Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/tZuRuRjUjAgIt0pwulyiOZXutjY.roa
File: tZuRuRjUjAgIt0pwulyiOZXutjY.roa (raw, json)
Hash identifier: k/BPRAnhVqp1LthCSTZpNaYiFsaCw2HlOWpQGqQy0hk=
Subject key identifier: B5:9B:91:B9:18:D4:8C:08:08:B7:4A:70:BA:5C:A2:39:95:EE:B6:36
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019C9427ABBF31572203C260EB15C9C9C1CF
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/tZuRuRjUjAgIt0pwulyiOZXutjY.roa
Signing time: Wed 25 Feb 2026 09:35:53 +0000
ROA not before: Wed 25 Feb 2026 09:35:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 31.172.69.0/24 maxlen: 24
31.172.79.0/24 maxlen: 24
81.85.77.0/24 maxlen: 24
217.177.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:27:ab:bf:31:57:22:03:c2:60:eb:15:c9:c9:c1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Feb 25 09:35:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b59b91b918d48c0808b74a70ba5ca23995eeb636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:6c:c9:c1:4e:e4:af:a1:c2:f1:fa:95:75:
1d:20:fb:0a:d6:b9:82:c3:bd:9d:a1:00:3f:ac:4f:
b3:77:b5:a4:8c:1d:4b:92:43:74:e9:6d:cb:36:c0:
da:0b:08:aa:78:bf:92:12:16:52:cd:77:68:3b:0f:
13:1d:06:2a:4a:40:08:12:56:e0:56:fd:b8:26:a2:
70:14:1c:49:a2:26:6f:50:30:95:f8:f9:88:1e:07:
93:15:56:43:b4:d9:2c:c0:a8:b3:2e:87:71:57:60:
b9:cf:91:b9:7a:5c:8e:d2:9c:6d:da:da:a2:88:34:
ed:7f:a8:54:7f:bf:38:99:9a:6a:2b:69:9a:3b:15:
e5:24:db:96:a8:e9:0c:ae:3f:5d:33:f6:9c:34:3b:
3e:a3:1d:2a:a6:71:aa:1f:a3:c3:b1:b1:84:3a:8c:
79:2d:df:e2:35:36:ec:6d:bb:bb:5a:fe:a9:91:2e:
5a:32:de:48:86:56:9f:26:31:e5:d6:2f:2d:6a:8f:
d3:32:99:e3:b1:3a:ea:0b:de:69:ce:a4:a8:a8:23:
ff:6e:98:71:0c:82:34:e7:87:30:8c:42:f8:b2:95:
ba:b7:45:a1:fa:83:ab:ab:df:7d:b5:22:bc:aa:08:
c1:65:e8:d4:49:9a:71:ee:56:8d:9d:fb:f2:a9:20:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9B:91:B9:18:D4:8C:08:08:B7:4A:70:BA:5C:A2:39:95:EE:B6:36
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/tZuRuRjUjAgIt0pwulyiOZXutjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.69.0/24
31.172.79.0/24
81.85.77.0/24
217.177.75.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:09:55:9a:d1:5a:2a:07:5e:18:c6:59:65:45:dc:c9:97:8a:
be:14:37:73:db:f9:96:0b:e3:7b:b3:22:96:21:df:55:2d:fa:
f0:ed:3b:60:52:a6:1e:ee:29:3f:08:79:d4:ca:a2:c9:c5:bc:
8c:0d:51:17:57:62:41:ca:8c:54:86:9c:e7:dc:0c:45:07:1d:
82:87:0f:72:2f:4a:64:78:6e:27:5e:8d:27:e1:b4:8b:08:1d:
16:52:c3:88:13:0d:26:a3:c8:cd:d7:d7:34:d0:46:ca:ed:36:
82:24:3d:4f:eb:df:f6:07:00:72:e1:b3:22:71:7f:fb:b3:65:
3a:82:90:6e:e1:fe:dd:03:69:53:26:c9:aa:17:50:61:80:f1:
e6:89:4c:9d:15:d4:38:70:1e:f6:cd:64:0e:5a:b4:7f:0c:bd:
e5:41:95:8b:56:ce:1f:93:bd:f4:bd:f7:e4:5d:96:69:8e:91:
2b:5d:1d:3f:63:22:2e:2c:68:69:75:4e:65:e8:73:b1:08:93:
dd:63:90:b9:a7:1b:99:1f:79:7a:e5:fb:92:50:8a:34:30:d0:
bc:5e:be:e7:7e:61:d0:45:00:8a:3f:52:56:dd:aa:78:25:43:
c9:f0:ee:33:6b:4f:53:93:24:a1:7b:65:b2:95:c8:6a:4b:d5:
08:9f:ca:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:25:55 2026 by rpki-client