Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5GTpDx9wESopgpumdCKul5u035Y.roa
File: 5GTpDx9wESopgpumdCKul5u035Y.roa (raw, json)
Hash identifier: XDLzd9ark4Xo9sODzuzUdVRrBSjdHP+qxd/Hqf38SSI=
Subject key identifier: E4:64:E9:0F:1F:70:11:2A:29:82:9B:A6:74:22:AE:97:9B:B4:DF:96
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A01075C723240796605D9A369A57C099B4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5GTpDx9wESopgpumdCKul5u035Y.roa
Signing time: Mon 17 Aug 2026 16:02:29 +0000
ROA not before: Mon 17 Aug 2026 16:02:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210457
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.39.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
94.183.238.0/24 maxlen: 24
94.183.239.0/24 maxlen: 24
94.183.254.0/24 maxlen: 24
217.60.8.0/23 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:75:c7:23:24:07:96:60:5d:9a:36:9a:57:c0:99:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 17 16:02:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e464e90f1f70112a29829ba67422ae979bb4df96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:7d:b1:f0:a5:98:fd:b7:ca:79:73:40:8d:
b3:fc:be:eb:eb:03:8d:c6:c6:c8:26:69:c1:f4:17:
48:b2:25:48:6e:b4:73:75:86:88:b9:8f:b0:a3:cc:
da:ad:93:9e:72:10:40:00:02:2c:3c:a0:e0:90:3e:
da:c4:df:34:ed:d1:84:98:f9:0c:35:0c:cd:46:76:
d1:9b:46:b5:e9:54:a8:e9:fd:0b:a1:c9:13:f2:0e:
39:24:74:c1:93:09:c9:40:03:09:4e:77:cc:b5:03:
cf:6c:f9:9b:38:e1:81:95:b6:f9:57:c2:59:39:1a:
fc:bc:b7:67:d3:28:b2:81:61:10:f0:bf:f5:9f:69:
98:87:9a:a8:59:4a:b2:ec:7a:00:3a:b2:2c:a6:38:
aa:84:bd:db:de:80:f7:af:fe:37:a7:96:8e:6e:7b:
52:df:8d:52:a7:e7:25:e5:a3:49:fa:c3:52:d2:24:
f2:de:eb:79:b9:fe:ab:ee:2b:08:f9:ff:d8:f7:17:
46:ee:6e:dd:f1:51:f7:37:65:f5:f6:e7:f0:21:67:
3e:9c:5d:08:d4:52:39:ab:77:c9:77:b3:04:17:7d:
d4:0c:1b:dc:a6:8c:4d:5c:7d:dc:10:68:5c:1d:ee:
e4:fd:fb:cc:ee:1b:b9:38:e5:01:01:29:56:55:48:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:64:E9:0F:1F:70:11:2A:29:82:9B:A6:74:22:AE:97:9B:B4:DF:96
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5GTpDx9wESopgpumdCKul5u035Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.39.0/24
94.183.226.0/24
94.183.238.0/23
94.183.254.0/24
217.60.8.0/23
217.60.24.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3e:de:bb:26:62:ba:ab:e1:ff:55:5e:b9:c7:86:1b:d0:e9:
3d:cd:db:d8:7c:39:1b:c2:ce:17:c2:e3:7a:a3:36:69:18:b1:
31:14:32:d9:51:9a:56:66:f7:2e:8f:26:dd:57:43:bd:7b:76:
1e:38:c2:51:fc:34:7e:c4:dc:e0:0a:eb:db:62:ba:6a:56:33:
c9:38:72:fb:1b:e8:0f:3c:c3:00:ef:33:df:5b:3d:b7:8e:3b:
6a:fb:56:13:38:bf:5d:9a:2c:dc:47:ae:4d:48:4b:2b:ce:10:
16:13:04:ac:cc:1a:77:af:6e:7f:90:6d:a4:be:3a:e6:e3:fd:
f7:c7:b3:70:03:4f:63:c0:c8:15:a2:81:43:2f:81:10:32:60:
be:b4:a7:66:cf:98:fb:23:16:8c:70:d8:e4:48:18:f2:5a:37:
b5:55:7b:7d:51:82:61:e8:30:c8:75:f9:69:90:f7:fd:51:24:
e5:6e:a0:5e:81:a9:96:db:00:7d:5f:4c:23:db:d6:90:a2:fe:
a0:c6:50:84:48:8f:52:8b:be:e6:6a:07:e3:ef:0b:6c:58:63:
38:0c:bc:0d:1f:de:eb:6f:d7:29:cd:c2:02:a0:21:34:b2:be:
23:a2:10:a3:7a:2f:6b:b0:30:f9:16:e5:5b:67:53:b7:8e:8a:
29:0e:53:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:09:56 2026 by rpki-client