Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cpuiAkY45VxgGxjDskTIcKW7HSA.roa
File: cpuiAkY45VxgGxjDskTIcKW7HSA.roa (raw, json)
Hash identifier: 97ZsCwOneoqNSH7ykQdeYlz54Aza+n9cL1ANdT7J+IU=
Subject key identifier: 72:9B:A2:02:46:38:E5:5C:60:1B:18:C3:B2:44:C8:70:A5:BB:1D:20
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F9FD9717FFAD850834A80715770150600
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cpuiAkY45VxgGxjDskTIcKW7HSA.roa
Signing time: Sun 26 Jul 2026 19:14:15 +0000
ROA not before: Sun 26 Jul 2026 19:14:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201269
IP address blocks: 31.56.150.0/24 maxlen: 24
217.60.188.0/24 maxlen: 24
217.60.189.0/24 maxlen: 24
217.60.190.0/24 maxlen: 24
217.60.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:d9:71:7f:fa:d8:50:83:4a:80:71:57:70:15:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 26 19:14:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=729ba2024638e55c601b18c3b244c870a5bb1d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:46:44:0c:5f:c5:f8:84:ab:28:e1:3a:88:
e4:dc:8d:cc:9f:ab:b4:26:c2:e6:df:7e:66:b4:ff:
b9:23:66:00:5b:f4:a7:b1:c1:ac:27:fa:e3:ee:9d:
13:9d:ba:9c:7b:5c:f9:1b:75:3b:1e:1a:4d:dd:40:
27:41:ba:7a:a2:ef:42:26:74:1d:2b:9c:bb:23:fd:
46:c0:3c:2c:ec:7d:db:6d:b9:36:d7:84:64:10:51:
4e:35:1d:6b:9e:a8:c1:13:95:d4:c4:e6:85:ad:7b:
81:9e:07:c1:1a:b5:4d:46:09:30:5c:d5:2e:4a:2f:
37:0f:26:f9:4a:87:78:22:ca:fc:0f:1b:61:7b:e0:
23:df:8f:8e:11:07:a8:b2:90:07:72:15:69:83:f5:
2d:4b:83:33:0b:86:06:18:30:d4:d3:69:e4:a0:e8:
14:75:b6:1f:20:b0:bb:56:47:02:63:a2:76:ef:11:
c8:25:7f:3e:ee:67:27:37:04:74:92:56:ef:42:33:
c8:de:2d:80:71:a6:5c:14:87:cf:13:49:93:1a:a4:
e4:ff:53:07:ba:bc:a9:49:bc:38:fa:87:3c:86:13:
91:aa:d6:fa:30:a8:3c:09:95:55:38:2e:6c:cc:2d:
57:c4:fe:23:e3:1c:57:dd:ff:e4:24:01:49:78:15:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9B:A2:02:46:38:E5:5C:60:1B:18:C3:B2:44:C8:70:A5:BB:1D:20
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cpuiAkY45VxgGxjDskTIcKW7HSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.150.0/24
217.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
39:25:5f:e1:03:32:32:7b:3e:82:48:f9:00:14:c8:01:17:b7:
60:21:48:d8:8c:cd:5a:c0:35:a1:e8:6f:86:1e:86:a8:be:98:
5d:01:d3:5c:84:65:8a:e4:45:b5:cf:f7:9d:a0:a9:8a:6b:22:
f7:32:03:ab:c1:d1:70:5b:00:e0:d0:76:93:a8:8b:f3:0f:8c:
a2:44:39:99:67:07:41:f0:66:81:25:ce:0c:f7:cd:24:f3:58:
9d:63:1e:8a:c0:96:bb:e7:57:73:5e:92:20:9f:86:95:95:57:
0b:6d:e1:1e:15:fa:8a:96:12:3d:5f:a4:f6:76:f2:6f:74:33:
15:5e:a1:71:8a:14:85:31:da:3a:8f:22:09:ee:d9:db:01:e4:
0a:3a:42:68:98:3f:8b:f7:2c:30:03:6e:c9:9f:a3:66:67:5c:
f0:36:c3:b9:5f:fd:54:bf:69:8d:4f:2f:73:aa:2d:a4:94:72:
8f:8a:dd:6d:b3:33:2b:cd:0b:a0:63:7a:92:25:2f:8f:93:ee:
cf:07:3e:d6:b6:ae:55:19:9b:42:83:c6:62:5c:35:0e:33:8a:
ac:3f:92:47:2b:ce:b0:ac:6e:f8:e4:19:68:bc:05:0a:60:ac:
09:9d:c6:98:0c:1f:93:d5:a1:81:85:ab:71:55:36:e3:25:67:
c2:7b:ed:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:54 2026 by rpki-client