Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/inY4fz8EgwLQ8s3OTo5Eh3VOA7s.roa
File: inY4fz8EgwLQ8s3OTo5Eh3VOA7s.roa (raw, json)
Hash identifier: Reop8piFYp8KHt9mDe8MA11mk+ERjJjtJOG55cdO0/c=
Subject key identifier: 8A:76:38:7F:3F:04:83:02:D0:F2:CD:CE:4E:8E:44:87:75:4E:03:BB
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019D0664EC256586755C97D349F50B41088D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/inY4fz8EgwLQ8s3OTo5Eh3VOA7s.roa
Signing time: Thu 19 Mar 2026 13:59:30 +0000
ROA not before: Thu 19 Mar 2026 13:59:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56361
IP address blocks: 31.148.40.0/21 maxlen: 24
31.148.52.0/22 maxlen: 24
31.148.56.0/21 maxlen: 24
31.148.104.0/21 maxlen: 24
31.148.112.0/21 maxlen: 24
31.148.192.0/22 maxlen: 24
92.38.80.0/22 maxlen: 24
93.170.166.0/23 maxlen: 24
93.170.192.0/21 maxlen: 24
93.171.34.0/23 maxlen: 24
93.171.36.0/22 maxlen: 24
95.46.128.0/21 maxlen: 24
95.46.166.0/23 maxlen: 24
95.46.168.0/22 maxlen: 24
95.46.172.0/22 maxlen: 24
146.158.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:64:ec:25:65:86:75:5c:97:d3:49:f5:0b:41:08:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 19 13:59:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a76387f3f048302d0f2cdce4e8e4487754e03bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:ff:5f:44:7d:dd:af:9a:95:67:d5:dd:04:
8f:7e:80:6e:b8:41:57:6f:90:24:c0:ed:85:80:82:
16:e2:bb:30:ba:77:91:8b:ec:62:27:2b:9b:cc:35:
ab:f5:98:58:e2:ab:3a:d4:a2:80:b7:4d:5d:c0:fd:
fe:02:e1:14:ef:bb:37:72:12:e7:52:a0:e9:94:91:
1b:b4:2c:97:10:49:e8:e7:3e:31:06:b3:ef:2f:e3:
03:b7:3d:36:18:93:99:46:d5:7a:70:d4:f6:21:80:
ed:85:cb:36:ac:9b:69:d2:24:95:f3:1c:d9:ce:41:
56:a6:8f:0f:ba:5d:b7:6b:a7:50:6d:f8:a2:0f:49:
1d:98:f1:20:92:ad:73:6c:06:2d:6c:5d:c0:74:bd:
16:0d:38:9d:2c:f4:3f:14:f2:18:4c:87:59:a9:9b:
a8:22:b9:db:a7:d4:71:24:24:f7:7b:37:2e:ca:f5:
64:65:3d:53:bf:bd:6a:81:a1:54:cd:c9:81:c7:51:
14:83:ee:2c:52:f9:c0:f4:1e:aa:b5:59:c9:42:70:
41:50:ba:03:5b:c7:07:f9:32:46:62:cc:73:69:a1:
ee:99:3a:04:79:c1:f2:2e:08:3e:a2:b5:ac:62:08:
be:3d:76:f2:e2:86:33:c3:c0:02:98:80:29:34:03:
54:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:76:38:7F:3F:04:83:02:D0:F2:CD:CE:4E:8E:44:87:75:4E:03:BB
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/inY4fz8EgwLQ8s3OTo5Eh3VOA7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.40.0/21
31.148.52.0-31.148.63.255
31.148.104.0-31.148.119.255
31.148.192.0/22
92.38.80.0/22
93.170.166.0/23
93.170.192.0/21
93.171.34.0-93.171.39.255
95.46.128.0/21
95.46.166.0-95.46.175.255
146.158.48.0/21
Signature Algorithm: sha256WithRSAEncryption
56:3b:5f:37:ab:90:eb:6e:24:5f:5e:ab:2f:dc:c2:38:c9:5d:
95:fb:48:6e:de:c9:98:4e:2e:88:8f:13:20:a4:82:28:0d:88:
9b:df:14:ee:17:42:b3:ab:f9:0f:6b:e3:6a:ed:7e:aa:c3:06:
cc:d7:fd:ea:79:b8:3c:53:7f:d1:7f:a3:38:88:bf:4a:2f:dd:
a1:ac:ba:49:4d:71:ff:8c:3b:e3:0d:66:60:2c:ac:f3:da:20:
fc:10:7e:2c:9d:c6:68:7f:b4:fc:57:e6:d4:14:2b:78:fc:0f:
6c:ce:4a:7e:7d:7f:c3:6a:cb:c7:c8:29:a2:01:63:49:4f:e7:
a0:98:85:6a:9b:9b:a1:5e:a8:8f:39:65:af:d5:78:64:4a:2d:
f6:93:03:04:6f:64:ec:1c:4c:0e:89:a8:29:5f:43:31:c2:48:
07:52:5f:08:07:16:89:e4:ad:98:5e:2d:11:cc:04:c8:c8:fb:
a9:07:7d:14:c0:21:27:5c:c1:c3:77:83:39:eb:c1:87:11:dc:
bd:8b:78:56:9e:ec:b3:ff:5b:73:b6:35:ba:91:a8:58:94:cd:
6a:e3:72:08:9e:21:06:9b:fa:bb:38:2e:e3:60:b9:c4:b3:91:
3f:49:a1:c6:5e:f0:fc:d9:8a:24:87:b0:6c:c8:fb:5c:e4:d2:
52:1d:71:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:17:49 2026 by rpki-client