Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/MI4-yPgoD-ekeThwvYKs_GoPdeI.roa
File: MI4-yPgoD-ekeThwvYKs_GoPdeI.roa (raw, json)
Hash identifier: mItcQOvrd0eFGCPME3E9uJlPA8QtMHI24Fb0PhI64Ao=
Subject key identifier: 30:8E:3E:C8:F8:28:0F:E7:A4:79:38:70:BD:82:AC:FC:6A:0F:75:E2
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019ED2066B3ECE26F506A37B601CED934EF2
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/MI4-yPgoD-ekeThwvYKs_GoPdeI.roa
Signing time: Tue 16 Jun 2026 20:01:36 +0000
ROA not before: Tue 16 Jun 2026 20:01:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 31.172.69.0/24 maxlen: 24
31.172.79.0/24 maxlen: 24
81.85.77.0/24 maxlen: 24
89.127.199.0/24 maxlen: 24
130.17.3.0/24 maxlen: 24
194.154.27.0/24 maxlen: 24
217.177.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 09:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d2:06:6b:3e:ce:26:f5:06:a3:7b:60:1c:ed:93:4e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Jun 16 20:01:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=308e3ec8f8280fe7a4793870bd82acfc6a0f75e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:1c:ab:97:7a:e9:65:20:e5:d4:5f:9f:4c:
2d:e7:19:0f:2f:7c:aa:83:f6:23:82:8b:e8:9f:b8:
df:6b:0c:de:3d:d4:62:c7:19:7d:c8:d8:65:34:6f:
e8:e8:aa:eb:89:e5:c3:45:fd:4e:77:3c:86:07:ae:
9f:29:a6:49:04:a3:25:e0:41:8b:69:ad:1c:46:ed:
16:ad:79:f2:d8:32:72:db:4a:bc:e3:15:63:6d:5d:
5a:6c:47:7a:91:45:c7:e3:ac:cc:66:f0:23:f7:b4:
59:c9:cf:e6:cd:99:42:28:df:72:28:05:10:2a:d0:
df:e4:94:7d:1a:be:50:71:37:9a:0b:fd:7e:13:b7:
7d:a2:0f:2e:87:b6:2b:13:82:0d:85:0e:7d:6e:a4:
d0:3a:99:43:b6:2e:49:f2:b8:0b:02:0c:ca:d2:f4:
05:5d:00:fb:33:54:00:f9:36:1a:ff:33:ce:80:03:
94:9d:2a:e9:a7:e1:dd:7d:5b:e5:2b:80:be:4d:de:
7e:e8:45:0d:2d:fc:64:bb:f6:31:e4:85:d2:5a:f2:
7d:27:b9:5e:79:99:6f:61:89:f5:87:35:1e:40:df:
76:b2:d2:ec:c6:00:15:56:c2:2c:30:ae:36:b3:7b:
67:c7:8a:35:3e:81:31:92:05:3a:8a:53:91:50:f4:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8E:3E:C8:F8:28:0F:E7:A4:79:38:70:BD:82:AC:FC:6A:0F:75:E2
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/MI4-yPgoD-ekeThwvYKs_GoPdeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.69.0/24
31.172.79.0/24
81.85.77.0/24
89.127.199.0/24
130.17.3.0/24
194.154.27.0/24
217.177.75.0/24
Signature Algorithm: sha256WithRSAEncryption
05:26:d8:c8:f1:3c:a9:50:6f:51:a2:c1:20:de:49:c1:00:2f:
15:4e:58:1d:ad:36:e9:f6:f3:b0:a8:13:b8:82:2d:b0:ba:00:
ee:9d:4d:4d:32:06:45:96:84:49:c4:a3:b8:bd:be:58:63:99:
43:a6:a1:73:83:fa:b0:73:8a:6a:cb:0f:1d:cb:95:48:23:e0:
97:f4:b1:c5:66:e6:64:b5:1a:2d:f3:ed:2e:ec:d2:03:e2:80:
f0:31:7e:de:73:d2:10:09:a3:a3:98:9d:cf:69:66:f6:83:70:
bb:d4:d8:6e:4c:a8:fb:b8:fd:a6:4a:e8:9c:7a:79:b2:d9:29:
75:e5:a9:7c:21:db:88:35:ae:3a:5d:07:35:eb:50:71:2d:71:
47:48:d9:6d:38:a5:fa:6f:4b:59:cc:00:b1:6f:08:82:79:1f:
f2:2d:2d:7e:d4:cd:e9:39:ad:e3:81:c5:62:09:6d:a6:84:e9:
4a:16:3d:83:6c:57:07:d7:ea:84:07:dc:ce:fb:2c:1d:a6:1a:
02:0d:53:15:50:0e:2a:3d:bf:bb:04:8d:33:cb:ae:c7:7b:c5:
0d:14:dc:6d:1b:63:e9:da:00:7c:1c:3d:81:8b:15:19:f5:64:
55:0c:be:05:f3:28:c2:4e:e8:12:47:69:1d:3f:7b:33:77:79:
83:f8:a7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 17:08:06 2026 by rpki-client