Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/exc9zw5hfGY6l-qUvVLhZDnDzNg.roa
File: exc9zw5hfGY6l-qUvVLhZDnDzNg.roa (raw, json)
Hash identifier: bfJ9NZgBM46XlTESo3todHD2WcgLhUUxq1hzD5hZ7R4=
Subject key identifier: 7B:17:3D:CF:0E:61:7C:66:3A:97:EA:94:BD:52:E1:64:39:C3:CC:D8
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019C7B74A2589775F7E434C8B32B5354A255
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/exc9zw5hfGY6l-qUvVLhZDnDzNg.roa
Signing time: Fri 20 Feb 2026 14:29:27 +0000
ROA not before: Fri 20 Feb 2026 14:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48040
IP address blocks: 31.172.65.0/24 maxlen: 24
81.85.79.0/24 maxlen: 24
162.248.163.0/24 maxlen: 24
185.21.11.0/24 maxlen: 24
199.68.198.0/24 maxlen: 24
199.68.199.0/24 maxlen: 24
2a02:6b40:800e::/48 maxlen: 48
2a02:6b40:800f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:74:a2:58:97:75:f7:e4:34:c8:b3:2b:53:54:a2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Feb 20 14:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b173dcf0e617c663a97ea94bd52e16439c3ccd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:88:d9:04:07:9d:95:f7:61:74:3b:f5:40:
69:34:f3:2b:07:ef:db:5f:e2:7a:fe:cf:b0:56:85:
24:79:71:a4:9c:00:29:40:a9:4c:e2:0a:fb:be:bb:
18:50:14:2d:37:17:9d:14:07:fa:5a:66:b7:7e:7d:
cf:09:a8:d3:4b:2a:cd:fd:a4:73:21:f0:75:61:b4:
d5:72:6c:98:e1:f7:7c:dc:00:23:0c:a0:8e:59:66:
ca:3f:77:a5:82:75:ea:6b:5c:89:ad:05:04:93:06:
3b:a0:70:f1:62:3f:dd:58:b1:86:55:83:8d:90:b3:
33:9d:98:7a:4b:6a:5f:af:58:da:39:b1:b4:f3:13:
49:70:fc:42:41:45:0b:0d:b1:d4:ea:76:65:1d:43:
e3:a8:bc:24:74:9f:8d:b6:55:89:e2:cf:38:96:9a:
07:c7:7f:84:47:6d:0d:6a:72:64:10:69:e2:3a:f7:
06:a1:a4:42:24:c6:f2:42:95:6b:08:9f:6a:6b:cc:
09:cb:55:c9:a1:a7:ae:5f:15:e5:97:1a:df:8e:5c:
4e:4e:1a:40:e8:81:11:ee:a5:d8:77:a9:99:ec:1e:
0b:65:f6:80:93:ae:63:02:41:3a:da:63:c2:e1:d2:
8a:5c:53:57:29:6e:cc:20:82:e3:9f:8d:8c:82:7c:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:17:3D:CF:0E:61:7C:66:3A:97:EA:94:BD:52:E1:64:39:C3:CC:D8
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/exc9zw5hfGY6l-qUvVLhZDnDzNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.65.0/24
81.85.79.0/24
162.248.163.0/24
185.21.11.0/24
199.68.198.0/23
IPv6:
2a02:6b40:800e::/47
Signature Algorithm: sha256WithRSAEncryption
2f:e8:4c:8b:6f:df:e6:ca:fa:ad:6b:84:f7:1c:a2:10:30:a6:
4e:98:bf:64:fe:08:2c:49:5a:75:ca:a3:d4:c1:c7:61:a4:23:
d0:be:0f:60:fd:29:80:17:d3:7c:e3:91:23:75:a2:90:af:70:
38:41:1c:c2:86:bf:fc:2e:48:65:b8:da:b1:88:3c:b8:72:d5:
51:ad:fe:c0:fc:a5:40:d4:b1:dd:58:6c:62:fe:b1:8f:44:16:
4f:32:e7:3b:93:e9:d3:cc:e5:e5:57:7d:a5:d6:f4:3f:f5:b0:
e5:79:15:fa:95:c5:49:6c:fe:f5:3f:54:12:8b:ce:d0:94:22:
df:05:d3:44:b1:fa:4d:68:3b:10:6c:e3:1a:d6:6e:66:70:0f:
58:28:74:ed:42:e4:7c:9b:4c:88:d9:9f:81:d0:a1:c3:25:ca:
95:c7:29:c9:d0:18:64:01:c1:8b:17:f2:af:8b:54:b7:c1:b4:
50:79:4c:98:7b:d3:6e:db:6c:d1:c4:e9:31:bb:90:16:67:d0:
24:87:d2:a4:da:c7:f8:cb:20:fd:0e:07:d9:30:1d:7e:12:1b:
c8:13:ff:43:26:4d:8f:2e:37:f9:04:01:1a:c5:01:ce:f6:f0:
07:48:7d:b7:d1:6d:83:2e:81:46:95:66:e6:0c:02:3e:2a:89:
c9:60:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:35:28 2026 by rpki-client