Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JRgcEQ0xZWOdhEQz9jwjEI00ksc.roa
File: JRgcEQ0xZWOdhEQz9jwjEI00ksc.roa (raw, json)
Hash identifier: m/M8Q1vKcUtXuUJGB1I40jzTFCcMUwxpqekbNrUSurI=
Subject key identifier: 25:18:1C:11:0D:31:65:63:9D:84:44:33:F6:3C:23:10:8D:34:92:C7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E8A051248788962919962A2BB89D7EFA9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JRgcEQ0xZWOdhEQz9jwjEI00ksc.roa
Signing time: Tue 02 Jun 2026 20:27:28 +0000
ROA not before: Tue 02 Jun 2026 20:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213385
IP address blocks: 31.59.186.0/24 maxlen: 24
31.59.212.0/24 maxlen: 24
217.60.244.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8a:05:12:48:78:89:62:91:99:62:a2:bb:89:d7:ef:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 2 20:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25181c110d3165639d844433f63c23108d3492c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:6a:2c:ae:b4:df:5f:fa:d0:79:18:fc:2f:
45:cd:e6:5c:58:58:e0:8d:29:20:a4:e1:28:c8:23:
91:bb:c9:43:2c:9c:e4:44:77:bd:97:2a:44:63:d3:
5e:eb:98:07:33:dd:fd:52:41:ea:9a:89:c1:3d:f6:
50:6a:68:c2:bf:b7:08:c4:ba:37:e0:f5:2f:d7:89:
8d:f5:ef:e6:6b:e9:0e:86:ae:2f:5f:af:2b:f0:57:
69:7a:d9:cb:46:22:1a:76:bb:f5:72:3f:e3:18:d5:
c4:40:c6:13:8e:d0:74:46:6e:a5:c4:96:5d:74:84:
bb:af:79:97:22:68:e7:95:7b:ee:a5:80:cc:59:86:
85:d4:27:96:49:8b:8c:10:50:34:60:fb:d3:5c:17:
d6:bb:e2:1b:26:09:cd:af:ed:e9:c9:70:13:14:47:
f4:4e:3e:3d:29:71:c1:34:a9:09:82:4f:8d:40:fe:
4d:81:af:9d:6f:53:de:8b:59:f8:e0:f3:d1:95:9e:
11:72:92:45:cc:cf:59:7f:9a:d0:47:f8:af:8e:dd:
cd:9d:69:e3:f4:1a:28:f0:36:ff:a2:a2:6b:4b:e9:
f0:ad:1d:8f:2d:be:f0:fb:39:49:9c:fa:8d:cc:56:
a2:9d:aa:4e:14:8a:09:c8:df:42:64:2d:a1:91:c2:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:18:1C:11:0D:31:65:63:9D:84:44:33:F6:3C:23:10:8D:34:92:C7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JRgcEQ0xZWOdhEQz9jwjEI00ksc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.186.0/24
31.59.212.0/24
217.60.244.0/24
217.60.253.0/24
Signature Algorithm: sha256WithRSAEncryption
91:13:1e:4b:24:fc:74:8e:31:8a:02:25:a9:05:58:11:f0:8c:
dc:c8:87:de:65:e3:55:e9:bc:d4:3d:5e:f7:f4:f2:67:6a:89:
90:e1:dc:1f:14:a5:12:0d:c8:3e:11:36:15:ba:3e:e0:9e:36:
21:77:d1:3e:99:ce:5c:74:cc:83:18:b7:e4:cc:e5:ab:68:8c:
b3:6b:35:74:91:8c:c8:c3:89:77:6f:dd:d9:9a:84:17:8a:13:
ce:e4:0c:16:cd:1c:e9:37:89:d8:50:29:f7:08:d5:c1:72:34:
ea:1c:8c:a2:66:5c:55:f5:4e:8b:ea:35:a6:52:a4:54:1e:82:
61:ca:40:2d:e6:bd:fa:4f:6d:4f:ab:c5:44:af:9f:0a:f0:a2:
fb:49:f1:3c:9a:6a:d1:c9:33:cf:a9:b7:e3:39:2b:b9:d3:21:
e7:4c:72:ec:ea:04:57:c2:4f:c2:93:1c:03:f9:ad:c6:a0:0e:
69:e4:e9:f3:d3:96:da:b1:d0:e4:4f:0d:33:89:de:bd:ea:3a:
ba:c1:6e:c8:0f:4d:da:5f:38:67:46:68:24:34:5b:ac:44:68:
1b:57:84:cf:69:4a:6f:93:f2:59:5c:c6:8c:b7:2a:6e:30:53:
a4:84:dc:b3:6e:0d:dc:86:d6:6b:e3:96:24:cf:69:51:3a:11:
3e:c4:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:39:01 2026 by rpki-client