Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/cN4TjAl3meHdzGkGOjGUxxdyto0.roa
File: cN4TjAl3meHdzGkGOjGUxxdyto0.roa (raw, json)
Hash identifier: KF4CYHM3MslLTwdsfB1zjWIGDa34pn1bkGZHIyfriJk=
Subject key identifier: 70:DE:13:8C:09:77:99:E1:DD:CC:69:06:3A:31:94:C7:17:72:B6:8D
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019E610940AD4E6DDA4A94D80CA8B1E64989
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/cN4TjAl3meHdzGkGOjGUxxdyto0.roa
Signing time: Mon 25 May 2026 21:27:36 +0000
ROA not before: Mon 25 May 2026 21:27:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399272
IP address blocks: 31.42.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:61:09:40:ad:4e:6d:da:4a:94:d8:0c:a8:b1:e6:49:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: May 25 21:27:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70de138c097799e1ddcc69063a3194c71772b68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:f8:49:af:13:9e:77:9d:a7:16:b4:70:aa:
50:29:a2:72:7f:1c:9d:24:85:26:17:af:c1:0e:5a:
bf:49:3f:c6:31:af:9d:95:8b:03:c1:8e:0d:93:73:
b1:fb:11:e7:6c:d2:de:3d:b9:f3:20:ea:55:3c:a2:
d3:b2:af:e2:d3:72:c5:9a:3a:3d:31:00:6c:37:c0:
00:da:df:ea:b1:62:3b:26:68:16:b5:a6:ee:02:5f:
4e:47:b4:30:25:dc:83:99:64:ae:66:68:ed:bd:e1:
19:8e:33:79:2e:7e:43:5c:41:aa:b0:65:b4:fd:15:
8b:ca:59:bf:77:8a:1f:8a:67:a6:6c:8a:58:c0:90:
e9:d4:e5:f9:6e:be:db:76:9e:b1:86:b6:ac:68:42:
04:45:13:1d:90:4d:db:41:96:6f:cb:bf:c5:a2:b1:
bf:5a:30:af:31:f3:7b:be:a8:0d:8c:6f:87:d0:e8:
9e:80:0e:d3:14:a3:8d:a8:00:98:10:aa:93:54:68:
e8:68:51:e8:27:7a:3a:34:08:47:a2:18:80:0e:c5:
cb:9b:a8:81:80:6f:64:0b:ed:57:c5:97:c0:b7:38:
82:8e:6c:ac:d9:20:9f:ac:16:5f:87:07:50:c7:09:
5b:1e:73:34:d7:62:4c:d7:5c:28:cb:2e:b4:fa:85:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DE:13:8C:09:77:99:E1:DD:CC:69:06:3A:31:94:C7:17:72:B6:8D
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/cN4TjAl3meHdzGkGOjGUxxdyto0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.123.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e1:b2:b7:d4:9f:bc:c6:44:bb:02:d0:b9:fb:8f:90:1b:db:
11:f1:5a:b7:68:35:f4:89:12:ab:90:ac:60:02:8b:6f:65:c7:
70:55:c7:6e:15:b2:ee:57:58:a0:79:c8:00:ad:22:ed:dd:2b:
75:61:9a:e2:17:b3:0e:04:ec:a2:6d:eb:ad:a3:9d:d5:f6:3f:
cd:fb:0f:9d:88:ab:58:d3:8f:b4:be:f1:2c:bd:16:7a:a7:3c:
c6:bb:49:07:69:4c:34:8e:dc:7e:db:47:06:b8:f7:4b:1b:7d:
17:d1:06:5c:00:46:f2:97:d1:ce:4b:12:62:5a:20:47:3d:13:
09:10:a8:c3:c7:45:15:d1:5c:d7:e3:38:52:a3:a0:b8:26:02:
33:7f:8f:c2:20:b8:6d:0c:a4:e0:74:61:2c:1e:2a:d8:07:c4:
b3:4d:20:e8:f9:b7:62:76:58:69:da:44:93:46:0b:f5:c4:65:
e3:43:e0:01:31:b4:01:f6:a4:90:80:44:4b:1b:b1:a4:46:d1:
ea:eb:98:06:de:13:81:fe:27:77:83:42:c3:8f:70:ff:57:86:
58:23:86:fe:6f:f1:08:ab:78:a5:0f:05:a0:2e:aa:3a:d7:8e:
3d:80:b8:b9:19:26:14:2c:80:38:2c:0a:4c:0a:85:6b:3a:73:
b8:3c:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 15:14:54 2026 by rpki-client