Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/Pug44zlPI02ycyK9Q_88Xy9Y-Hg.roa
File: Pug44zlPI02ycyK9Q_88Xy9Y-Hg.roa (raw, json)
Hash identifier: FnYDgGWIFWVGuhKvHnMrJ7Cya4d1b5GKWMt1Csm8Zgs=
Subject key identifier: 3E:E8:38:E3:39:4F:23:4D:B2:73:22:BD:43:FF:3C:5F:2F:58:F8:78
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 01A08CEDC44FCDC8643B664D72D3A82589FA
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/Pug44zlPI02ycyK9Q_88Xy9Y-Hg.roa
Signing time: Thu 10 Sep 2026 20:06:27 +0000
ROA not before: Thu 10 Sep 2026 20:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48040
IP address blocks: 31.172.65.0/24 maxlen: 24
81.85.79.0/24 maxlen: 24
89.127.193.0/24 maxlen: 24
89.127.201.0/24 maxlen: 24
89.127.204.0/24 maxlen: 24
89.127.207.0/24 maxlen: 24
89.127.212.0/24 maxlen: 24
89.127.222.0/24 maxlen: 24
130.17.1.0/24 maxlen: 24
130.17.8.0/24 maxlen: 24
130.17.14.0/24 maxlen: 24
130.17.16.0/24 maxlen: 24
130.17.28.0/24 maxlen: 24
162.248.163.0/24 maxlen: 24
185.21.11.0/24 maxlen: 24
185.134.201.0/24 maxlen: 24
194.154.25.0/24 maxlen: 24
194.154.31.0/24 maxlen: 24
199.68.198.0/24 maxlen: 24
199.68.199.0/24 maxlen: 24
213.193.197.0/24 maxlen: 24
213.239.158.0/24 maxlen: 24
2a02:6b40:800e::/48 maxlen: 48
2a02:6b40:800f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:ed:c4:4f:cd:c8:64:3b:66:4d:72:d3:a8:25:89:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Sep 10 20:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ee838e3394f234db27322bd43ff3c5f2f58f878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:09:2a:63:92:93:01:32:7a:e1:aa:25:59:
90:be:6c:bb:8f:ff:0c:81:1c:aa:d1:7e:b7:6c:d3:
c0:00:3b:b1:c5:f3:cd:b6:78:bb:d0:e9:e3:19:5d:
ef:03:17:2a:49:82:c9:40:e3:c4:d4:0b:0e:c8:db:
87:51:7b:b8:1d:75:bb:a9:ef:24:5e:33:06:a3:22:
0b:b5:96:72:e3:f1:d5:df:e1:6e:06:4e:57:e5:be:
9f:4f:01:e7:0b:9c:af:bb:98:73:2e:bb:39:b1:8d:
93:56:c7:94:1b:cc:81:35:10:7c:09:a2:f3:5e:65:
ec:6b:10:04:97:24:b5:56:40:d3:82:bf:09:b5:58:
0a:8e:ad:7a:62:07:dc:61:e4:ee:97:b0:25:b3:3b:
bc:0f:18:02:a2:96:2c:17:5e:b5:82:00:bc:a8:41:
56:e7:60:99:5e:db:c9:bc:c6:4d:42:10:78:79:e1:
4e:42:b2:1f:14:aa:e3:af:0d:41:42:c1:05:b3:74:
13:3d:3a:df:68:79:08:0f:8c:c7:b9:6a:8d:d3:74:
82:47:8e:78:b5:d7:70:61:83:cf:f5:3f:04:17:95:
7b:7e:b1:7e:f3:90:8e:40:74:0c:ea:a9:b1:ba:74:
48:3e:fa:a9:dc:f7:97:94:bd:95:00:4c:69:dc:e7:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E8:38:E3:39:4F:23:4D:B2:73:22:BD:43:FF:3C:5F:2F:58:F8:78
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/Pug44zlPI02ycyK9Q_88Xy9Y-Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.65.0/24
81.85.79.0/24
89.127.193.0/24
89.127.201.0/24
89.127.204.0/24
89.127.207.0/24
89.127.212.0/24
89.127.222.0/24
130.17.1.0/24
130.17.8.0/24
130.17.14.0/24
130.17.16.0/24
130.17.28.0/24
162.248.163.0/24
185.21.11.0/24
185.134.201.0/24
194.154.25.0/24
194.154.31.0/24
199.68.198.0/23
213.193.197.0/24
213.239.158.0/24
IPv6:
2a02:6b40:800e::/47
Signature Algorithm: sha256WithRSAEncryption
65:f7:74:ea:1b:55:ff:e6:7b:c2:31:e8:fd:2e:d0:7c:2a:fd:
e4:86:46:fc:8b:0c:a3:4e:2a:c9:77:fa:c2:f5:21:e4:62:21:
40:5d:34:a4:2d:ef:2c:3d:10:32:6e:60:4e:ef:06:84:53:34:
65:10:b4:a2:df:ad:50:bb:88:5d:31:80:9e:3d:28:57:cf:42:
9b:5e:0c:c8:be:13:7b:00:83:52:1c:80:c8:4f:88:cb:ee:fc:
64:1f:cc:61:78:f7:20:a3:a9:00:20:92:28:1f:3a:21:2f:b9:
fc:f1:c1:99:da:f5:a8:95:04:95:07:fa:2b:64:27:2f:32:7f:
d4:5d:74:67:82:86:18:0a:3e:24:b2:ba:c2:61:b3:31:19:43:
29:38:f9:ae:09:92:56:8a:f5:e7:cf:8a:f1:98:f4:69:dc:75:
25:1e:bf:cd:4e:17:c3:73:81:5a:ad:6b:63:72:ef:90:4d:5c:
7a:4f:57:26:9e:22:23:2d:9c:6f:36:87:9f:4c:09:8a:8c:35:
29:52:05:41:3e:0b:e0:96:fb:3e:42:c6:39:e9:6a:64:02:1d:
b4:59:e7:65:38:77:09:03:bc:53:e9:2f:cf:7f:05:34:e7:b3:
de:1e:f5:ae:5d:50:0d:20:2b:a4:8f:dd:65:90:e7:d9:c0:27:
71:75:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:39:35 2026 by rpki-client