Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/L8ziuzN9ZJW99zUB2j6no1744bQ.roa
File: L8ziuzN9ZJW99zUB2j6no1744bQ.roa (raw, json)
Hash identifier: aqgFAVHEHZXpTrGrUTYwK9YoeQyCzW64mBEocLytb2c=
Subject key identifier: 2F:CC:E2:BB:33:7D:64:95:BD:F7:35:01:DA:3E:A7:A3:5E:F8:E1:B4
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019E516425F78FA301290A4281C62731E518
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/L8ziuzN9ZJW99zUB2j6no1744bQ.roa
Signing time: Fri 22 May 2026 20:32:58 +0000
ROA not before: Fri 22 May 2026 20:32:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48040
IP address blocks: 31.172.65.0/24 maxlen: 24
81.85.79.0/24 maxlen: 24
89.127.193.0/24 maxlen: 24
89.127.201.0/24 maxlen: 24
89.127.204.0/24 maxlen: 24
89.127.207.0/24 maxlen: 24
89.127.212.0/24 maxlen: 24
89.127.222.0/24 maxlen: 24
162.248.163.0/24 maxlen: 24
185.21.11.0/24 maxlen: 24
194.154.25.0/24 maxlen: 24
194.154.31.0/24 maxlen: 24
199.68.198.0/24 maxlen: 24
199.68.199.0/24 maxlen: 24
213.239.158.0/24 maxlen: 24
2a02:6b40:800e::/48 maxlen: 48
2a02:6b40:800f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:64:25:f7:8f:a3:01:29:0a:42:81:c6:27:31:e5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: May 22 20:32:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fcce2bb337d6495bdf73501da3ea7a35ef8e1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:45:6c:88:6a:17:2b:e3:c5:76:a7:18:e9:
51:f6:2f:aa:3c:67:70:2d:da:86:70:71:1d:82:a8:
28:b8:32:e6:b6:b0:d2:e9:ac:29:28:45:45:8c:d4:
12:ca:9f:53:2e:4f:67:61:da:12:78:34:1c:5a:ab:
13:6d:0d:34:78:4b:dd:85:94:86:fd:d1:4c:c1:8a:
80:46:d0:ed:7a:f4:45:80:61:e3:29:a3:bd:da:17:
0a:bd:71:e4:fc:01:57:78:ba:53:8b:e6:a7:9f:f8:
0c:e9:af:d8:ad:36:d9:a6:35:38:73:c2:cc:f9:98:
46:7d:18:fa:b4:b8:c9:04:28:ab:5e:87:4f:96:32:
26:ba:4d:58:18:a2:8e:d9:62:c4:85:66:32:11:56:
73:5d:89:65:58:44:f9:9c:09:dd:66:72:01:a3:61:
55:c6:03:db:95:5c:80:2a:f0:6e:19:92:2e:8b:8f:
73:cf:4b:6b:b8:a8:58:69:9b:3c:54:a1:4e:96:1a:
36:33:21:76:3a:c1:6b:d3:e0:e1:22:10:cd:cd:4e:
89:61:dd:69:4f:ef:88:01:e7:91:de:43:91:c9:ab:
cd:53:e9:b8:ca:a7:20:92:6f:a4:fd:21:06:97:e0:
98:3e:2d:e4:f4:cd:57:be:23:23:f1:1a:5f:cc:64:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CC:E2:BB:33:7D:64:95:BD:F7:35:01:DA:3E:A7:A3:5E:F8:E1:B4
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/L8ziuzN9ZJW99zUB2j6no1744bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.65.0/24
81.85.79.0/24
89.127.193.0/24
89.127.201.0/24
89.127.204.0/24
89.127.207.0/24
89.127.212.0/24
89.127.222.0/24
162.248.163.0/24
185.21.11.0/24
194.154.25.0/24
194.154.31.0/24
199.68.198.0/23
213.239.158.0/24
IPv6:
2a02:6b40:800e::/47
Signature Algorithm: sha256WithRSAEncryption
36:38:4a:cd:97:78:18:2b:4f:49:54:e8:6d:18:f2:3e:ca:24:
d0:58:30:22:8d:da:96:e9:53:7a:59:7f:db:f8:ec:51:58:d5:
ad:d0:b7:54:86:77:44:4e:91:98:d9:de:6a:f5:b3:e0:4c:74:
b4:2e:81:9f:52:47:ce:23:9e:26:b6:89:70:b5:80:79:cf:a7:
34:b4:1e:ad:a1:1d:d5:11:74:dd:d9:83:fd:77:0d:ef:e2:d4:
f4:e0:6c:12:87:1b:a5:19:20:b7:31:7a:7f:ec:79:7f:56:c1:
23:58:c5:5c:9e:33:7b:ef:cc:98:28:2f:38:e5:6f:3d:80:9c:
4b:96:62:20:a7:e4:85:13:a6:c8:5b:83:9c:ca:90:2f:87:28:
1b:22:2e:d0:65:36:4f:33:4d:82:32:ef:5e:17:e6:45:43:6a:
41:af:a3:e4:04:01:d8:63:79:b2:80:1e:d5:01:21:1d:1d:39:
5a:33:60:8f:b4:e0:31:b3:9a:ba:0d:c3:57:fe:da:e4:ac:7c:
06:a7:b5:da:3c:5c:a2:49:65:86:af:ec:1b:57:39:4c:ec:12:
e4:83:d2:ff:04:1d:f6:8f:c8:d2:15:50:c2:1e:99:66:ff:b6:
f5:07:66:83:fe:f2:28:94:fb:bd:fc:b9:27:d4:da:f6:71:1c:
e1:03:f4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:53 2026 by rpki-client