Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/31CTrhQ2PjNeEIn5k3mzGCsvi-8.roa
File: 31CTrhQ2PjNeEIn5k3mzGCsvi-8.roa (raw, json)
Hash identifier: xdrNUKSIAWY+VK7Uy/YiSRMXzGjbPmqXJMOwYqWoTQo=
Subject key identifier: DF:50:93:AE:14:36:3E:33:5E:10:89:F9:93:79:B3:18:2B:2F:8B:EF
Certificate issuer: /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial: 01A1016D010E3FD3A46F8A7B30B3B373E591
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/31CTrhQ2PjNeEIn5k3mzGCsvi-8.roa
Signing time: Sat 03 Oct 2026 11:01:23 +0000
ROA not before: Sat 03 Oct 2026 11:01:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216024
IP address blocks: 85.137.24.0/24 maxlen: 24
85.137.25.0/24 maxlen: 24
85.137.26.0/24 maxlen: 24
85.137.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:6d:01:0e:3f:d3:a4:6f:8a:7b:30:b3:b3:73:e5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
Validity
Not Before: Oct 3 11:01:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df5093ae14363e335e1089f99379b3182b2f8bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8d:25:90:61:c6:4d:ff:b4:b4:cd:1d:c4:b9:
24:24:e0:52:01:25:bf:3f:81:54:07:27:1b:ce:fc:
a5:8c:20:9c:90:3a:0e:fd:a2:d0:47:3c:00:5b:ec:
24:66:b4:9b:c0:68:2c:4f:99:e1:95:56:b0:a9:40:
6d:29:df:4c:89:af:d2:69:9e:2b:db:b9:9b:65:b3:
74:30:b5:b1:4b:f4:54:e8:04:b9:24:f7:81:7f:ef:
6e:f9:13:e1:b9:d0:ed:21:0a:13:a3:c5:71:dd:22:
18:07:f0:6c:41:26:4a:58:45:53:16:3c:8b:6a:6f:
9c:f6:37:04:3d:af:8f:65:1e:55:65:40:fa:0d:d3:
5c:ac:e5:83:79:bc:3b:7d:a8:45:dc:69:5b:bb:a7:
a8:f8:82:23:02:0b:e5:ae:2e:d9:9a:64:80:f1:b9:
f2:06:ac:4d:b1:6d:8f:f6:c8:02:a6:93:19:ae:45:
d2:15:9a:2d:94:5b:43:04:5a:73:93:e0:4b:08:ea:
f3:bd:b0:f0:0a:80:a8:88:4d:4c:72:f8:8e:c3:2c:
1f:69:d0:1f:76:9f:d7:b6:cc:b7:1c:98:4f:7b:e6:
fb:a6:a8:c1:af:96:75:cb:7f:bf:8a:d7:4c:10:eb:
ea:88:34:79:46:fa:3d:89:a3:15:f3:40:ed:41:ff:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:50:93:AE:14:36:3E:33:5E:10:89:F9:93:79:B3:18:2B:2F:8B:EF
X509v3 Authority Key Identifier:
keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/31CTrhQ2PjNeEIn5k3mzGCsvi-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.24.0/22
Signature Algorithm: sha256WithRSAEncryption
74:f0:9c:4e:b7:77:a9:8a:1a:a2:fd:cf:82:8c:8c:a8:8f:04:
b4:02:b8:b4:14:23:c8:e0:53:3a:0a:25:5b:29:53:90:24:2e:
26:95:12:47:d0:e7:08:aa:08:1d:ca:d2:eb:aa:41:b6:3d:9b:
e0:21:22:2b:0e:29:a0:ce:f9:2d:07:97:61:67:a0:1e:ce:08:
11:ac:66:77:f9:96:b5:f6:a3:23:b4:eb:b4:35:9c:4f:04:fc:
31:62:49:98:4e:bc:c9:f3:04:a4:82:9e:73:b1:fc:b1:89:c3:
4e:99:d9:fa:2f:85:01:2f:48:8c:2a:f0:ce:68:fc:0a:f4:68:
d2:b8:7c:d1:7c:a2:4a:a4:e7:e7:59:84:77:26:a0:1a:7e:7d:
bc:db:2e:25:cf:ce:4f:46:b0:94:d6:62:2c:bf:28:ff:be:b8:
b4:f1:e6:7e:9a:e3:66:bb:e4:c1:9f:8c:e7:51:d2:df:d3:0c:
ba:c1:c0:a2:ba:e5:05:7d:91:cd:24:04:23:62:95:6d:fc:d6:
8b:d7:bd:27:c1:e1:33:e9:61:5d:3d:71:16:71:f9:5c:85:b6:
e6:a5:a3:88:6b:46:e8:2b:bd:b0:85:bb:f6:ad:ee:36:f6:51:
ca:ac:3b:45:5e:35:f0:31:ce:f6:ee:33:68:da:5f:a5:21:1c:
a4:ec:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 03:08:48 2026 by rpki-client