Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ttQfFk2MO0o7mqXshPqN_mphJHI.roa
File: ttQfFk2MO0o7mqXshPqN_mphJHI.roa (raw, json)
Hash identifier: BTecL2NPX715drzWGUUwPExMgTNHVHJujhVde11j3Y8=
Subject key identifier: B6:D4:1F:16:4D:8C:3B:4A:3B:9A:A5:EC:84:FA:8D:FE:6A:61:24:72
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F95CCD10505C81EA362216907839AAEA3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ttQfFk2MO0o7mqXshPqN_mphJHI.roa
Signing time: Fri 24 Jul 2026 20:24:15 +0000
ROA not before: Fri 24 Jul 2026 20:24:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 31.57.37.0/24 maxlen: 24
31.57.185.0/24 maxlen: 24
94.183.174.0/24 maxlen: 24
217.60.197.0/24 maxlen: 24
217.60.241.0/24 maxlen: 24
217.60.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:cc:d1:05:05:c8:1e:a3:62:21:69:07:83:9a:ae:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 24 20:24:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6d41f164d8c3b4a3b9aa5ec84fa8dfe6a612472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:cf:5e:c7:35:81:e3:43:d5:fd:a1:7b:e7:
f1:f3:5d:b7:5b:d2:02:58:25:77:d8:86:42:0b:4a:
d1:69:73:9c:91:ed:e6:de:ca:e3:e0:35:3e:aa:60:
8b:12:98:76:da:4f:12:af:fc:49:34:42:1b:b8:30:
cd:88:74:e7:5d:4e:43:e1:75:09:9c:c0:4f:fc:2a:
da:40:35:1f:9d:47:e5:35:4c:2b:dd:78:9a:43:ae:
b1:e6:90:37:b0:17:18:53:83:db:e5:77:cb:ab:c1:
f0:0e:3e:53:20:8e:c7:23:5c:c7:7c:af:7e:e6:06:
82:85:8a:15:c6:9c:73:42:c7:16:50:47:d6:8e:92:
14:ed:64:51:82:90:b3:b5:64:49:0b:2e:8c:f8:8c:
85:a1:62:77:2f:31:01:d4:e1:a1:b7:e8:a0:69:05:
54:3d:ad:ef:d3:9e:cf:21:a6:85:ba:5a:79:94:8a:
a2:96:ad:0b:3f:ed:46:59:ee:6f:0a:24:10:c7:d3:
ce:23:05:1a:f6:75:a7:6d:9c:d2:37:b5:b0:8d:71:
b3:0c:bd:b2:53:c2:b4:74:8c:06:b1:43:25:c3:88:
fe:a9:3f:98:17:b0:5a:4d:bd:74:22:10:73:56:c4:
32:d3:ee:0d:c7:ee:b6:da:3f:c1:7b:98:25:ac:57:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D4:1F:16:4D:8C:3B:4A:3B:9A:A5:EC:84:FA:8D:FE:6A:61:24:72
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ttQfFk2MO0o7mqXshPqN_mphJHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.37.0/24
31.57.185.0/24
94.183.174.0/24
217.60.197.0/24
217.60.241.0/24
217.60.250.0/24
Signature Algorithm: sha256WithRSAEncryption
51:76:d4:69:83:37:7a:82:41:9c:d8:53:dd:14:99:85:6f:88:
dc:01:87:bf:4c:2a:68:47:0d:fb:70:8c:e8:45:18:94:8e:46:
15:5a:bd:83:1c:46:ed:39:db:23:b3:33:61:ae:9a:9b:06:e2:
c8:d5:45:b0:d4:7c:84:12:69:bb:33:11:f4:5a:4f:cd:2a:a0:
9d:e8:7b:e6:3e:e5:9d:e2:4d:1e:61:d0:a3:38:8b:b1:e3:11:
f7:01:ac:66:a2:60:44:3c:0c:69:96:70:ab:01:48:f8:ac:39:
c3:e9:e3:d3:21:c5:08:fc:fa:70:2a:02:3f:df:98:9c:81:5d:
49:39:89:8c:25:73:db:f5:3c:db:ea:45:ac:cd:5f:29:ec:07:
8f:7c:40:a4:c6:28:68:7e:cd:74:46:2c:d0:cd:81:9f:87:66:
42:e5:e9:39:aa:dc:3d:0c:fb:16:48:3c:b2:d1:d2:2b:1c:e8:
61:68:18:da:4f:91:08:ad:c7:8b:bf:e9:86:91:a1:e1:30:9e:
c8:68:d7:f4:56:17:92:3f:fa:36:8f:ae:04:8c:88:bf:06:50:
0a:9c:9e:92:ae:9d:d4:2a:b3:e1:79:30:2e:2d:a4:03:57:59:
04:2d:b5:48:38:1f:be:be:c4:5e:21:a4:b4:d1:23:c0:d7:16:
63:15:85:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:54:28 2026 by rpki-client