Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/y-MtqUQxYN7HeVnOQGAy52MjLe8.roa
File: y-MtqUQxYN7HeVnOQGAy52MjLe8.roa (raw, json)
Hash identifier: /bCO17JMK+2NzpP4wufXIXJcR0ZbA6NT7EQZcGDDLZI=
Subject key identifier: CB:E3:2D:A9:44:31:60:DE:C7:79:59:CE:40:60:32:E7:63:23:2D:EF
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019FBE6EB9FFA953D1098AADFDF9796A05E4
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/y-MtqUQxYN7HeVnOQGAy52MjLe8.roa
Signing time: Sat 01 Aug 2026 17:45:55 +0000
ROA not before: Sat 01 Aug 2026 17:45:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 31.172.69.0/24 maxlen: 24
31.172.79.0/24 maxlen: 24
81.85.77.0/24 maxlen: 24
89.127.199.0/24 maxlen: 24
130.17.3.0/24 maxlen: 24
194.154.27.0/24 maxlen: 24
217.177.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 23:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:be:6e:b9:ff:a9:53:d1:09:8a:ad:fd:f9:79:6a:05:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Aug 1 17:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbe32da9443160dec77959ce406032e763232def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f0:06:4d:4b:bd:03:60:12:b4:3c:9d:21:9c:
bb:25:d7:7f:13:09:71:df:81:9a:ba:0f:58:07:3a:
8a:60:fc:5a:7f:98:31:e9:f6:66:a3:99:f2:96:f7:
64:89:8c:4e:b8:f4:aa:9d:71:ad:ab:97:04:16:29:
ef:a4:f4:06:44:03:41:7d:8d:22:dc:58:14:d7:29:
84:e7:21:5c:a4:de:35:52:3e:20:9d:3d:5b:c2:6e:
01:fc:ee:ff:af:64:15:91:19:b3:8d:11:4f:a2:1c:
53:b7:95:95:a6:58:6e:67:d6:22:2f:74:1d:38:ee:
80:59:d6:50:46:15:66:bc:a9:d0:ce:67:83:1a:ea:
87:85:23:38:d8:52:33:b5:89:e6:5f:61:7b:52:53:
7f:15:02:7f:fe:93:4a:82:03:9f:4e:0f:8d:e6:47:
74:f0:fd:89:89:72:26:06:d5:db:85:40:73:8f:5f:
2d:a8:1f:8d:e5:fe:b5:62:d6:2f:4e:2b:ed:e7:62:
3d:d6:0f:a9:e5:84:b3:fc:69:3a:05:b3:5e:ea:4c:
9c:09:9f:40:7c:60:94:6a:eb:d8:e4:86:a0:51:70:
f8:f9:ee:c6:fe:bd:15:2d:9a:96:25:98:c3:78:d3:
39:d6:98:a5:91:49:af:41:44:c7:95:6b:3d:bf:33:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:2D:A9:44:31:60:DE:C7:79:59:CE:40:60:32:E7:63:23:2D:EF
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/y-MtqUQxYN7HeVnOQGAy52MjLe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.69.0/24
31.172.79.0/24
81.85.77.0/24
89.127.199.0/24
130.17.3.0/24
194.154.27.0/24
217.177.75.0/24
Signature Algorithm: sha256WithRSAEncryption
39:93:93:fc:33:08:7f:b2:55:80:89:bd:82:3e:f0:ab:92:66:
8d:61:ca:9a:a0:4c:bd:2e:93:2e:fa:27:6f:db:ca:c9:2d:79:
c0:8b:bd:01:38:f1:3a:61:3b:da:29:c2:73:07:2b:58:d7:eb:
62:7c:0f:b4:24:9b:13:e4:e7:8c:cc:11:b9:35:d2:61:54:c9:
13:26:9b:c9:99:ea:4a:46:5f:37:cf:c2:fd:3d:8e:94:30:c3:
0a:54:25:29:85:42:26:5e:e2:e4:45:b0:bc:14:2a:18:4f:e5:
f8:67:e7:af:a6:b8:2b:18:20:9d:72:87:94:27:9b:c2:24:b7:
2f:31:c5:ce:68:97:84:00:b1:ab:23:d8:8e:e2:39:ed:25:39:
d7:89:b3:20:61:5b:cb:bd:da:ca:9d:9a:7d:e6:a8:b0:aa:0e:
72:4f:76:92:2d:96:53:91:95:73:24:72:07:cd:9d:98:ce:00:
48:b2:37:74:3f:78:bb:72:3c:61:4f:99:92:7b:7a:c5:30:26:
f6:2b:da:43:6f:21:a4:78:09:cb:29:97:cc:11:cf:24:6b:c0:
80:59:07:ab:3c:41:37:dc:d1:fd:1a:16:e4:61:d2:8d:0a:f9:
4e:02:8d:e6:eb:6f:36:58:7f:1d:44:dc:fb:9d:ef:7f:3c:43:
50:9f:35:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 05:22:29 2026 by rpki-client