Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/5ukW421oA_Y9rQVf2oYR9GaYWDE.roa
File: 5ukW421oA_Y9rQVf2oYR9GaYWDE.roa (raw, json)
Hash identifier: rXygKOXEBMMmtpqtAplwaaNQkSmEjCas9o86oxnjOD0=
Subject key identifier: E6:E9:16:E3:6D:68:03:F6:3D:AD:05:5F:DA:86:11:F4:66:98:58:31
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 01A131B21D6C6155AB4594CB96A95C0B0F03
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/5ukW421oA_Y9rQVf2oYR9GaYWDE.roa
Signing time: Mon 12 Oct 2026 19:58:38 +0000
ROA not before: Mon 12 Oct 2026 19:58:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219399
IP address blocks: 31.172.69.0/24 maxlen: 24
31.172.79.0/24 maxlen: 24
81.85.77.0/24 maxlen: 24
89.127.199.0/24 maxlen: 24
130.17.3.0/24 maxlen: 24
130.17.29.0/24 maxlen: 24
194.154.27.0/24 maxlen: 24
199.195.196.0/24 maxlen: 24
217.177.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b2:1d:6c:61:55:ab:45:94:cb:96:a9:5c:0b:0f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Oct 12 19:58:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6e916e36d6803f63dad055fda8611f466985831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:87:5b:5e:71:c3:c6:8b:1b:38:41:e5:1f:
6d:9c:61:34:5f:46:7a:87:4b:db:53:08:d6:3e:68:
bd:66:6d:58:b9:4d:c7:e6:0b:32:23:ba:ef:96:2e:
f2:08:b1:02:10:e4:02:f4:a7:76:ba:77:32:c6:29:
48:1c:6e:5e:01:39:74:28:0a:47:ed:20:83:c0:12:
e6:79:d3:1d:52:82:d3:83:82:77:21:28:9c:0f:ac:
df:e1:18:3e:32:95:ec:11:6e:fd:aa:3e:d9:ec:cd:
db:54:74:74:bf:2e:a2:01:01:21:e5:b3:76:01:2c:
96:3e:99:b2:cc:50:28:a2:1d:9b:23:98:33:56:52:
4b:41:ff:0a:c8:37:a9:92:4a:f7:5b:3c:5f:b8:13:
55:a4:5b:ce:66:4d:37:fb:2d:bf:7e:12:cb:e3:6a:
46:8f:60:84:e8:5a:1b:0d:c1:12:ab:85:cb:29:4e:
03:e2:2a:cb:be:b7:a2:8f:57:34:a5:f9:9a:53:0b:
37:81:41:2c:84:28:19:6e:72:9c:f3:86:1c:3f:fd:
d3:81:24:8e:35:82:97:99:91:3c:2d:e8:85:1a:d7:
b1:f5:8c:d1:43:f9:f3:6c:5c:d6:a5:f1:36:67:82:
65:d4:f4:5c:74:9f:15:7a:96:5c:89:06:27:0e:cb:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E9:16:E3:6D:68:03:F6:3D:AD:05:5F:DA:86:11:F4:66:98:58:31
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/5ukW421oA_Y9rQVf2oYR9GaYWDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.69.0/24
31.172.79.0/24
81.85.77.0/24
89.127.199.0/24
130.17.3.0/24
130.17.29.0/24
194.154.27.0/24
199.195.196.0/24
217.177.75.0/24
Signature Algorithm: sha256WithRSAEncryption
53:bc:15:32:ed:3c:18:47:ac:c5:42:c1:b0:bc:08:bf:1d:47:
1f:3b:81:4b:9e:cd:7b:1d:fc:b9:18:c7:5d:de:24:e2:30:44:
3b:fa:2f:3e:0a:c0:70:83:18:ef:13:bd:34:88:27:8d:39:e2:
0a:5a:4c:1a:25:b6:97:db:96:73:8d:8e:63:ee:34:43:1f:2c:
98:81:dc:7f:d7:60:6b:33:14:aa:64:08:16:4e:9c:20:bf:22:
14:4a:34:02:de:08:06:5d:c3:3b:9e:3b:56:ac:b6:e4:27:2b:
6c:50:2b:d9:55:35:55:72:d5:0f:69:f3:d0:7d:85:0e:f5:4b:
4b:43:16:e5:4f:b8:a7:7f:48:e3:ff:59:41:84:ea:29:78:b8:
a7:36:cc:b8:ee:ed:6e:d3:65:ca:25:b1:68:df:13:aa:f9:b8:
d7:28:7b:6d:77:bc:9f:40:ee:8e:db:25:f6:1f:37:77:b4:8b:
2e:2c:6d:ac:9d:a1:19:6f:90:6c:cc:46:e2:04:67:d8:8e:98:
e0:d3:e0:e1:96:a3:7c:9d:ed:9d:58:ad:99:cd:15:7d:66:d2:
b2:da:56:7a:32:9b:58:33:76:d6:ed:38:f8:0d:2b:0f:52:1d:
bc:2a:16:80:5a:5c:92:47:6b:5f:11:a3:50:40:2d:02:6f:de:
b9:b9:7b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:44:03 2026 by rpki-client