Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1_lOEHleLK5Z1_vGVg2go7ys85o.roa
File: 1_lOEHleLK5Z1_vGVg2go7ys85o.roa (raw, json)
Hash identifier: RBAYIKZ4u8k2jz1bqp3z47zwDUm6kUni6ZtabOwiCxM=
Subject key identifier: D7:F9:4E:10:79:5E:2C:AE:59:D7:FB:C6:56:0D:A0:A3:BC:AC:F3:9A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D52FCB7DDB2D7F58326F07A74755C171B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1_lOEHleLK5Z1_vGVg2go7ys85o.roa
Signing time: Fri 03 Apr 2026 10:56:27 +0000
ROA not before: Fri 03 Apr 2026 10:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204457
IP address blocks: 31.57.217.0/24 maxlen: 24
31.59.37.0/24 maxlen: 24
94.183.152.0/24 maxlen: 24
217.60.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:52:fc:b7:dd:b2:d7:f5:83:26:f0:7a:74:75:5c:17:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 3 10:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7f94e10795e2cae59d7fbc6560da0a3bcacf39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:63:f2:ed:9c:c8:a0:44:1a:cc:8b:05:4a:
be:a9:58:00:85:b7:9e:65:1d:c0:07:02:47:81:cd:
44:f9:1c:62:a3:cd:4f:bf:37:1e:b6:80:42:a1:f3:
49:46:4d:a6:6e:92:bd:41:cb:d1:a2:fe:99:2f:4e:
4b:cd:c1:d5:ed:fc:f4:07:19:3f:db:89:fe:4f:d5:
31:56:e2:86:15:70:ee:50:86:1c:98:3f:3e:07:dc:
1a:11:89:b3:75:54:c6:b6:6f:f5:16:6b:9d:c7:46:
b1:b7:af:1b:cf:d7:35:65:9b:95:c9:f0:f2:18:72:
30:82:44:d4:52:51:eb:71:5b:16:12:df:4e:2b:1f:
9e:7a:f6:ee:90:50:f5:cb:ef:7b:5a:ce:ba:d6:20:
8b:d4:b8:66:fa:bf:5f:ce:7c:3a:0f:2d:00:14:4a:
77:45:78:1b:b0:0e:54:db:bb:d7:d0:13:c1:08:30:
0f:f4:d5:b7:27:f6:33:85:2a:63:e8:e5:28:e3:d0:
b7:37:1a:bd:41:56:b2:22:41:cf:6c:58:92:aa:d2:
2b:bb:57:5a:fd:fe:f6:e4:63:82:a7:6e:15:3d:8f:
04:c9:d9:ce:2c:16:03:c7:75:7b:ce:3c:35:94:67:
10:13:31:09:db:3c:43:e7:b3:56:96:5a:c3:98:eb:
c4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F9:4E:10:79:5E:2C:AE:59:D7:FB:C6:56:0D:A0:A3:BC:AC:F3:9A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1_lOEHleLK5Z1_vGVg2go7ys85o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.217.0/24
31.59.37.0/24
94.183.152.0/24
217.60.242.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a8:50:f8:c1:e6:78:58:55:43:79:82:fb:68:d5:c2:7c:3d:
b8:3b:b1:43:83:2b:fb:90:8d:d2:7b:4d:bb:36:0f:4a:ab:14:
11:1a:93:75:a1:dd:c1:15:4d:a5:dc:0f:43:b4:1b:62:6b:49:
65:29:a6:d3:4d:9e:4d:75:c4:36:65:d9:2f:6a:62:00:8d:80:
53:c1:e8:e1:da:80:d9:75:d5:64:78:3d:50:73:84:81:b5:ae:
da:f5:5f:f1:27:60:40:32:4e:62:f7:f8:89:c1:b2:49:86:9b:
b3:f4:57:7d:b2:6b:8a:aa:5e:6c:ed:4d:90:27:29:e9:44:48:
20:85:d8:36:72:3a:74:4a:96:0c:4f:02:50:ac:a2:82:a4:10:
68:fd:59:c1:76:51:9c:70:e4:f9:40:fa:a9:d3:48:04:ee:4a:
80:41:35:f8:f1:db:50:46:bf:5d:34:d4:ab:12:ca:16:c6:31:
7a:31:f3:19:d4:67:7c:70:f8:2a:b3:1a:4c:ec:6a:53:29:72:
c6:9a:43:3f:98:3c:2e:2d:e8:b8:91:40:bc:b5:6e:7c:50:1f:
cc:c1:67:00:f4:cc:7c:c4:1f:85:77:39:a1:6c:7a:e5:30:27:
a7:3b:38:e5:3b:29:f1:00:89:59:34:2a:fb:67:b2:6a:ad:89:
7d:b6:2e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:50 2026 by rpki-client