Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e4Lwiywm3FM-7rruDABXWa2sB1w.roa
File: e4Lwiywm3FM-7rruDABXWa2sB1w.roa (raw, json)
Hash identifier: ukVQoYBKe+Io3kcLDShTxgx12rmUBCyvFkGPrUqHFgo=
Subject key identifier: 7B:82:F0:8B:2C:26:DC:53:3E:EE:BA:EE:0C:00:57:59:AD:AC:07:5C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0B55559F67C682F7C9835A8E69F361488
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e4Lwiywm3FM-7rruDABXWa2sB1w.roa
Signing time: Fri 18 Sep 2026 16:24:24 +0000
ROA not before: Fri 18 Sep 2026 16:24:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212743
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.39.0/24 maxlen: 24
31.59.209.0/24 maxlen: 24
94.183.170.0/24 maxlen: 24
94.183.198.0/24 maxlen: 24
94.183.203.0/24 maxlen: 24
94.183.206.0/24 maxlen: 24
94.183.208.0/24 maxlen: 24
94.183.209.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
94.183.238.0/24 maxlen: 24
94.183.239.0/24 maxlen: 24
94.183.254.0/24 maxlen: 24
217.60.8.0/23 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.67.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:55:59:f6:7c:68:2f:7c:98:35:a8:e6:9f:36:14:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 18 16:24:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b82f08b2c26dc533eeebaee0c005759adac075c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:71:ad:8b:6f:22:dd:31:56:a3:f4:94:80:
c6:03:ef:6b:6a:fe:6b:1d:bd:0b:ce:7c:ec:61:a7:
87:48:ba:31:d4:75:bc:c1:89:52:57:4d:ef:eb:2c:
3f:62:1e:22:9c:58:57:43:4f:a6:aa:3e:0e:40:48:
e1:db:3d:46:c0:2d:c3:7b:32:2d:92:a3:5f:cc:de:
56:62:d9:d4:1e:df:d9:94:1f:d7:3e:f9:e1:7f:4a:
bd:c2:b6:2e:f2:2b:e4:4c:f1:80:1d:83:20:52:de:
1f:ef:e7:fd:44:e9:27:92:33:1f:fe:b9:13:6a:b8:
1e:30:45:ee:ad:cb:74:1f:81:a7:91:34:85:f1:4e:
77:ef:f2:65:b0:c5:00:a5:a9:7c:dd:b3:35:dc:6e:
86:72:06:44:60:cd:53:75:0e:2f:53:44:0a:b1:77:
72:07:59:ab:82:f0:4d:35:84:db:22:55:ee:b8:cf:
47:cd:4b:2d:cd:02:58:48:d6:e1:fc:76:c1:4b:7e:
fe:56:65:a3:1c:52:db:46:71:88:ef:85:bf:c4:59:
31:7c:fc:cd:ff:01:bf:a8:7b:39:55:d3:c4:dc:40:
f9:7e:19:64:94:1a:b6:35:f6:0d:bc:ed:3e:95:88:
2e:79:78:20:a5:d2:a4:0a:1b:3c:29:ec:6b:3a:b2:
10:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:82:F0:8B:2C:26:DC:53:3E:EE:BA:EE:0C:00:57:59:AD:AC:07:5C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e4Lwiywm3FM-7rruDABXWa2sB1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.39.0/24
31.59.209.0/24
94.183.170.0/24
94.183.198.0/24
94.183.203.0/24
94.183.206.0/24
94.183.208.0/23
94.183.226.0/24
94.183.238.0/23
94.183.254.0/24
217.60.8.0/23
217.60.24.0/24
217.60.67.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:56:12:2f:c1:57:ca:88:a4:ba:2d:81:b1:59:ff:6c:3d:e7:
5b:a9:cb:73:3f:ce:2e:72:06:9e:99:1b:bf:f0:9f:dd:6f:ac:
00:a1:f4:52:ec:d8:15:3d:3b:96:64:b9:ad:e3:92:3e:74:70:
53:0e:b1:f4:5d:82:68:c5:29:6f:ad:29:7e:c8:0b:88:27:04:
87:d5:9e:84:2e:8e:06:43:e4:67:31:ce:7e:df:e8:95:64:79:
06:97:c6:01:b4:76:32:c6:a3:b0:58:d8:ee:50:f8:bd:fa:24:
9b:b0:41:91:7b:01:08:94:ba:56:98:ba:67:29:25:5c:37:4e:
15:76:da:d4:e2:33:c4:5e:c5:34:83:75:e0:6d:f9:7d:bd:ef:
16:34:c9:6e:37:7f:94:dd:6f:6b:28:c5:e3:32:c4:26:6e:dc:
91:fe:f0:e4:1d:af:98:af:08:e8:2a:67:9a:c1:04:64:7e:f5:
6f:19:a8:4e:61:8f:6f:47:36:b2:0c:a6:e0:57:cd:02:af:b4:
cc:c6:51:dc:f1:3d:bf:d0:44:28:0f:f4:23:7e:bb:08:ee:9a:
f8:72:a1:62:3f:68:17:78:b9:a0:10:02:50:a9:4c:ee:bf:17:
10:e0:f9:c5:30:be:67:6a:2b:08:10:0e:bf:3d:91:74:94:3f:
36:55:e7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:42 2026 by rpki-client