Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rrxdHMuuI_mnMcysuj_ZSCC7p0E.roa
File: rrxdHMuuI_mnMcysuj_ZSCC7p0E.roa (raw, json)
Hash identifier: 57QpHwDEU+jKgNmqZBRtJx21+B+eJMwgZyMTV87PWk8=
Subject key identifier: AE:BC:5D:1C:CB:AE:23:F9:A7:31:CC:AC:BA:3F:D9:48:20:BB:A7:41
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F5033456E1A237FC2722C40BA91254508
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rrxdHMuuI_mnMcysuj_ZSCC7p0E.roa
Signing time: Sat 11 Jul 2026 08:02:45 +0000
ROA not before: Sat 11 Jul 2026 08:02:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210457
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.39.0/24 maxlen: 24
94.183.170.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
94.183.238.0/24 maxlen: 24
94.183.239.0/24 maxlen: 24
94.183.254.0/24 maxlen: 24
217.60.8.0/23 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:50:33:45:6e:1a:23:7f:c2:72:2c:40:ba:91:25:45:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 11 08:02:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aebc5d1ccbae23f9a731ccacba3fd94820bba741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:cd:8f:1c:46:e4:f8:b7:91:ac:0d:5b:6c:
d1:7b:a3:fc:b8:40:58:af:1f:9d:24:04:97:2c:3d:
1c:ee:71:d2:2f:76:a9:37:12:fb:80:d7:90:fd:b5:
11:f9:2c:85:c3:cf:93:e6:cc:d5:4b:fc:8a:00:ca:
2a:fa:06:12:f6:83:4d:c1:13:ed:d9:a2:3f:59:7c:
40:22:f0:32:3e:24:27:45:e1:c2:83:68:cb:04:ff:
54:23:1c:15:87:53:eb:9b:c6:2f:c0:48:90:94:b2:
3d:85:97:1d:7e:63:c5:5d:df:88:e5:01:4e:65:53:
ec:5c:e8:d6:37:07:c7:fe:3d:d7:0d:c1:a1:bb:09:
24:48:6f:15:77:14:af:c6:42:22:1b:dc:3f:70:81:
53:82:58:93:3e:6c:a4:8a:d9:22:a0:42:2d:6e:82:
84:29:c0:c6:c6:af:7f:4d:44:b8:90:7d:14:53:88:
50:02:c8:16:1c:fe:1a:ca:1e:04:b0:07:7f:75:c9:
8b:11:81:c7:a9:9f:46:18:58:89:7a:ea:64:c9:78:
61:53:3b:1c:c8:aa:1c:79:21:40:40:3e:0b:69:d9:
2e:7c:ed:5c:97:e5:d2:69:d0:05:0d:fa:0d:2a:6a:
64:2c:84:f2:9c:77:52:1e:54:a5:e9:2e:fc:0f:a7:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:5D:1C:CB:AE:23:F9:A7:31:CC:AC:BA:3F:D9:48:20:BB:A7:41
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rrxdHMuuI_mnMcysuj_ZSCC7p0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.39.0/24
94.183.170.0/24
94.183.226.0/24
94.183.238.0/23
94.183.254.0/24
217.60.8.0/23
217.60.24.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
94:5e:54:a0:32:81:83:82:25:05:27:3d:42:63:95:21:42:f3:
2a:96:da:ed:97:bf:b1:fd:c5:ca:21:5b:7a:8a:e5:d9:e2:f5:
32:e1:3b:c1:99:10:63:bd:f8:9d:1c:33:d4:99:09:00:dd:3b:
09:00:9c:fc:19:1e:4c:25:14:de:97:af:af:95:8d:8a:74:e3:
a0:02:a0:50:73:91:be:3b:3a:40:5e:3d:26:ae:d3:a4:25:2a:
94:44:9f:03:4d:13:86:2d:fa:09:9f:f0:ad:1c:78:6d:3a:76:
37:ba:e9:a8:b7:65:43:dc:d3:22:40:4b:26:e2:c9:1d:7e:9c:
9f:51:96:76:c1:28:32:40:29:39:c1:49:30:d1:a8:0f:ed:60:
9d:67:4c:10:db:6c:ca:bb:59:c8:c6:b8:40:cb:59:f4:63:bc:
2c:7b:9b:17:b9:13:17:83:e1:43:01:19:11:2c:1c:c2:5e:ee:
38:4b:97:5f:f2:d0:da:63:0a:1a:75:d4:a0:d7:70:90:2c:66:
2c:a2:e7:be:68:47:26:6f:ff:ff:e6:bf:99:a1:d8:f5:98:98:
7f:28:f1:68:72:91:65:d1:83:53:58:bc:fd:5f:33:57:0f:fd:
f9:5d:71:1c:62:79:91:27:4b:5a:ab:88:c4:26:1d:49:3d:65:
7e:05:31:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:59 2026 by rpki-client