Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/An-yON-8-r9L0DQDMhGD3sk31bc.roa
File: An-yON-8-r9L0DQDMhGD3sk31bc.roa (raw, json)
Hash identifier: miEMEQQpwYbXLNF1GOKOC9kUJsEHXLwJ6GIu1E7pOyY=
Subject key identifier: 02:7F:B2:38:DF:BC:FA:BF:4B:D0:34:03:32:11:83:DE:C9:37:D5:B7
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019DD4D9B0E2A7FAF98B940B0F3FC7BE1D2B
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/An-yON-8-r9L0DQDMhGD3sk31bc.roa
Signing time: Tue 28 Apr 2026 16:08:49 +0000
ROA not before: Tue 28 Apr 2026 16:08:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48040
IP address blocks: 31.172.65.0/24 maxlen: 24
81.85.79.0/24 maxlen: 24
89.127.193.0/24 maxlen: 24
89.127.201.0/24 maxlen: 24
89.127.204.0/24 maxlen: 24
89.127.207.0/24 maxlen: 24
89.127.212.0/24 maxlen: 24
162.248.163.0/24 maxlen: 24
185.21.11.0/24 maxlen: 24
194.154.25.0/24 maxlen: 24
194.154.31.0/24 maxlen: 24
199.68.198.0/24 maxlen: 24
199.68.199.0/24 maxlen: 24
213.239.158.0/24 maxlen: 24
2a02:6b40:800e::/48 maxlen: 48
2a02:6b40:800f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:d9:b0:e2:a7:fa:f9:8b:94:0b:0f:3f:c7:be:1d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Apr 28 16:08:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=027fb238dfbcfabf4bd03403321183dec937d5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:9c:f7:7d:26:15:95:fd:3f:6e:aa:d9:e1:
36:d2:45:d8:0f:f8:ae:b2:a3:78:6f:dc:b8:0d:ef:
92:17:ae:df:70:81:68:9a:73:35:6d:d3:a0:da:bb:
02:66:94:44:34:84:cd:2b:43:9f:66:6f:a4:53:a1:
e6:7a:5b:81:4b:f6:7c:c9:14:6d:79:dc:17:72:70:
44:27:f4:bf:4b:2e:45:ed:07:8b:42:f3:12:87:b9:
c1:b3:33:17:0c:e0:24:3a:80:92:2b:8a:18:85:3b:
73:54:ca:f0:76:2e:2c:72:88:e9:eb:5c:85:e9:a6:
05:17:41:53:c9:6e:b3:72:41:a6:e6:35:1d:0d:2f:
2a:a5:95:53:b0:3d:d4:f4:15:ef:44:74:4d:1b:84:
60:76:75:11:61:07:5c:7b:73:c8:36:3f:72:33:a6:
bb:f7:b9:4b:c4:d1:e2:4f:3f:28:94:71:9f:45:6e:
ec:64:6b:a0:11:2d:9b:96:32:cb:58:b2:96:32:50:
c3:ac:57:0a:f8:cc:3b:5d:35:3b:9b:e8:f7:2c:da:
18:bf:8a:c7:ef:bd:d4:fb:4e:a8:8a:f1:b3:59:55:
de:8d:02:58:59:8c:85:f6:8d:04:88:e1:08:94:d3:
47:74:9c:4a:5b:d0:61:84:c3:4f:c6:7c:80:04:5e:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7F:B2:38:DF:BC:FA:BF:4B:D0:34:03:32:11:83:DE:C9:37:D5:B7
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/An-yON-8-r9L0DQDMhGD3sk31bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.65.0/24
81.85.79.0/24
89.127.193.0/24
89.127.201.0/24
89.127.204.0/24
89.127.207.0/24
89.127.212.0/24
162.248.163.0/24
185.21.11.0/24
194.154.25.0/24
194.154.31.0/24
199.68.198.0/23
213.239.158.0/24
IPv6:
2a02:6b40:800e::/47
Signature Algorithm: sha256WithRSAEncryption
6f:c0:48:bd:c1:bf:22:6c:26:d1:e2:ef:e3:45:0e:95:ea:00:
ff:83:b7:47:74:d2:27:9b:21:ad:6b:f9:e5:9f:c3:5f:19:70:
0e:8e:2b:2e:72:94:f5:16:7a:39:7e:d9:5a:75:b4:9e:2f:b9:
be:22:20:6b:eb:d9:ba:ce:9c:7b:b3:c7:67:d0:8a:c3:00:b2:
db:e9:89:47:12:ca:2a:f3:72:11:92:9f:df:c5:bf:5a:30:c1:
3c:1b:04:ca:25:19:0e:ea:a5:8e:02:fa:b5:6b:c6:f4:1a:c3:
0e:6a:85:53:29:37:d2:44:f0:ac:39:05:85:e6:c0:fe:a1:06:
9e:72:b3:91:a6:bf:47:8a:fb:42:ea:37:f5:e8:15:96:d2:b1:
e4:04:bd:fa:b5:cc:f7:23:2d:a6:7e:ea:cb:fd:83:66:70:cf:
65:42:56:73:f2:70:aa:10:4c:2f:e4:23:ad:60:d6:eb:00:39:
27:39:0b:b9:22:26:ca:3c:52:30:8b:31:29:16:85:b7:fa:51:
ad:eb:87:c6:cb:35:59:4d:e2:10:dc:96:95:e3:a1:9c:30:37:
aa:34:5b:f4:bf:f8:1f:7a:16:5c:e9:0f:1f:49:01:ed:b4:f5:
7c:7c:f7:e8:e0:88:02:4f:cf:da:16:50:7e:77:28:c1:c3:17:
18:91:bb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:37 2026 by rpki-client