Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NI7GNTHJRPwoH6dYPG-tDBHjCRM.roa
File: NI7GNTHJRPwoH6dYPG-tDBHjCRM.roa (raw, json)
Hash identifier: n4eVhJ7Hj3wRP8Ct1PTbWysy0oOmeuPFxb1M2z1zB74=
Subject key identifier: 34:8E:C6:35:31:C9:44:FC:28:1F:A7:58:3C:6F:AD:0C:11:E3:09:13
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DFE302FA33BCFE6C8818C41D677440DF3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NI7GNTHJRPwoH6dYPG-tDBHjCRM.roa
Signing time: Wed 06 May 2026 16:47:43 +0000
ROA not before: Wed 06 May 2026 16:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 31.58.182.0/24 maxlen: 24
94.183.230.0/24 maxlen: 24
94.183.252.0/24 maxlen: 24
94.183.253.0/24 maxlen: 24
217.60.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:30:2f:a3:3b:cf:e6:c8:81:8c:41:d6:77:44:0d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 6 16:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=348ec63531c944fc281fa7583c6fad0c11e30913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:34:e9:09:86:d2:6f:b6:3c:f6:e2:5b:bd:73:
98:ba:a8:73:dc:31:08:c1:dd:5c:98:68:b8:72:d2:
40:18:91:10:76:11:fd:84:6f:bc:90:75:e0:b2:8e:
a5:22:ef:52:33:42:b7:1d:d1:a0:14:94:40:f8:d4:
e7:ba:1d:53:9a:7e:74:69:8a:a4:10:d6:e2:b6:d3:
d9:20:93:e7:ab:d6:7e:19:da:8e:3b:ae:ff:ab:50:
c0:15:f6:86:de:ae:b0:5a:63:5d:0a:1e:79:7f:f0:
58:ea:e3:f7:39:ce:3f:4f:ce:d7:86:f9:4a:a8:2a:
56:eb:97:6d:9a:d0:55:46:46:d5:1b:f3:fc:dc:3b:
63:f6:7d:df:e4:b3:c5:32:e2:de:a9:18:87:bc:e2:
bc:75:b3:df:ed:6a:6c:83:dd:4a:6c:9b:81:ad:29:
23:f2:4f:6b:70:54:bc:9c:38:6c:46:f9:53:6f:78:
e8:e1:e3:2f:16:6e:c3:d1:c4:a4:df:d0:3a:4d:c1:
93:36:21:22:db:eb:a4:31:6e:61:04:1b:52:a9:11:
dd:0a:88:2f:ae:25:1e:e6:d1:27:a4:45:5d:ed:3a:
02:0b:07:3d:a9:83:31:d6:e3:e9:4e:00:00:65:11:
bb:35:b0:2b:eb:c2:d4:3d:9d:6a:51:54:5a:c4:c2:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8E:C6:35:31:C9:44:FC:28:1F:A7:58:3C:6F:AD:0C:11:E3:09:13
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NI7GNTHJRPwoH6dYPG-tDBHjCRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.182.0/24
94.183.230.0/24
94.183.252.0/23
217.60.185.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:07:f5:f9:34:c3:f4:ef:8a:3c:c4:01:2a:d6:c9:25:77:cf:
1f:15:10:44:a0:19:bb:b6:f3:aa:aa:7a:33:4b:08:45:08:65:
c1:e1:35:ba:d2:c5:0a:92:23:50:1c:4d:5d:25:7b:e0:d7:b6:
d9:88:01:8c:c5:b0:3f:fa:ef:cd:84:4e:f3:aa:52:7b:8e:f5:
c0:25:65:82:fd:50:17:94:39:e7:e3:7d:4f:4d:ec:95:36:4f:
26:9f:95:e3:85:fb:75:4e:73:5a:63:35:5a:e2:3c:13:ed:34:
5a:8a:94:79:96:af:9c:6e:6f:51:c5:e4:89:7e:2d:ea:1c:92:
d0:f4:6c:24:f8:59:af:a9:1a:91:1e:4a:cd:7c:6a:7e:c4:da:
15:34:4b:f2:e0:37:81:fc:0e:32:f6:c7:6f:60:88:ad:19:73:
47:cd:e4:6e:6f:f5:5d:c3:ff:7a:87:d8:dc:ee:fc:ce:97:cd:
c4:1c:29:ca:64:59:7e:5e:a2:92:85:dd:2f:1f:e3:cd:78:ca:
0d:19:8a:36:25:5d:12:b5:39:91:41:60:25:0a:60:58:c3:25:
4c:a3:fa:43:a6:e5:68:f9:e5:ce:d8:8b:0e:d4:81:a2:d2:c3:
09:99:7a:d1:e4:24:ac:00:cc:8b:55:b0:ef:21:1a:0c:35:ba:
96:54:50:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:07:23 2026 by rpki-client