Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/78jMQHLMiyOd8OPLQ9W9ZC36LTI.roa
File: 78jMQHLMiyOd8OPLQ9W9ZC36LTI.roa (raw, json)
Hash identifier: rn2TOBl7DPhZMlhycEzzEl+ERZlnW8ue3n88nof6nKw=
Subject key identifier: EF:C8:CC:40:72:CC:8B:23:9D:F0:E3:CB:43:D5:BD:64:2D:FA:2D:32
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A03881DAAB5DB72BD4C9E2F6008FEE7944
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/78jMQHLMiyOd8OPLQ9W9ZC36LTI.roa
Signing time: Tue 25 Aug 2026 10:40:29 +0000
ROA not before: Tue 25 Aug 2026 10:40:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 31.57.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:81:da:ab:5d:b7:2b:d4:c9:e2:f6:00:8f:ee:79:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 25 10:40:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efc8cc4072cc8b239df0e3cb43d5bd642dfa2d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:a8:28:7d:23:69:a4:d5:c8:62:18:ba:75:
ff:8e:a1:2d:3c:a0:1d:10:59:5f:ce:aa:48:8a:66:
cc:35:1a:20:95:e6:21:98:f8:bc:e7:b2:4e:c7:b2:
f4:23:52:b4:26:b7:1d:b6:02:e8:11:15:68:a8:33:
65:6b:d7:1b:28:d1:55:8a:b7:e0:c5:3e:00:4d:df:
35:26:d2:c9:57:ee:91:93:3c:55:7f:f6:ec:37:90:
84:09:70:19:a7:36:3a:ef:e2:42:3b:45:cc:14:bf:
d9:18:23:22:ea:30:fe:da:2a:2f:51:eb:f1:74:b9:
56:0f:61:f6:1b:84:c6:5a:81:aa:d6:c9:ae:81:c0:
8a:b6:f0:71:b4:41:5c:be:ad:2f:98:81:d6:18:6a:
f5:19:24:14:a3:46:8a:d7:f9:7b:bd:0f:62:fe:30:
9d:02:24:41:7b:78:ac:a6:54:34:f3:49:ba:fe:70:
3c:31:e1:31:63:96:00:11:f2:2b:a6:b8:6d:3b:de:
9a:b5:40:34:b3:56:77:1e:ff:11:52:cb:32:dc:b0:
37:2e:21:4a:3a:ed:de:30:09:8b:69:49:fd:7c:4e:
de:d1:10:6d:03:3d:7e:42:36:b9:46:12:d2:5a:0f:
2c:0c:b2:53:ae:2f:22:cf:ed:99:1e:1f:a0:9e:2b:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C8:CC:40:72:CC:8B:23:9D:F0:E3:CB:43:D5:BD:64:2D:FA:2D:32
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/78jMQHLMiyOd8OPLQ9W9ZC36LTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.171.0/24
Signature Algorithm: sha256WithRSAEncryption
30:84:5e:3e:5a:ee:86:fc:ff:3b:a1:5b:77:76:54:53:3c:07:
fa:96:be:b3:1d:ae:16:e7:03:3c:70:e1:72:9c:a9:f1:77:1c:
95:4e:9f:64:5d:85:b0:ec:3b:9e:ee:0b:a7:b3:c3:97:04:24:
66:a8:ed:02:6a:92:51:4f:d9:c1:0d:8a:50:0a:8e:cd:35:0f:
ad:f1:1a:94:e2:1c:93:60:af:32:dd:b0:a4:9f:8a:c1:40:c4:
03:e5:27:5b:67:40:44:a3:7f:42:7b:6c:33:01:0d:38:6e:c2:
14:1b:75:fb:c5:9d:ef:b2:47:60:5c:19:6b:f5:02:f2:91:b9:
d2:70:3b:b1:3e:15:91:63:94:85:8f:d7:6d:c2:b7:db:ed:b2:
cb:0e:ec:fd:0c:f4:9c:be:f9:6e:ac:de:55:ff:14:26:2c:f0:
a8:b7:b2:3e:be:7f:48:dd:b6:87:2e:f9:c8:fd:33:29:1c:1a:
98:01:54:f5:c7:19:66:e5:f8:6f:f8:a9:65:28:42:55:37:82:
f5:e2:8e:da:8b:f2:80:b5:bb:14:9c:b2:e8:fd:84:1c:ac:df:
9d:56:e1:e5:e8:d2:34:4e:5d:1a:2a:1f:fe:74:c4:90:7c:2b:
f4:1d:58:ec:7d:f1:36:29:d5:2a:59:a5:a2:73:b9:32:2d:43:
fb:ca:95:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:39 2026 by rpki-client