Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/r7okYEliiPaYGayWJrORm3iOHe0.roa
File: r7okYEliiPaYGayWJrORm3iOHe0.roa (raw, json)
Hash identifier: Ry7pFD2VVeVJdZ2ogqW8WamtLwX0AlhiB6D7DLFsEGw=
Subject key identifier: AF:BA:24:60:49:62:88:F6:98:19:AC:96:26:B3:91:9B:78:8E:1D:ED
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019DCAF7BDBDE76DE8C6FE5BC9D8D104D7AC
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/r7okYEliiPaYGayWJrORm3iOHe0.roa
Signing time: Sun 26 Apr 2026 18:05:26 +0000
ROA not before: Sun 26 Apr 2026 18:05:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48014
IP address blocks: 31.41.33.0/24 maxlen: 24
45.88.89.0/24 maxlen: 24
46.183.20.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
93.123.113.0/24 maxlen: 24
151.123.186.0/24 maxlen: 24
2001:3781::/32 maxlen: 32
2001:3783::/32 maxlen: 32
2001:3787::/32 maxlen: 32
2a12:4040::/32 maxlen: 32
2a12:4043::/32 maxlen: 32
2a12:4045::/32 maxlen: 32
2a12:4047::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ca:f7:bd:bd:e7:6d:e8:c6:fe:5b:c9:d8:d1:04:d7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Apr 26 18:05:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afba2460496288f69819ac9626b3919b788e1ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:d0:50:1e:a0:63:8f:cc:26:16:78:ad:df:
32:c6:c9:79:38:84:d9:b7:ec:11:4c:5a:54:8b:db:
7c:32:60:8e:87:cb:92:8e:bd:ef:fe:56:82:9a:fc:
db:62:96:bb:4f:2e:c6:47:e4:f8:61:8c:bb:47:86:
4e:56:84:c4:9d:78:62:19:5e:69:1e:d9:f7:eb:df:
1b:fc:85:91:5f:0b:37:7b:e1:ac:9f:b8:7a:4b:56:
e9:47:fd:26:6d:19:ba:5a:8f:dc:4d:4b:8a:57:7f:
0b:03:16:10:06:53:9d:c3:be:78:15:e1:4d:01:83:
e7:fd:eb:33:55:62:2c:f0:38:74:8d:46:b1:af:0e:
77:35:6e:16:04:50:dc:01:f5:4c:1b:13:de:16:28:
e0:44:c5:a0:a3:db:ce:7e:92:6b:09:49:b9:33:2b:
c0:a5:db:fb:30:f4:d9:65:d4:9e:a4:bb:a5:d3:0c:
1a:83:47:62:f2:75:1b:21:1f:19:ac:4a:d6:57:df:
15:c6:86:bc:e6:80:37:3a:66:43:d7:d0:72:29:29:
4e:73:e9:a9:74:d6:0c:aa:24:71:39:47:77:39:2b:
c0:75:9b:74:ff:e8:e2:86:f5:7f:de:5a:6a:cf:84:
fb:7c:d0:91:fc:bc:c1:1e:a9:71:5a:34:c9:3a:a5:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BA:24:60:49:62:88:F6:98:19:AC:96:26:B3:91:9B:78:8E:1D:ED
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/r7okYEliiPaYGayWJrORm3iOHe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.33.0/24
45.88.89.0/24
46.183.20.0/24
84.54.48.0/24
87.121.60.0/23
93.123.113.0/24
151.123.186.0/24
IPv6:
2001:3781::/32
2001:3783::/32
2001:3787::/32
2a12:4040::/32
2a12:4043::/32
2a12:4045::/32
2a12:4047::/32
Signature Algorithm: sha256WithRSAEncryption
27:92:31:41:79:2f:14:06:80:d9:5e:fa:22:35:74:85:a3:3b:
43:d0:4e:03:33:41:a6:2a:85:dc:e9:5f:de:61:c2:2e:7f:1e:
3b:66:a7:51:03:f0:d6:0a:1d:ff:de:11:e3:08:66:fb:86:43:
8d:c4:3b:b9:b5:2e:2f:ab:c7:eb:23:b8:1c:b4:12:23:3a:fa:
3a:b7:7f:25:21:3e:c7:c2:4b:f4:d3:94:d0:9c:49:a3:f8:7a:
5b:df:92:8b:57:9d:0a:a6:0d:a5:81:55:78:69:02:4c:3e:ec:
54:3c:e5:bf:a8:16:14:c3:be:e9:21:8d:8e:5c:1a:7b:3e:c0:
91:10:ab:88:4c:07:95:49:73:8d:1f:02:b4:49:bb:da:51:dd:
9d:2f:36:77:7d:4b:99:80:5a:1a:0a:a2:c0:40:4e:26:a6:eb:
d4:5d:cb:60:7c:ab:ac:82:a1:d2:a9:99:48:08:f8:93:ab:af:
d3:64:db:e8:31:5f:0e:ed:87:d6:c1:3b:ce:a3:76:10:f8:72:
9c:22:d3:8e:07:f7:f8:ee:c7:83:58:17:48:e7:b3:0b:6f:06:
58:f4:19:a4:cd:53:da:92:a6:2d:57:b3:60:87:0f:4b:8f:43:
11:a6:91:3c:de:cb:d8:37:60:4a:d3:bd:4e:f9:28:11:a1:21:
8f:6f:fa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:19 2026 by rpki-client