Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/efp7xtc6IZSWOqiba0p-CbGZ1tE.roa
File: efp7xtc6IZSWOqiba0p-CbGZ1tE.roa (raw, json)
Hash identifier: juComHTyrrm45ZZQA4YtFXJCTSue5mWGt6Aym8NPRpg=
Subject key identifier: 79:FA:7B:C6:D7:3A:21:94:96:3A:A8:9B:6B:4A:7E:09:B1:99:D6:D1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0BFA3A80AA938B768148FC3E0127C914C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/efp7xtc6IZSWOqiba0p-CbGZ1tE.roa
Signing time: Sun 20 Sep 2026 16:26:08 +0000
ROA not before: Sun 20 Sep 2026 16:26:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214279
IP address blocks: 31.57.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:a3:a8:0a:a9:38:b7:68:14:8f:c3:e0:12:7c:91:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 20 16:26:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79fa7bc6d73a2194963aa89b6b4a7e09b199d6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:82:83:14:df:55:f6:de:70:a8:92:c1:0c:
fd:bb:b7:14:81:5f:09:e5:f1:41:1f:97:05:42:1c:
f3:c6:77:a7:df:a4:9d:ab:7b:9a:fe:fb:7c:cf:2b:
6c:35:0e:be:d9:f7:43:7e:07:58:39:57:5c:1d:dc:
8d:1b:ec:e9:3c:53:41:84:e2:05:37:fd:0d:15:12:
02:b0:f4:e0:c0:1a:6d:8d:1d:43:e0:4e:9b:75:85:
a0:0a:a9:73:81:6b:a9:e6:cc:b3:d4:24:ab:a7:3b:
2e:37:39:76:a9:26:34:f6:6f:cd:3b:ea:e4:57:fc:
bd:60:7a:43:3a:d0:a9:ee:8c:b1:00:18:96:20:48:
a1:d1:ba:5e:5b:f3:1b:b7:15:ef:52:cf:82:51:0f:
d3:51:fc:f6:00:23:2d:ab:11:c9:00:75:2c:61:81:
89:69:c6:64:5f:d5:42:ec:ff:31:2d:d9:fd:af:44:
b8:67:c0:4c:32:bf:e3:0d:2f:c0:ac:10:8e:cb:f3:
d7:a2:09:83:df:17:70:61:bd:ea:f4:a5:87:ca:ee:
4c:77:f3:ba:0b:b2:02:4c:86:75:12:b6:0f:98:90:
07:b7:58:df:87:4b:9f:1f:f6:7c:04:9c:86:5c:f2:
33:4d:1f:7a:99:a9:4f:df:ff:08:99:d8:6b:9a:bb:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FA:7B:C6:D7:3A:21:94:96:3A:A8:9B:6B:4A:7E:09:B1:99:D6:D1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/efp7xtc6IZSWOqiba0p-CbGZ1tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.240.0/22
Signature Algorithm: sha256WithRSAEncryption
12:96:0b:27:06:78:86:3e:30:a6:2d:4b:11:c7:22:d7:d2:2e:
69:6e:14:78:ab:ad:39:40:8c:5c:6a:dc:40:13:13:bb:69:e0:
99:09:c9:a8:5a:44:3b:11:3a:84:18:31:46:bf:33:f5:79:25:
67:8b:73:45:aa:40:ef:fe:5b:52:8f:58:b0:cc:00:4f:51:a2:
b3:ec:ec:be:3d:b2:eb:32:6f:73:90:ad:14:28:c6:bc:87:ac:
89:37:32:a5:6f:40:b0:9c:77:52:7e:21:25:a2:f7:9d:a9:9d:
3e:61:29:5b:e3:a0:a0:57:21:8a:ff:62:fb:86:36:97:6e:d4:
a8:19:2f:bc:17:7e:bb:05:f9:42:96:05:a8:18:b3:9a:0b:4c:
ca:ef:95:10:c4:bf:1c:c5:b6:fd:71:62:3d:42:ef:9f:48:03:
77:e7:25:2b:d0:6a:bd:c0:44:6f:c4:74:41:30:95:60:aa:b1:
94:10:46:14:dd:1e:14:9a:b6:41:f1:62:34:23:bc:e7:4d:fb:
11:9c:6c:35:dd:0a:a2:f4:a8:a9:c9:f4:f8:21:e5:e9:93:40:
c0:31:39:92:e4:bf:62:fc:20:a9:c3:23:4e:c7:22:74:64:7f:
6d:a1:65:3f:fa:6c:ff:5f:c4:1a:29:1e:4a:66:56:0f:60:41:
7a:ba:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:49:27 2026 by rpki-client