Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/22sER8Q6aotytLSswx5BcqthRk8.roa
File: 22sER8Q6aotytLSswx5BcqthRk8.roa (raw, json)
Hash identifier: h6QcC88FwNseaokiVlSbBs/KZh+4618NyFqzLZGdd6I=
Subject key identifier: DB:6B:04:47:C4:3A:6A:8B:72:B4:B4:AC:C3:1E:41:72:AB:61:46:4F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F503345221F568F13729C7E2417D77189
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/22sER8Q6aotytLSswx5BcqthRk8.roa
Signing time: Sat 11 Jul 2026 08:02:45 +0000
ROA not before: Sat 11 Jul 2026 08:02:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202413
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.39.0/24 maxlen: 24
94.183.170.0/24 maxlen: 24
94.183.208.0/24 maxlen: 24
94.183.209.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
94.183.238.0/24 maxlen: 24
94.183.239.0/24 maxlen: 24
94.183.254.0/24 maxlen: 24
217.60.8.0/23 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:50:33:45:22:1f:56:8f:13:72:9c:7e:24:17:d7:71:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 11 08:02:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db6b0447c43a6a8b72b4b4acc31e4172ab61464f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:c7:c9:1d:05:6a:3c:07:c1:d5:4c:e5:2e:
66:04:a3:84:29:0b:d3:54:17:7a:1d:43:63:3b:49:
fd:ff:cc:a8:59:1d:48:52:62:70:a4:8f:c9:b7:e9:
58:91:a3:9f:62:68:d7:20:4b:47:c3:35:9a:52:4e:
1d:e3:61:aa:b5:29:fb:22:c2:2f:44:67:98:2c:f9:
33:0d:2a:fb:e0:af:c7:3c:c7:80:a8:c5:47:00:4b:
b8:53:08:1e:f2:7f:8d:14:53:5e:22:51:3d:2c:4c:
37:bb:fa:a7:dd:1f:79:11:36:c0:47:01:c6:67:33:
61:29:8f:6b:d4:0b:78:8e:08:7b:df:5d:0d:0e:2d:
ee:a5:07:6e:6b:9c:16:4c:9b:bd:08:19:4d:35:b1:
81:e7:33:01:1d:b1:05:29:3f:03:a4:9d:2b:e7:3e:
e2:8a:4d:77:a2:a1:f1:ae:54:34:f4:7a:fd:aa:e0:
78:73:f4:7d:3d:b2:e6:c0:80:d9:f5:ca:21:45:47:
80:18:ef:46:f6:a0:41:1f:16:8e:31:af:2a:3e:58:
7a:9d:11:d0:b7:9e:7b:3a:c1:36:19:95:6a:99:4f:
30:7f:71:27:6e:58:21:3e:0a:fa:94:38:18:25:ec:
e5:48:ca:cf:b5:cf:bb:67:64:cd:2a:cd:e3:17:52:
ea:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6B:04:47:C4:3A:6A:8B:72:B4:B4:AC:C3:1E:41:72:AB:61:46:4F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/22sER8Q6aotytLSswx5BcqthRk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.39.0/24
94.183.170.0/24
94.183.208.0/23
94.183.226.0/24
94.183.238.0/23
94.183.254.0/24
217.60.8.0/23
217.60.24.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d8:6e:56:33:8b:b3:33:38:1c:1e:30:6c:bc:54:9f:c9:cb:
e3:09:08:83:7b:4b:3a:13:7e:0a:63:31:41:2d:7d:ed:82:6c:
9e:e4:cc:8b:fe:cb:e4:34:b3:ab:e5:48:49:0c:71:99:97:59:
91:43:ae:74:fb:23:71:42:e4:b0:ea:ee:75:3f:27:9f:c9:e4:
d7:b7:c8:e8:8d:35:22:c3:db:24:41:3d:57:e4:87:9f:06:1b:
30:6b:16:e4:a2:ec:09:bd:dd:0c:02:df:81:c2:9c:29:d5:b4:
bf:61:f8:8f:50:69:d8:ea:a4:89:be:9a:62:78:fe:ca:65:35:
5d:56:43:08:21:93:f1:44:a6:16:0b:f9:36:14:89:e3:1b:ba:
66:ed:7b:11:b2:2d:8a:8e:61:e5:ef:cd:69:dd:c7:8e:ea:7d:
31:fa:32:a2:08:cc:5a:63:92:47:f8:48:c4:d9:be:ce:51:1f:
6c:10:2a:1d:1e:07:4a:b9:02:13:d4:76:25:0a:79:0f:74:e5:
72:54:8d:f4:03:4c:92:08:f5:4f:7a:23:5d:a4:c3:61:04:ba:
c1:93:12:c0:32:fa:95:87:11:d2:65:8a:09:1f:e3:20:9f:8c:
1c:8c:e1:80:06:10:ac:a0:00:d3:9d:76:f9:e4:ee:e7:8b:60:
85:84:95:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:48 2026 by rpki-client