Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ecRxufPI6P7VUE5nUzTZRG_29JQ.roa
File: ecRxufPI6P7VUE5nUzTZRG_29JQ.roa (raw, json)
Hash identifier: ajMGcYzxfXomhote4pv53cv6BzgMCL0i1DPhpGyO/14=
Subject key identifier: 79:C4:71:B9:F3:C8:E8:FE:D5:50:4E:67:53:34:D9:44:6F:F6:F4:94
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A174C1E41CB6E688B626E95907214C87B4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ecRxufPI6P7VUE5nUzTZRG_29JQ.roa
Signing time: Sun 25 Oct 2026 20:30:26 +0000
ROA not before: Sun 25 Oct 2026 20:30:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 31.57.144.0/24 maxlen: 24
94.183.194.0/24 maxlen: 24
94.183.213.0/24 maxlen: 24
94.183.220.0/24 maxlen: 24
94.183.244.0/24 maxlen: 24
217.60.28.0/24 maxlen: 24
217.60.247.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:c1:e4:1c:b6:e6:88:b6:26:e9:59:07:21:4c:87:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 25 20:30:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79c471b9f3c8e8fed5504e675334d9446ff6f494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:4c:b5:d1:36:57:43:4c:05:ad:03:82:7e:
b8:d5:e3:8f:f0:af:b2:93:76:1c:f9:52:07:31:38:
ce:75:3f:21:6e:8a:fc:39:44:0c:c5:b6:ab:2a:c0:
95:aa:33:bb:f7:69:b8:11:87:58:43:59:f3:41:20:
75:99:b7:d6:59:08:57:29:66:89:88:8f:fc:fc:d8:
d5:15:01:22:48:9e:1a:02:09:ca:10:78:87:04:a8:
80:93:11:f5:7b:b6:4c:28:76:f9:f8:27:06:9b:c8:
f3:63:94:ec:8c:12:4c:fe:f4:b5:ab:55:db:d6:3d:
93:9d:43:87:df:4b:1c:49:2d:e0:a6:fc:af:70:72:
69:12:b8:42:53:0b:58:8b:fb:68:c7:da:80:75:1e:
ce:11:ae:d0:8a:d6:e8:d5:28:37:ca:50:c4:46:7c:
be:e2:2b:b8:35:50:5b:8a:6f:30:9e:5d:fb:f9:c7:
62:9f:85:4f:1f:c3:16:60:4c:8e:89:64:f3:8f:ca:
2e:33:e4:55:dd:38:24:cb:10:b1:ed:22:25:c8:ae:
86:96:32:17:99:00:2e:44:3b:de:dd:cd:8f:93:0d:
35:8b:4f:28:55:9d:9a:00:13:32:44:35:eb:3e:db:
58:fc:90:a8:01:5a:f6:fd:7c:73:e3:db:9d:87:51:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C4:71:B9:F3:C8:E8:FE:D5:50:4E:67:53:34:D9:44:6F:F6:F4:94
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ecRxufPI6P7VUE5nUzTZRG_29JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.144.0/24
94.183.194.0/24
94.183.213.0/24
94.183.220.0/24
94.183.244.0/24
217.60.28.0/24
217.60.247.0/24
217.60.253.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c4:53:29:89:d7:d9:e6:be:bb:6f:81:26:2b:51:b8:3b:b3:
83:dc:19:4e:d4:15:66:93:b3:26:73:87:22:2d:d4:cd:8c:d7:
b6:b4:42:b8:e7:88:28:da:4d:0e:c8:05:0c:c0:53:db:a6:26:
78:6f:aa:88:35:13:1b:ab:9d:43:a1:89:71:e8:e0:65:76:62:
be:00:0f:5e:83:d8:f1:84:0f:1e:cd:09:58:78:02:63:5d:28:
a6:be:11:61:2a:b5:e1:8a:86:9c:ce:5f:63:20:33:d8:1c:e5:
85:0b:75:22:ad:be:f2:c8:d3:77:d2:a2:e2:07:d7:18:8b:11:
48:18:20:2a:3f:bf:11:ca:ef:de:28:95:0e:6e:23:23:b4:ef:
43:ee:68:41:22:9a:5a:a8:70:a1:de:f5:5a:a9:80:62:0b:3d:
7b:98:bc:ba:f3:6c:be:7b:55:82:20:bc:30:5d:92:22:e4:96:
dd:e8:e9:07:82:0b:a5:0e:ea:eb:16:f0:d0:33:40:85:e5:2b:
b8:e5:20:21:71:b6:6f:3a:25:dd:92:30:d8:d1:8e:94:06:a3:
0e:7c:81:52:10:b6:32:9d:7d:db:ab:17:5e:0d:2b:b8:e1:40:
06:10:fa:4e:ae:c6:0d:4d:89:fc:95:40:30:58:b5:ac:fa:22:
a5:19:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:46:09 2026 by rpki-client