Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/kQohzrGvabDbphNJEZe46Efa3yk.roa
File: kQohzrGvabDbphNJEZe46Efa3yk.roa (raw, json)
Hash identifier: ZU/Qi3R1fxI1ErrHkxAk+kh6ZGrQUja4saILLw5MFNg=
Subject key identifier: 91:0A:21:CE:B1:AF:69:B0:DB:A6:13:49:11:97:B8:E8:47:DA:DF:29
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019DB8D6EECCF2977F9657BC7CD7D6FE39B9
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/kQohzrGvabDbphNJEZe46Efa3yk.roa
Signing time: Thu 23 Apr 2026 05:36:26 +0000
ROA not before: Thu 23 Apr 2026 05:36:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48018
IP address blocks: 31.172.64.0/24 maxlen: 24
31.172.66.0/24 maxlen: 24
31.172.67.0/24 maxlen: 24
31.172.76.0/24 maxlen: 24
81.85.78.0/24 maxlen: 24
89.127.197.0/24 maxlen: 24
89.127.209.0/24 maxlen: 24
199.68.197.0/24 maxlen: 24
217.177.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b8:d6:ee:cc:f2:97:7f:96:57:bc:7c:d7:d6:fe:39:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Apr 23 05:36:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=910a21ceb1af69b0dba613491197b8e847dadf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:03:be:28:56:12:4b:64:9f:4b:c0:7b:bd:
19:c4:ed:c4:a0:75:62:75:26:95:80:df:17:49:98:
13:85:8a:e7:8f:28:82:48:a7:9b:ca:21:10:7d:0e:
2a:44:0f:35:e4:06:f1:f7:3e:b5:c8:17:ce:b3:07:
43:b6:4f:e5:6d:95:6e:d3:6d:38:f9:3c:59:11:d7:
7d:dc:7b:a4:7f:9d:e4:97:4c:69:0b:80:bc:50:e2:
bb:ad:ed:6b:08:3e:61:72:d6:64:63:b6:f0:e3:e4:
3b:8e:fb:b0:3a:89:af:e4:54:0d:1b:e3:2b:f4:95:
31:99:32:e3:ed:fe:e8:03:59:f1:b9:cb:d4:22:21:
b4:c7:e7:15:b3:80:39:6f:af:15:de:b7:d5:16:d0:
3a:09:03:85:fa:05:03:c9:d4:3e:f2:91:ee:63:d0:
a8:d0:b5:a0:9c:a6:99:d1:af:13:1d:6a:a7:55:da:
be:cd:2f:6f:6b:bd:86:10:e0:4b:75:62:59:58:7f:
0f:b4:94:4e:6f:be:70:0a:fe:84:8f:c2:f5:bc:a6:
87:43:81:64:fe:f8:e0:aa:a8:de:7e:b8:1a:5c:08:
b7:da:03:f1:86:41:1b:82:e7:ad:5c:90:5f:13:cc:
05:7f:cf:95:ab:e9:c0:31:e2:8e:21:75:42:30:17:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0A:21:CE:B1:AF:69:B0:DB:A6:13:49:11:97:B8:E8:47:DA:DF:29
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/kQohzrGvabDbphNJEZe46Efa3yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.64.0/24
31.172.66.0/23
31.172.76.0/24
81.85.78.0/24
89.127.197.0/24
89.127.209.0/24
199.68.197.0/24
217.177.74.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:01:b6:bf:0d:2a:a4:e3:7a:bf:da:f2:19:9e:81:f9:41:d0:
4b:b4:81:94:e2:14:9b:18:b4:12:f4:1a:d0:1a:9e:8b:5b:55:
7d:cf:73:ba:c2:f4:a3:00:84:23:f6:3b:ae:7c:d3:e2:78:dc:
22:ef:2a:2d:ab:70:b5:ed:40:85:c0:28:7d:61:df:43:82:58:
d8:5e:f6:56:2e:c8:5e:6c:f0:e1:07:02:83:43:bd:d5:c6:57:
a8:de:92:f5:bb:22:e9:b2:5a:63:63:29:65:f1:88:73:f1:d9:
e4:e6:64:39:ae:ae:7d:63:75:3e:f0:14:3c:fd:12:22:32:a2:
bf:f8:c3:c1:9a:6b:13:48:d9:5f:87:0a:a8:5d:df:ed:a8:01:
d3:8a:30:69:bd:7c:cc:44:ae:cf:54:4e:81:24:b1:52:fa:58:
59:f4:b4:2d:ed:9c:cc:f2:50:10:e1:2a:10:29:f6:4d:f5:32:
1f:6f:24:ea:9d:a6:6f:05:2c:a4:38:b6:7e:82:d4:60:22:9f:
56:05:81:25:f2:0d:3a:25:e7:51:9e:c6:1e:2f:78:8d:55:c1:
53:59:54:6b:67:87:a7:54:4b:0b:de:cd:eb:b2:c2:3d:b8:67:
3e:cb:ab:3b:fb:c1:5f:4b:40:5e:cf:4c:98:cb:52:f2:33:ea:
9f:af:a9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:15:23 2026 by rpki-client