Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0C2-SmkFCEh7hPfxk90RT4NJEQs.roa
File: 0C2-SmkFCEh7hPfxk90RT4NJEQs.roa (raw, json)
Hash identifier: EMUtc8gNJL/wTdkRXcgwZmIErKaZ5Q5KoFXskc4FLKM=
Subject key identifier: D0:2D:BE:4A:69:05:08:48:7B:84:F7:F1:93:DD:11:4F:83:49:11:0B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1B03BC6840CEC88436392372B2063A662
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0C2-SmkFCEh7hPfxk90RT4NJEQs.roa
Signing time: Fri 06 Nov 2026 09:41:09 +0000
ROA not before: Fri 06 Nov 2026 09:41:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 31.57.37.0/24 maxlen: 24
31.57.185.0/24 maxlen: 24
94.183.174.0/24 maxlen: 24
217.60.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:3b:c6:84:0c:ec:88:43:63:92:37:2b:20:63:a6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 6 09:41:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d02dbe4a690508487b84f7f193dd114f8349110b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:15:7e:f9:9f:19:d6:7e:4f:e0:4f:d6:b0:
71:32:dc:3b:12:2b:0c:b8:07:dd:69:70:06:0f:35:
d8:5f:c7:7d:d4:79:f6:ad:da:0d:33:d4:03:fe:6a:
f9:5d:6a:55:a0:8c:1a:85:17:5f:62:96:24:45:4c:
0f:06:1e:69:fc:21:1c:29:52:ef:30:e0:8d:1e:ff:
e0:9c:2d:11:58:fe:79:79:74:97:03:70:0a:fc:b0:
0f:f7:a1:40:4b:e1:9e:3b:e9:87:11:40:f5:63:17:
1e:8e:cb:82:71:45:a8:b2:2a:6a:1b:82:e7:b9:cf:
da:35:1c:1c:c1:ca:78:b2:57:dc:43:4d:49:8d:d7:
3d:95:08:24:f8:32:ae:4d:fe:55:c7:28:69:90:d3:
bb:40:e0:9b:92:f4:78:f5:27:7f:67:17:02:78:51:
03:5f:b4:fa:7b:7e:bc:e6:bc:e0:aa:ad:15:ce:47:
4e:25:df:99:05:9f:19:cb:1e:37:ae:bd:b1:6e:ce:
81:8f:f6:83:23:91:c6:48:04:5f:1f:51:53:1a:3b:
f0:89:55:d4:94:81:ef:57:1e:30:55:ed:4b:2f:2b:
0d:c6:8f:9f:29:94:6c:43:73:38:e1:2e:51:db:0c:
28:90:be:de:d8:14:71:df:48:c6:87:ce:5a:c6:55:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2D:BE:4A:69:05:08:48:7B:84:F7:F1:93:DD:11:4F:83:49:11:0B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0C2-SmkFCEh7hPfxk90RT4NJEQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.37.0/24
31.57.185.0/24
94.183.174.0/24
217.60.241.0/24
Signature Algorithm: sha256WithRSAEncryption
38:39:a7:bd:1d:b4:52:0d:50:c0:6b:8e:9c:dd:2e:45:4c:67:
d1:57:85:b0:a3:3b:43:20:1b:94:3f:35:60:71:74:f4:c0:48:
98:73:2a:36:43:a7:c3:7f:6f:b0:7c:98:9f:8c:ce:5c:7f:d1:
a8:f6:8c:cc:f4:74:b7:f5:a9:33:20:63:3a:5b:6f:63:05:47:
5a:80:23:a8:1e:ab:2a:e8:ac:94:df:47:ae:a6:1d:df:97:89:
ee:61:41:13:81:b4:aa:3c:05:6a:b1:23:97:b1:c9:f7:84:6c:
95:f9:19:3a:c5:40:33:ef:60:59:a5:6b:75:e1:fe:92:96:e0:
f7:da:53:59:83:20:e3:d8:c2:1a:69:70:fc:83:d6:5d:46:29:
dc:d4:b5:f3:19:00:5d:64:ef:62:9c:ee:bd:39:d2:21:b0:78:
a0:d9:27:5f:99:0c:6c:15:fc:1b:6e:24:60:54:a6:6f:65:60:
c4:32:99:83:91:1e:be:90:98:b9:5e:fd:1d:b3:fb:88:6d:c2:
3e:f5:f7:d0:85:5e:13:ee:77:87:68:90:e3:06:81:f3:f7:24:
1e:37:ed:f8:8e:9a:82:d8:7a:b1:74:2e:c3:10:2f:3f:ae:c7:
0a:4d:3d:07:00:ae:b6:54:67:7f:2e:f0:04:1d:4b:84:c2:b5:
e3:4e:3e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 19:45:55 2026 by rpki-client