Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iiYu75ucVwiBhZJgBuNfBLCYdLs.roa
File: iiYu75ucVwiBhZJgBuNfBLCYdLs.roa (raw, json)
Hash identifier: s1wIo/3T6yCgeKJ9wgVWoy0P9pzqEbSe7euzQUaA4hY=
Subject key identifier: 8A:26:2E:EF:9B:9C:57:08:81:85:92:60:06:E3:5F:04:B0:98:74:BB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A17DDA60EE4DE1AF999130036C16C336B2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iiYu75ucVwiBhZJgBuNfBLCYdLs.roa
Signing time: Tue 27 Oct 2026 14:53:46 +0000
ROA not before: Tue 27 Oct 2026 14:53:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201269
IP address blocks: 31.57.217.0/24 maxlen: 24
31.59.195.0/24 maxlen: 24
94.183.245.0/24 maxlen: 24
94.183.247.0/24 maxlen: 24
217.60.188.0/24 maxlen: 24
217.60.189.0/24 maxlen: 24
217.60.190.0/24 maxlen: 24
217.60.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:da:60:ee:4d:e1:af:99:91:30:03:6c:16:c3:36:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 27 14:53:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a262eef9b9c57088185926006e35f04b09874bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c2:cd:2b:6d:ad:a0:e1:44:ac:09:58:3a:88:
c3:90:86:06:5f:88:d8:bc:03:29:67:71:8f:2d:11:
4a:82:8a:4e:b9:d9:b7:16:c0:40:d6:ca:1a:29:3f:
40:e8:44:d2:11:26:28:1b:18:bd:0d:cd:e0:8a:c1:
cb:86:73:0f:85:0d:3b:cc:31:44:ce:ad:de:7e:0a:
ca:ca:37:0e:26:5e:45:71:95:0c:64:6a:67:4b:d9:
4b:ca:15:ee:8a:c9:a1:13:57:b8:81:a1:91:ba:60:
8c:ae:3a:47:45:bb:cb:35:ce:bb:57:b6:41:f3:ca:
a3:98:5b:4d:8e:37:ac:ff:e3:af:5a:bc:3c:6b:93:
82:c9:eb:22:f5:88:04:9a:c8:f2:2b:f6:df:9e:46:
45:6a:60:a6:cc:f0:66:f6:c2:44:82:a1:c9:ee:2b:
af:ff:44:60:92:4e:02:69:8d:17:c5:83:43:e2:b7:
80:1c:72:3b:a6:23:96:89:7d:9e:a7:82:eb:58:a9:
4a:b8:91:8b:65:45:3d:dd:35:21:ab:39:23:93:ff:
5a:93:ad:f1:0f:82:39:cf:65:ee:f3:6a:da:30:b2:
8e:04:91:93:14:34:04:e5:a5:75:49:1d:24:04:5b:
b7:ce:99:e4:fa:e1:3b:c1:9d:2a:0f:8c:e3:6c:3d:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:26:2E:EF:9B:9C:57:08:81:85:92:60:06:E3:5F:04:B0:98:74:BB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iiYu75ucVwiBhZJgBuNfBLCYdLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.217.0/24
31.59.195.0/24
94.183.245.0/24
94.183.247.0/24
217.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
30:19:b7:32:7f:1d:90:38:1d:5b:4b:19:60:fa:bb:bf:b7:21:
18:60:2e:43:8f:6b:79:19:63:f8:f0:1b:37:86:4d:67:f7:fc:
cc:44:70:ce:3e:f2:0e:91:79:a5:bc:76:ab:ac:27:01:53:99:
e0:1c:ae:21:d4:72:b4:3b:f6:42:95:41:86:89:4e:52:fd:7d:
fb:d1:1a:c9:89:5b:16:48:f6:7e:3e:5e:f5:a2:ce:ae:45:8f:
51:4a:60:fa:a0:55:a7:97:e6:b1:b4:94:9f:31:74:50:41:2d:
d6:7d:0e:f8:d1:01:63:79:5f:a6:bf:20:c2:ff:d3:8e:f6:72:
c4:52:b5:ca:7c:6d:bb:67:57:c5:02:71:ac:6b:4c:2e:cf:02:
0d:dc:0e:43:05:9e:96:55:aa:a8:42:89:02:c8:7e:ed:aa:9f:
b7:c2:3c:ce:4d:24:10:36:1d:2c:0c:1f:5c:12:fa:f5:a1:d1:
48:90:ab:c1:19:d2:44:c7:37:9f:e3:f8:bb:6c:3b:52:4a:a1:
1d:c6:23:e3:f1:af:5c:4e:55:d5:b1:07:2c:2b:50:2a:d1:bf:
6b:ed:cd:44:07:a9:61:8e:dd:c6:d6:d4:5e:98:07:3d:c2:b1:
fc:80:4a:ef:8f:6c:b4:9f:08:85:d7:8a:5d:e2:69:14:78:d2:
f0:1a:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:56:38 2026 by rpki-client