Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z0Xs2lKRu9aojhF9qkjMFVAvtVk.roa
File: Z0Xs2lKRu9aojhF9qkjMFVAvtVk.roa (raw, json)
Hash identifier: 8OGA7RcQmkSqIFdgUUnMKHn9tfLFKcAIebi2krEN288=
Subject key identifier: 67:45:EC:DA:52:91:BB:D6:A8:8E:11:7D:AA:48:CC:15:50:2F:B5:59
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E6A2063ECCB71E0963E78E932DC13976A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z0Xs2lKRu9aojhF9qkjMFVAvtVk.roa
Signing time: Wed 27 May 2026 15:49:28 +0000
ROA not before: Wed 27 May 2026 15:49:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 31.57.144.0/24 maxlen: 24
31.58.238.0/24 maxlen: 24
31.59.165.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:20:63:ec:cb:71:e0:96:3e:78:e9:32:dc:13:97:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 27 15:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6745ecda5291bbd6a88e117daa48cc15502fb559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:6f:af:cb:5f:c4:23:0d:9b:ce:91:fe:d4:
d7:08:b2:91:52:17:10:fe:64:9b:fa:d7:12:21:2b:
2f:df:da:f8:22:e5:95:93:5e:15:1f:d0:64:fc:68:
97:3e:3e:e0:69:12:0c:94:08:e9:c1:f1:24:cf:7e:
14:26:b0:78:89:d1:3e:7b:55:74:39:09:9d:46:7a:
73:03:3d:8c:19:85:e4:5c:1e:60:31:1d:9f:d5:e8:
9c:b9:f1:63:46:08:fe:43:1c:73:09:76:5f:88:71:
ff:89:50:5d:1a:5c:73:9e:a9:09:08:4e:c5:3b:58:
f3:a9:10:47:30:2d:62:ff:6e:c6:92:82:0f:a6:57:
70:19:90:29:f4:50:2b:41:98:37:d9:69:d8:df:44:
07:0c:00:52:14:17:78:93:b1:b2:2c:aa:5b:23:00:
83:dc:08:a1:88:c0:af:f7:e6:57:db:6d:e1:e2:fc:
31:fd:b7:69:88:bd:35:14:d3:3d:49:87:92:d4:05:
b6:a9:a3:70:bb:2a:fa:60:85:44:b6:68:6c:09:4d:
40:93:1c:50:a8:e3:80:a3:a4:02:d8:20:e9:89:71:
c2:b6:1e:d6:92:69:45:44:65:ad:c3:83:ab:ea:ed:
42:9f:f2:fa:50:9b:1d:78:28:3c:55:5a:e6:4e:0f:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:45:EC:DA:52:91:BB:D6:A8:8E:11:7D:AA:48:CC:15:50:2F:B5:59
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z0Xs2lKRu9aojhF9qkjMFVAvtVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.144.0/24
31.58.238.0/24
31.59.165.0/24
217.60.253.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b5:0b:3e:5f:c3:6f:29:33:b4:e0:63:63:c8:cd:30:f2:9b:
71:6f:5d:63:6b:4e:a5:8f:0a:69:a3:b6:08:91:a8:c7:95:e5:
de:10:28:70:55:8d:0b:43:5e:9a:29:c6:53:51:e5:61:77:0e:
98:a9:c4:49:86:43:0a:1e:f7:57:37:85:83:f7:49:ea:cd:04:
22:54:78:24:50:e2:b8:20:07:c0:ec:fd:95:f6:2c:53:10:5d:
9b:c8:a4:67:3f:33:ff:1b:38:45:f5:4a:68:85:ab:92:80:01:
5c:e7:c9:fd:b4:3d:ef:d3:0b:4d:27:f9:af:95:14:6d:fd:62:
99:b0:a2:e8:0d:5f:1e:b8:7c:6b:3c:38:f0:3f:e1:2f:c1:94:
d8:83:b4:ca:7c:8d:9e:e4:44:03:03:c5:41:ae:93:41:43:00:
d9:d4:c7:0c:e7:78:c0:f3:a3:fb:45:ac:78:13:72:13:8e:f6:
d8:0e:76:66:64:a4:8f:50:f0:38:48:ff:b4:2f:60:4d:3f:ba:
2a:fd:32:e8:d8:0c:85:31:35:d4:3e:4e:00:f0:3b:c8:c4:49:
49:8d:60:ae:69:31:46:8c:e2:44:7e:7a:d2:bb:0b:19:72:ad:
ce:ff:3a:7f:d4:c1:4c:7b:f1:11:87:d4:97:21:00:c8:91:5d:
56:3e:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:02:01 2026 by rpki-client