Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3eMGVEHgCNYHSMzTr9iqi3jdpJg.roa
File: 3eMGVEHgCNYHSMzTr9iqi3jdpJg.roa (raw, json)
Hash identifier: fOAMVOlFTDw9DgMr9JYprVuhuJhtZ3XF2g3GhJLCZmw=
Subject key identifier: DD:E3:06:54:41:E0:08:D6:07:48:CC:D3:AF:D8:AA:8B:78:DD:A4:98
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A13B0F7FAEAC85615D9E9ED4E1476CC0A2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3eMGVEHgCNYHSMzTr9iqi3jdpJg.roa
Signing time: Wed 14 Oct 2026 15:37:13 +0000
ROA not before: Wed 14 Oct 2026 15:37:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 31.57.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:0f:7f:ae:ac:85:61:5d:9e:9e:d4:e1:47:6c:c0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 14 15:37:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dde3065441e008d60748ccd3afd8aa8b78dda498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:0b:c9:8b:36:e2:75:c3:a3:d2:94:02:1e:
33:b3:e3:cf:52:f4:6d:0d:09:41:ae:b4:fe:63:40:
5b:14:ef:50:00:7b:3d:5f:e2:d9:f8:47:07:c4:c4:
01:2a:5e:63:67:98:24:e0:4c:63:73:90:5e:46:89:
42:de:86:08:d3:70:44:c1:81:19:57:5d:d2:fa:a8:
7b:fe:ac:19:3a:8e:29:8e:61:c5:92:09:ab:17:e2:
9e:40:11:c1:71:b4:d7:97:61:c1:00:9f:f9:cf:c9:
25:f2:3f:7f:25:59:df:bf:84:29:2e:24:cf:75:9d:
2f:25:dd:5a:36:2b:eb:e4:15:12:41:0d:68:8d:2f:
a7:60:f3:86:f3:10:ec:77:06:90:e3:bd:07:1a:5c:
7a:e8:10:53:ca:ba:d3:f1:05:65:a9:fd:d3:2c:b3:
ba:bc:11:b3:db:ed:de:d2:8c:e7:5a:a8:91:31:fd:
bf:58:cb:3a:78:96:c0:7a:4c:7d:cf:61:5b:c4:18:
60:1c:9d:6e:49:69:f6:2a:a1:1f:86:af:81:54:a3:
88:b9:da:03:1c:67:59:eb:4a:ec:e9:fa:3d:b2:f1:
35:ca:4c:bc:a8:fb:22:05:5f:de:01:8f:14:77:f1:
4e:05:b1:c7:e7:bf:27:24:07:47:76:7a:5d:94:9d:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E3:06:54:41:E0:08:D6:07:48:CC:D3:AF:D8:AA:8B:78:DD:A4:98
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3eMGVEHgCNYHSMzTr9iqi3jdpJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:5c:db:4d:fe:76:02:fc:34:fd:ec:41:9b:c9:ee:ee:80:33:
78:aa:af:4f:bc:d7:08:9d:fb:1b:78:3e:63:09:cc:e4:13:82:
c1:bc:ec:3a:c5:81:19:76:99:15:fd:57:e1:98:87:74:15:0c:
39:33:60:79:d3:c3:7a:51:d9:14:3c:76:e1:a1:92:f7:4b:ed:
80:8c:91:20:0c:7a:b8:23:e5:f3:95:4a:d8:5b:6a:d6:a8:a6:
da:1c:43:d8:d4:81:c2:50:10:93:ef:1f:b8:07:b3:58:e0:25:
e8:c9:12:7b:88:0b:6c:f4:60:a4:d4:75:21:4b:71:e2:4f:76:
c0:48:dd:00:47:e1:b3:27:aa:f4:f0:28:cd:fe:7b:7c:37:b1:
f5:85:5d:53:04:d2:ea:15:cd:e0:65:5e:ea:c7:6f:10:a9:b8:
16:f3:3d:b8:76:26:a6:fd:13:79:2a:dd:0f:ba:c5:34:6b:84:
ec:fc:78:2a:29:33:dd:df:69:e3:9e:71:2c:8d:b4:64:e4:12:
50:0f:14:d8:77:1f:c4:96:e2:3b:3a:d2:85:6d:ad:52:81:bd:
5c:9d:06:e6:bd:1c:8f:f1:ba:47:f9:15:1e:ae:cd:cf:63:b2:
52:04:50:1c:36:8c:b5:92:7f:03:44:b8:8b:44:1e:ab:07:e8:
28:51:03:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:41 2026 by rpki-client