Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Zpf8k-utZ-y-8MYwY4-BPJIVrfk.roa
File: Zpf8k-utZ-y-8MYwY4-BPJIVrfk.roa (raw, json)
Hash identifier: JsgAAgOYUgJpttWHw6EFU/CdhVAm1YhdTwLSh0mwz1o=
Subject key identifier: 66:97:FC:93:EB:AD:67:EC:BE:F0:C6:30:63:8F:81:3C:92:15:AD:F9
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019D9BC82E7EF701D65C91158050568463B5
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Zpf8k-utZ-y-8MYwY4-BPJIVrfk.roa
Signing time: Fri 17 Apr 2026 14:11:20 +0000
ROA not before: Fri 17 Apr 2026 14:11:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51202
IP address blocks: 31.25.11.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
89.36.32.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
109.175.211.0/24 maxlen: 24
185.79.19.0/24 maxlen: 24
185.121.132.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
194.117.225.0/24 maxlen: 24
195.234.126.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
2a0c:2500::/29 maxlen: 48
2a0c:2501::/32 maxlen: 48
2a0c:2502::/32 maxlen: 48
2a0c:2503::/32 maxlen: 48
2a14:6781::/32 maxlen: 48
2a14:6781:305::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:c8:2e:7e:f7:01:d6:5c:91:15:80:50:56:84:63:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 17 14:11:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6697fc93ebad67ecbef0c630638f813c9215adf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:55:6c:6b:0d:54:f3:f6:d2:e6:80:67:d7:
51:ba:a2:f6:eb:07:78:35:86:15:2c:44:67:63:1f:
4a:96:7c:12:80:ed:25:28:f7:4f:52:17:92:15:19:
c3:51:4c:05:6f:2b:ca:35:ee:bf:f3:65:e0:42:58:
68:0a:af:74:27:94:a9:a0:a8:f5:34:6a:15:31:73:
f2:23:65:b7:dc:3c:c4:78:4f:1b:64:25:b2:51:4b:
af:64:4f:34:c3:fa:ee:74:7e:f5:aa:56:59:7a:fe:
43:84:11:aa:3a:9f:0e:bf:3d:5d:27:71:eb:35:cc:
e6:bd:11:24:c7:87:ba:67:32:36:50:67:62:98:8a:
57:d4:7e:3d:c5:62:34:89:c6:23:fd:2f:9a:2b:d2:
be:3d:97:e7:4b:83:9e:00:74:21:1a:d9:fb:dd:38:
4b:7f:00:e5:3b:f7:90:60:b6:22:09:68:ae:1e:04:
12:23:e9:aa:d3:cd:6c:38:e9:91:6f:e0:50:b8:f0:
15:9c:77:e4:60:ba:3a:dd:68:2f:42:fb:e6:f9:3b:
fc:35:54:cd:76:55:cd:e6:ed:33:f3:c4:a9:99:84:
42:9e:93:15:8f:fe:ca:0c:bf:a6:d8:a9:d2:20:c1:
d2:a6:b7:0b:c6:2a:9d:78:29:65:81:15:c0:98:e1:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:97:FC:93:EB:AD:67:EC:BE:F0:C6:30:63:8F:81:3C:92:15:AD:F9
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Zpf8k-utZ-y-8MYwY4-BPJIVrfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
62.169.152.0/24
89.36.32.0/24
89.36.35.0/24
109.175.211.0/24
185.79.19.0/24
185.121.132.0/23
185.121.135.0/24
185.144.70.0/23
194.117.225.0/24
195.234.126.0/24
212.232.18.0/23
IPv6:
2a0c:2500::/29
2a14:6781::/32
Signature Algorithm: sha256WithRSAEncryption
66:50:0e:79:0e:ed:0b:6a:41:e3:ea:10:2c:71:83:f9:0f:59:
56:58:86:1a:a8:79:9b:ab:89:cc:ec:9c:b9:26:cd:1b:15:9b:
5d:76:9f:d7:0b:c0:8c:da:cb:94:50:41:21:7d:30:81:8c:fc:
d4:b3:08:04:ab:9e:59:0e:85:c4:7f:59:1f:aa:98:b8:8f:64:
b8:c9:39:72:26:27:7f:ba:15:d6:8e:4d:59:1f:ff:5e:1c:5a:
cf:bd:04:d4:f8:c6:21:74:2e:9b:4a:19:99:65:75:dc:35:d5:
dc:1e:1a:79:98:b0:a6:75:b4:af:08:9f:55:8f:dd:d2:c8:36:
bb:23:e9:64:44:c9:84:46:6f:7f:0c:8e:e8:25:c2:6a:7b:03:
59:92:f9:2c:a1:3d:c1:ca:72:87:3e:03:35:a7:21:4a:cb:9d:
cc:f9:7f:28:83:ad:10:47:e3:cb:3e:4b:e8:22:b2:10:71:94:
ae:7e:cf:e7:f1:bb:0a:fe:f5:0e:57:55:78:8b:b7:69:81:38:
d6:a5:47:8c:ad:6f:79:b3:f8:20:05:90:b2:4c:94:bf:dc:bd:
9e:fa:89:97:25:0f:9d:72:f8:f7:91:84:99:eb:a5:74:88:4c:
71:84:f5:e0:66:da:50:69:b5:69:0b:ff:2d:a9:92:4f:e5:78:
78:e6:9a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:58:40 2026 by rpki-client