Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/zFoXsQ5TqoX8H4OJg8gshkGDSoY.roa
File: zFoXsQ5TqoX8H4OJg8gshkGDSoY.roa (raw, json)
Hash identifier: 1/lNAIoklxBbYzhTd9H1F8HgznVYVdAzulj82IXbCic=
Subject key identifier: CC:5A:17:B1:0E:53:AA:85:FC:1F:83:89:83:C8:2C:86:41:83:4A:86
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019F38029F3853D856B1A2D96934DEF17BDC
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/zFoXsQ5TqoX8H4OJg8gshkGDSoY.roa
Signing time: Mon 06 Jul 2026 15:18:43 +0000
ROA not before: Mon 06 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30893
IP address blocks: 31.22.91.0/24 maxlen: 24
31.22.92.0/24 maxlen: 24
31.22.93.0/24 maxlen: 24
31.22.94.0/24 maxlen: 24
185.231.100.0/22 maxlen: 24
195.47.238.0/24 maxlen: 24
2a0c:5700::/29 maxlen: 48
2a0c:5700:3133::/48 maxlen: 48
2a0c:5700:3135::/48 maxlen: 48
2a0c:5700:3136::/48 maxlen: 48
2a0c:5700:5353::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:02:9f:38:53:d8:56:b1:a2:d9:69:34:de:f1:7b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Jul 6 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc5a17b10e53aa85fc1f838983c82c8641834a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:a6:7f:74:e4:b2:2f:74:67:15:53:e8:f8:
8c:40:ad:2a:85:36:70:db:cf:47:4d:f5:a4:4f:58:
e0:9b:eb:a8:09:c6:2c:46:f7:51:d6:82:a9:ab:67:
60:7c:04:84:be:ef:c3:ba:37:6d:ab:e1:c8:ff:82:
61:3e:ac:f1:2b:fe:6a:56:1f:eb:fe:da:a1:5e:e3:
37:62:bf:5d:af:86:2c:8a:5b:07:93:68:43:9b:74:
10:db:18:b4:83:2b:2e:15:db:01:b2:d8:f2:c3:c4:
67:74:d0:07:e8:a0:94:66:16:f1:8c:de:f2:f1:7b:
2d:15:5e:88:28:01:76:96:c9:56:a4:88:9e:e2:a4:
5c:74:40:5d:c1:d3:6b:2a:19:6d:8f:d9:5d:bb:9d:
55:93:1e:ac:67:10:3f:15:b8:07:0a:30:a3:60:77:
0b:87:34:dc:d5:dc:9b:6f:e3:5b:54:fa:6f:b5:47:
31:ef:9e:f8:f8:41:65:98:f8:0e:13:3b:f5:c4:a6:
52:42:2f:f6:46:58:e4:6e:73:3d:dd:f0:fa:50:f2:
f3:b2:e8:2b:c0:ce:9c:a3:fc:7c:37:1e:5e:0b:af:
8d:55:c1:e7:76:13:52:f0:ca:0b:18:b9:74:21:5d:
7f:a5:4e:3e:cf:8e:ae:4b:6d:c0:b6:34:4d:c9:50:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:17:B1:0E:53:AA:85:FC:1F:83:89:83:C8:2C:86:41:83:4A:86
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/zFoXsQ5TqoX8H4OJg8gshkGDSoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.91.0-31.22.94.255
185.231.100.0/22
195.47.238.0/24
IPv6:
2a0c:5700::/29
Signature Algorithm: sha256WithRSAEncryption
4d:6c:9e:a1:2e:4d:a9:7b:2f:0b:53:99:81:86:d4:dc:5f:c8:
9c:61:ba:ba:5e:14:53:91:17:85:10:79:93:4f:96:3e:2f:66:
76:4e:12:0f:cc:09:31:1a:1c:d3:ce:42:78:5e:a7:e7:b6:86:
0e:1e:72:65:b1:7e:c6:7a:a1:8c:af:93:4a:13:5b:58:c4:67:
ed:d2:d4:d7:f2:56:bd:d9:86:06:73:9d:f0:e1:81:8e:cb:30:
eb:16:a9:0c:66:a3:50:e6:2a:b2:30:b1:a7:53:0b:c2:69:15:
8b:ec:d6:85:3e:f0:10:4a:76:55:b4:01:eb:08:a0:f5:c6:3b:
90:0a:31:4c:37:e5:6f:30:88:2d:c7:d4:55:10:76:93:44:c9:
42:d2:76:b8:76:bf:03:1d:bc:5c:63:5a:cc:32:5e:1d:55:ab:
1e:5c:0c:d7:5f:5d:ab:ba:e2:51:4e:b9:d4:d0:3a:39:db:50:
f8:22:08:50:65:ff:ec:b8:95:04:1a:ea:34:01:4f:43:d8:bf:
08:00:e1:72:28:0a:d4:41:c9:84:c1:cd:e8:d5:54:71:6f:57:
c1:db:ce:3f:d3:8c:7e:a5:cd:0f:4c:90:81:e8:bf:63:85:aa:
57:08:a0:de:3a:c7:45:a6:3a:63:cd:db:67:91:f9:52:35:1e:
85:e2:ea:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:53 2026 by rpki-client