Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/TuuV3R_pLiwXMlOjTuF_uOOQUKQ.roa
File: TuuV3R_pLiwXMlOjTuF_uOOQUKQ.roa (raw, json)
Hash identifier: x74/PQH6T0L5thYcJT0BIF/7nXPoUee65OsSO1RpsSI=
Subject key identifier: 4E:EB:95:DD:1F:E9:2E:2C:17:32:53:A3:4E:E1:7F:B8:E3:90:50:A4
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019FBE6DCFA2BEFAD32AFC8039606B8A499C
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/TuuV3R_pLiwXMlOjTuF_uOOQUKQ.roa
Signing time: Sat 01 Aug 2026 17:44:55 +0000
ROA not before: Sat 01 Aug 2026 17:44:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48018
IP address blocks: 31.172.64.0/24 maxlen: 24
31.172.66.0/24 maxlen: 24
31.172.67.0/24 maxlen: 24
31.172.76.0/24 maxlen: 24
81.85.78.0/24 maxlen: 24
89.127.197.0/24 maxlen: 24
89.127.209.0/24 maxlen: 24
89.127.217.0/24 maxlen: 24
130.17.2.0/24 maxlen: 24
130.17.11.0/24 maxlen: 24
199.68.197.0/24 maxlen: 24
213.193.198.0/24 maxlen: 24
217.177.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:be:6d:cf:a2:be:fa:d3:2a:fc:80:39:60:6b:8a:49:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Aug 1 17:44:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4eeb95dd1fe92e2c173253a34ee17fb8e39050a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:02:65:dd:f9:82:70:87:f6:9b:61:7c:3a:83:
34:c1:a3:3a:06:4c:3b:31:29:f3:4e:dc:29:ab:2a:
10:be:67:20:79:30:a7:2b:65:3b:1a:b7:2c:99:72:
20:bb:ba:ff:ac:d4:72:98:b5:10:e5:60:60:fd:52:
bd:df:47:8c:c3:69:ed:f0:f0:9e:00:63:47:c1:b2:
60:f5:f9:22:8f:fc:2b:95:ee:bd:ec:57:1f:cd:92:
d7:18:18:2a:60:4f:55:18:6a:af:c7:8e:08:23:db:
e3:f5:24:77:49:87:a8:3b:8a:17:76:ee:af:b0:d2:
c6:8a:25:58:37:e5:9b:97:42:a9:b1:d5:8f:a8:94:
86:56:be:22:37:b2:66:73:73:30:d7:4f:70:ef:66:
f2:d2:71:10:2c:c4:16:e0:4d:e9:f1:01:e2:73:1f:
5c:7d:f0:34:2c:c5:57:a8:63:55:37:1d:7d:87:d6:
a2:95:8f:e3:d1:11:62:2f:e7:b9:99:f8:6c:c8:3e:
82:66:e9:d9:55:30:86:dc:d0:2f:ec:e7:43:da:a4:
8a:4b:35:20:2f:1f:b8:3b:07:3e:43:d5:a0:cd:31:
12:79:6b:d5:86:20:34:fd:0c:fa:98:e0:32:28:cd:
67:15:4f:32:6f:91:cd:f1:81:5a:01:4c:36:42:1b:
fc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EB:95:DD:1F:E9:2E:2C:17:32:53:A3:4E:E1:7F:B8:E3:90:50:A4
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/TuuV3R_pLiwXMlOjTuF_uOOQUKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.64.0/24
31.172.66.0/23
31.172.76.0/24
81.85.78.0/24
89.127.197.0/24
89.127.209.0/24
89.127.217.0/24
130.17.2.0/24
130.17.11.0/24
199.68.197.0/24
213.193.198.0/24
217.177.74.0/24
Signature Algorithm: sha256WithRSAEncryption
00:2a:bb:9c:b7:1a:fd:4d:17:a5:be:34:61:0c:c6:d4:a9:7d:
8d:1c:f0:8d:ea:40:69:c5:1d:8e:cc:d1:63:58:25:c3:14:ce:
36:34:45:e2:0f:f4:fa:79:df:ba:48:61:46:5d:af:92:27:2b:
1b:4f:f8:38:10:51:71:e7:6b:e2:37:f0:95:cb:b6:5f:e3:f0:
b0:b0:e4:fb:0c:12:06:93:31:46:8a:f2:2c:cc:0e:7f:81:78:
3d:d0:d4:23:6a:62:04:57:1c:50:b0:f5:a7:90:70:aa:2c:3d:
91:3c:3b:9f:21:eb:76:4e:a5:3e:da:d5:16:e0:f6:b7:d7:93:
d1:c0:07:1d:e3:27:b0:ec:c1:4b:1c:6a:5f:af:5e:ac:82:4d:
08:af:d5:f8:73:76:51:53:81:ce:11:25:14:f2:49:1e:98:f9:
7c:e8:44:d2:b1:0d:c5:52:68:fa:fe:29:8b:c3:86:82:87:95:
0f:9d:c9:30:ab:0d:de:fb:db:c2:8f:f1:72:04:d4:69:9c:2f:
c1:f6:08:39:d6:77:51:53:fd:6a:ab:a7:f9:27:87:6f:ac:75:
8e:bc:ac:b0:d8:c5:67:14:df:12:a1:e5:2b:0c:0b:bf:37:d2:
cc:a6:39:4c:1d:8a:8f:7b:70:eb:f7:52:1c:f4:60:31:9c:0b:
b4:9b:03:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:18:53 2026 by rpki-client