Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3bj6s6ouy4oiL4kZhPhjzY1mdWo.roa
File: 3bj6s6ouy4oiL4kZhPhjzY1mdWo.roa (raw, json)
Hash identifier: MfSaREHIKZw8GNazpAojPgMFDmN9ArxjIDHyRo/Wwtw=
Subject key identifier: DD:B8:FA:B3:AA:2E:CB:8A:22:2F:89:19:84:F8:63:CD:8D:66:75:6A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A03DFD5A743B4A2BF1FD133106477AE030
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3bj6s6ouy4oiL4kZhPhjzY1mdWo.roa
Signing time: Wed 26 Aug 2026 12:13:28 +0000
ROA not before: Wed 26 Aug 2026 12:13:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 31.58.239.0/24 maxlen: 24
94.183.242.0/24 maxlen: 24
94.183.243.0/24 maxlen: 24
94.183.244.0/24 maxlen: 24
94.183.246.0/24 maxlen: 24
94.183.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:fd:5a:74:3b:4a:2b:f1:fd:13:31:06:47:7a:e0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 26 12:13:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddb8fab3aa2ecb8a222f891984f863cd8d66756a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:ca:87:2c:4d:6c:62:b0:11:8c:d5:e1:43:
5b:f6:71:e1:ef:f2:22:7a:ba:74:ad:ea:c2:f3:f9:
a6:b0:4e:46:a1:8b:b1:37:e6:69:f0:e5:2c:cf:cf:
ce:d9:00:a7:f1:4a:83:c7:41:b8:3c:f1:25:10:87:
02:9f:e0:23:3b:85:90:69:d1:d9:b8:4e:3f:84:1a:
87:fc:5d:82:e7:9a:cf:55:18:e9:22:f8:12:a6:ea:
d0:15:d5:48:5c:bb:1e:e0:a1:e7:b1:c9:b2:e7:66:
f5:fd:80:b3:a4:ed:b7:08:88:95:6c:66:a8:f4:ff:
ae:e4:49:77:c7:bc:d8:0d:34:1a:e2:6e:e9:88:68:
9e:09:c2:e2:fc:64:00:53:b8:ab:59:35:51:e5:87:
70:7c:97:26:69:30:4e:ff:d0:b4:62:93:79:30:01:
4f:03:cc:c8:5d:a9:92:92:5b:88:af:49:bb:bf:e7:
0b:2b:46:fe:e1:14:21:e3:2b:21:14:54:22:cb:14:
22:c3:be:da:b8:0d:b8:c1:f7:b6:cd:d1:51:af:bb:
e1:7e:66:e9:cd:5c:b5:5b:b9:23:42:ed:dd:2f:fa:
da:bb:82:a1:27:83:29:60:76:ba:33:c9:33:96:f6:
22:88:41:a5:8c:38:77:b9:b6:56:03:e7:1d:e8:c6:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B8:FA:B3:AA:2E:CB:8A:22:2F:89:19:84:F8:63:CD:8D:66:75:6A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3bj6s6ouy4oiL4kZhPhjzY1mdWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.239.0/24
94.183.242.0-94.183.244.255
94.183.246.0/24
94.183.248.0/22
Signature Algorithm: sha256WithRSAEncryption
11:28:61:6f:4c:d1:2c:f1:cc:cd:8e:83:1e:f0:89:07:62:5b:
1d:f8:c3:db:6c:95:f4:df:0e:da:08:08:df:97:26:24:ae:3c:
0d:04:70:fe:ac:a9:7c:10:b0:46:2b:43:66:3b:1c:af:a9:66:
3c:bf:c6:fe:8e:f6:5d:ee:86:36:fa:99:76:82:d6:9d:68:0e:
e9:3b:c2:de:03:c3:84:7e:be:d4:39:23:09:8e:33:02:7e:7b:
ec:53:79:f6:a2:10:a9:65:88:ba:49:1f:3e:8b:27:ce:98:af:
90:e6:06:a7:3c:27:4f:34:16:87:46:6e:c4:c5:02:82:9d:d2:
4a:5d:31:fb:92:94:4a:b6:88:c7:19:0e:63:64:6c:4a:d7:21:
dc:c9:c1:9a:98:97:b8:f0:87:ee:77:c0:81:b5:68:18:4d:ea:
1a:22:0f:d3:25:05:9f:87:5e:4d:b0:8b:87:24:3c:26:90:06:
45:92:1b:30:cc:08:62:f1:6f:a4:2d:e2:dd:64:c3:cf:f7:52:
5d:50:81:4a:19:19:3f:02:e9:fc:a4:78:9c:7a:29:df:30:be:
d3:96:2e:c5:68:7e:8f:e1:72:86:6f:3d:f1:2a:0a:ef:6d:85:
75:58:c7:3f:ee:41:49:78:f2:88:65:b8:8d:d2:0b:8f:20:c7:
78:19:78:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:06:07 2026 by rpki-client