Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FAfE3ve0tXOIeAdu3mjvzhKxr_E.roa
File: FAfE3ve0tXOIeAdu3mjvzhKxr_E.roa (raw, json)
Hash identifier: Y5kSctU+y5IOoQZKDCgKc2xb81q+gql/FikXemDgzlI=
Subject key identifier: 14:07:C4:DE:F7:B4:B5:73:88:78:07:6E:DE:68:EF:CE:12:B1:AF:F1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EE9E31AAE42631B6BE9CCA901BBC32BF2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FAfE3ve0tXOIeAdu3mjvzhKxr_E.roa
Signing time: Sun 21 Jun 2026 11:13:55 +0000
ROA not before: Sun 21 Jun 2026 11:13:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 31.56.188.0/24 maxlen: 24
94.183.204.0/24 maxlen: 24
94.183.205.0/24 maxlen: 24
94.183.217.0/24 maxlen: 24
94.183.219.0/24 maxlen: 24
94.183.220.0/22 maxlen: 24
94.183.220.0/24 maxlen: 24
94.183.221.0/24 maxlen: 24
94.183.222.0/24 maxlen: 24
94.183.223.0/24 maxlen: 24
94.183.228.0/24 maxlen: 24
94.183.229.0/24 maxlen: 24
217.60.12.0/24 maxlen: 24
217.60.16.0/22 maxlen: 24
217.60.16.0/24 maxlen: 24
217.60.17.0/24 maxlen: 24
217.60.18.0/24 maxlen: 24
217.60.19.0/24 maxlen: 24
217.60.20.0/24 maxlen: 24
217.60.21.0/24 maxlen: 24
217.60.22.0/24 maxlen: 24
217.60.23.0/24 maxlen: 24
217.60.68.0/24 maxlen: 24
217.60.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e9:e3:1a:ae:42:63:1b:6b:e9:cc:a9:01:bb:c3:2b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 21 11:13:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1407c4def7b4b5738878076ede68efce12b1aff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:42:bb:58:5a:b5:21:cc:03:0d:eb:99:70:
97:5e:f5:8f:cf:5a:c7:56:c0:76:f4:1e:bc:c8:f2:
4e:ed:af:61:c7:e8:d0:35:7b:6e:d4:0c:8e:2f:bd:
6d:cf:26:f9:fd:b6:3d:53:5e:20:24:90:9a:fb:94:
81:32:8c:cd:e8:df:57:f7:ba:5e:c4:f6:6a:2c:9d:
3e:6c:66:98:0b:28:43:e2:0a:3a:84:6b:b0:53:eb:
bd:4a:9f:a0:7c:f9:fc:15:23:3e:d3:46:f9:06:c0:
04:c9:46:94:f7:14:5b:ec:e9:7e:35:76:6b:a4:a3:
5a:5c:ab:40:b7:0f:0a:ea:4d:cb:e7:2b:18:7a:11:
35:8f:75:99:b1:36:d0:42:99:57:e4:24:8b:cd:77:
3a:3f:a5:b4:ca:71:a7:6d:1a:c8:fd:89:bb:3b:4c:
2f:ce:80:19:c2:3d:73:10:44:ad:8e:11:3e:4f:de:
01:64:46:85:67:73:f9:71:24:a7:7f:06:89:76:95:
53:1d:e2:2b:40:c6:4a:10:29:d6:b1:7b:db:66:e5:
8b:15:72:2c:7e:9c:38:68:95:ca:16:6c:18:58:e2:
ff:c3:ed:d4:fa:ff:2c:2c:2c:36:a3:8c:6a:2f:fe:
2d:e1:39:2f:90:7a:36:7a:24:73:d6:74:7d:d2:db:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:07:C4:DE:F7:B4:B5:73:88:78:07:6E:DE:68:EF:CE:12:B1:AF:F1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FAfE3ve0tXOIeAdu3mjvzhKxr_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.188.0/24
94.183.204.0/23
94.183.217.0/24
94.183.219.0-94.183.223.255
94.183.228.0/23
217.60.12.0/24
217.60.16.0/21
217.60.68.0/23
Signature Algorithm: sha256WithRSAEncryption
44:fd:ff:65:ab:c4:e2:ee:f1:1d:5b:57:be:84:da:50:15:5b:
9d:53:f9:9b:45:f8:b6:dc:cd:f3:9f:e4:55:dd:6b:02:ef:60:
0e:f1:9c:ab:bc:13:72:bd:aa:e6:2c:f2:21:fe:bc:7d:b3:cd:
60:b8:28:70:27:2a:bd:4b:7f:5b:b0:16:88:2f:77:27:66:67:
4d:45:65:cf:a1:7a:f5:9c:a3:4f:a0:8d:72:0f:82:70:13:1e:
14:b0:e8:b3:31:c1:9e:52:f3:c5:61:d4:93:3d:00:12:20:88:
14:30:f0:09:4f:1f:15:d4:8c:ec:17:d0:b5:ef:8d:20:3c:8d:
bc:8f:07:a2:e8:62:05:d8:80:f4:fa:76:f0:48:2a:49:86:e9:
b2:b8:ba:4a:d1:1b:d9:bc:0d:f9:0f:7d:58:77:b6:2f:34:06:
ab:b3:97:e3:41:2c:c9:c4:b8:6c:71:55:e2:ac:27:73:6c:d1:
bf:ab:98:b5:63:80:54:8a:04:71:68:13:ff:ec:1d:2c:22:d2:
4b:98:73:4a:78:a5:2a:2e:24:d9:9f:21:8b:2d:cb:34:94:e7:
31:39:b3:04:60:ee:7f:9f:52:82:47:d4:ed:f6:51:9f:00:5c:
3d:c1:28:c3:99:49:bd:29:ec:67:89:45:45:84:ed:96:a0:e8:
91:fa:90:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 17:05:27 2026 by rpki-client