Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/55gNzJ-yW7yM6cABz3h-uXG8oAY.roa
File: 55gNzJ-yW7yM6cABz3h-uXG8oAY.roa (raw, json)
Hash identifier: Ks94Vrh9/0kOa9AvTYbc7Qu46qP8QRXF7LcWfVISdVs=
Subject key identifier: E7:98:0D:CC:9F:B2:5B:BC:8C:E9:C0:01:CF:78:7E:B9:71:BC:A0:06
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FE25B284552A2D6A43EED4C5D505A7D19
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/55gNzJ-yW7yM6cABz3h-uXG8oAY.roa
Signing time: Sat 08 Aug 2026 17:10:52 +0000
ROA not before: Sat 08 Aug 2026 17:10:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 31.58.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e2:5b:28:45:52:a2:d6:a4:3e:ed:4c:5d:50:5a:7d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 8 17:10:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7980dcc9fb25bbc8ce9c001cf787eb971bca006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:5b:04:76:29:61:e5:9c:c2:1b:54:1a:2e:
93:05:b9:f1:a5:f9:b4:19:6f:88:f6:de:84:43:50:
76:3e:9a:84:c2:c8:81:52:be:3b:01:d4:b1:06:ef:
6e:b4:79:fb:3f:b4:97:20:0a:8a:25:37:58:4d:ac:
3b:5f:16:c5:01:00:63:a3:23:dd:7f:a0:45:a6:cc:
62:74:93:0c:07:9d:7e:f1:0e:67:a9:d4:75:50:0c:
67:28:d6:49:a9:0c:0d:bf:8f:3f:26:a0:f8:bd:2f:
fc:ba:36:0e:c4:ba:da:98:af:06:05:6a:0e:a2:b5:
42:15:c4:2d:1f:44:60:f7:b5:b3:08:31:0f:f1:52:
e9:5c:cf:12:04:59:1e:2f:d5:a0:44:26:c2:ae:59:
a2:b3:4c:02:83:e0:d2:d9:87:cf:1f:2c:e1:b5:f9:
22:2a:ff:ea:91:f1:20:72:3f:c9:88:01:a2:83:e5:
56:a9:66:2f:06:8d:b7:d5:ea:e9:17:cf:e3:6d:ed:
f3:fa:b3:96:4e:bd:9c:87:d6:36:33:64:f2:e8:f6:
3c:93:eb:1e:ec:20:57:dc:5b:4d:76:a1:ca:85:27:
b8:d8:75:70:ca:38:df:7e:5a:ce:e5:23:0d:ef:32:
a8:6f:4f:7a:2d:53:0d:fb:58:b9:0f:80:f8:74:df:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:98:0D:CC:9F:B2:5B:BC:8C:E9:C0:01:CF:78:7E:B9:71:BC:A0:06
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/55gNzJ-yW7yM6cABz3h-uXG8oAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:20:3a:c7:3c:9a:f3:31:69:0b:74:0e:a8:3a:f0:58:d9:2b:
03:36:ea:db:f9:36:d5:aa:e5:43:91:44:f5:21:bc:68:cf:08:
0c:47:90:3c:0b:9f:a9:02:f7:65:bc:c3:45:55:f6:5c:db:d5:
23:81:01:af:44:98:86:76:2f:b0:49:c3:5a:b8:67:72:c2:09:
34:e4:cb:0c:45:dc:15:9b:2a:f0:fd:2c:98:a0:61:50:7b:67:
46:19:e0:69:43:50:17:53:2e:57:ce:0c:a4:3a:da:45:9d:67:
ed:7f:0b:a5:e5:a5:1c:10:dd:fd:12:9a:0e:17:7f:0c:92:98:
8b:13:f1:be:53:aa:ad:e6:5c:09:63:4a:fd:3c:e1:ec:62:82:
3e:29:1f:f1:3b:43:81:e3:02:e3:62:2f:c1:92:e2:54:d4:86:
e1:2b:92:c9:08:d6:22:4e:34:1a:68:fe:81:ce:34:f3:6e:96:
79:92:39:12:9a:64:5f:69:63:08:0b:21:cf:8c:c4:31:45:3b:
34:a2:2e:68:a6:02:a5:d2:c8:5a:b3:b5:f3:aa:53:27:41:2e:
12:30:77:92:2e:49:59:2d:1a:81:03:c5:f0:c2:7b:5a:56:f8:
6d:7f:b9:0f:78:57:0d:b5:8c:7b:c3:06:d1:5f:df:6e:eb:c0:
ea:c2:fc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:14 2026 by rpki-client