Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-Z6gloedLVvh4hJi5UwR9GmUZA.roa
File: 1-Z6gloedLVvh4hJi5UwR9GmUZA.roa (raw, json)
Hash identifier: T25sLPyuJBQZ2bv5nAwnE3BhPykBVQpp4yozhZBeY9I=
Subject key identifier: D7:E6:7A:82:5A:1E:74:B5:6F:87:88:49:8B:95:30:47:D1:A6:51:90
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A17DB7E082223E3929B7649AC2382B14FE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-Z6gloedLVvh4hJi5UwR9GmUZA.roa
Signing time: Tue 27 Oct 2026 14:16:04 +0000
ROA not before: Tue 27 Oct 2026 14:16:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203861
IP address blocks: 31.58.218.0/24 maxlen: 24
31.59.160.0/24 maxlen: 24
217.60.29.0/24 maxlen: 24
217.60.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:b7:e0:82:22:3e:39:29:b7:64:9a:c2:38:2b:14:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 27 14:16:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7e67a825a1e74b56f8788498b953047d1a65190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8f:63:4b:73:0b:58:e6:7a:36:7f:cc:d3:14:
65:b1:1d:20:95:dc:79:50:2f:81:58:3b:19:30:16:
50:a8:8c:01:89:13:bf:98:73:93:d1:34:ee:08:7e:
22:76:09:89:69:c5:61:ef:2d:e7:04:c9:3d:0e:91:
91:85:b9:f9:3c:32:83:3a:05:a4:8b:ed:c8:42:f4:
68:49:6b:1c:a5:26:e5:ef:e9:a5:3a:fa:be:c7:66:
51:7f:c3:82:d4:e4:18:46:a4:76:7f:af:8b:61:f3:
b9:d6:ac:05:88:70:ed:cf:e3:27:4e:b7:b5:be:eb:
05:c0:3d:b4:93:df:43:b9:4b:7c:3d:49:eb:58:0e:
d5:bf:32:89:8c:65:1c:d3:56:7c:79:42:36:94:e4:
9c:32:51:45:5b:a6:b0:9b:b0:52:13:65:33:85:ee:
4b:f1:65:6c:8b:d2:97:ad:d1:b2:a9:87:fb:99:9f:
ae:e2:81:68:d9:d2:6e:86:60:0a:6a:70:45:48:76:
1e:25:fe:5b:f0:ab:ce:97:80:f5:61:23:d6:57:2d:
e6:98:27:ad:7b:b3:75:67:2e:d9:36:fc:e2:ca:ca:
d9:9e:97:0e:3e:7b:09:09:45:2b:48:8a:8e:15:d1:
3f:83:39:a7:23:13:15:a2:8b:82:f0:dc:2d:25:3b:
d5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E6:7A:82:5A:1E:74:B5:6F:87:88:49:8B:95:30:47:D1:A6:51:90
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-Z6gloedLVvh4hJi5UwR9GmUZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.218.0/24
31.59.160.0/24
217.60.29.0/24
217.60.77.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5e:32:7a:50:5b:ce:ef:fb:26:26:17:0a:46:ba:21:12:68:
9b:1a:79:b0:e4:8a:84:5b:bc:4d:40:2c:b3:8c:05:26:3e:ba:
02:6e:f3:2a:be:42:fb:2d:68:d9:cd:8f:6f:df:79:66:84:f9:
39:41:95:36:d5:b3:24:7a:77:56:74:43:04:18:d2:83:5b:62:
f6:94:79:ed:15:07:62:14:2c:2d:a7:1a:ae:45:da:e3:40:ab:
18:0f:02:d5:2e:5b:c7:6c:03:cc:70:24:c2:82:b4:96:2a:50:
92:12:90:7d:4e:ef:bb:19:c8:1f:d6:87:9a:d9:35:6a:d3:68:
3c:01:16:07:65:0b:28:a9:89:96:80:a4:93:26:4c:db:bd:1a:
1c:a5:c7:af:72:b4:bc:1d:4c:35:b2:81:59:8f:76:5d:e7:14:
f6:88:2c:d5:14:f0:ab:85:ab:ec:9f:22:c9:5a:88:50:e1:42:
86:fa:c5:0a:39:0e:ee:df:23:6d:de:62:28:3c:f9:b6:b2:81:
f9:dd:e4:aa:d4:87:f2:85:f4:b4:d5:20:f3:c8:85:cd:27:08:
fd:4f:8e:cb:e7:02:03:82:d7:94:47:3a:fc:b0:33:55:0a:2f:
0b:da:d6:8f:a9:af:05:16:7d:aa:94:05:da:fa:97:c4:70:a4:
3c:dc:f3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:07:07 2026 by rpki-client