:1e:26:7d:bb:42:ea:89:
eb:e3:c0:67:a5:a8:15:6a:a4:21:11:ea:a5:d9:7e:5b:c2:7c:
15:d9:6c:5e:1c:6d:6c:87:dc:52:63:9c:ed:74:85:8d:e7:87:
8e:7d:ed:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:24:24 2026 by rpki-client