Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8XjxBfjVB0xviKwa5M-APc4Fg-M.roa
File: 8XjxBfjVB0xviKwa5M-APc4Fg-M.roa (raw, json)
Hash identifier: brusatiaEAbeTC1tbRZm3BNIHkWhbd5cw6BSBSoiWrI=
Subject key identifier: F1:78:F1:05:F8:D5:07:4C:6F:88:AC:1A:E4:CF:80:3D:CE:05:83:E3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C08A2C7B99BEC61A1BEB8F628C0A5786F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8XjxBfjVB0xviKwa5M-APc4Fg-M.roa
Signing time: Thu 29 Jan 2026 07:23:31 +0000
ROA not before: Thu 29 Jan 2026 07:23:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209829
IP address blocks: 31.58.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 19:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:08:a2:c7:b9:9b:ec:61:a1:be:b8:f6:28:c0:a5:78:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 29 07:23:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f178f105f8d5074c6f88ac1ae4cf803dce0583e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:d7:0a:04:f6:37:af:60:05:31:dc:e2:4d:
16:f8:75:50:98:f7:6f:4e:70:49:8a:0f:f2:45:6f:
01:f4:a4:d1:1d:e2:71:4c:7b:35:c3:b5:34:cf:e8:
96:66:ea:44:12:b4:62:2c:fb:db:41:6b:17:e1:2d:
84:84:2c:8f:cb:54:03:a1:17:6c:ab:16:eb:5b:76:
9f:16:ef:5a:93:94:66:be:dc:5b:ce:b7:5e:ea:d8:
49:ab:61:fb:39:1d:12:e9:e8:10:9a:36:74:d3:92:
bf:8c:33:c5:5b:59:d4:43:af:90:21:3d:29:82:af:
cb:b9:5d:f2:c1:9d:0e:f1:7e:82:35:f1:eb:a6:f5:
69:c3:72:37:92:47:8a:67:b1:56:e6:c6:fd:29:bc:
84:bb:92:64:6e:26:dd:8b:18:58:91:88:34:d1:3e:
46:c5:fb:3a:da:fb:c7:42:b9:9d:fc:5b:50:4c:1b:
62:c8:f8:ba:ac:5d:ee:c6:ad:7c:82:81:31:75:80:
a6:c4:bf:37:c3:d9:b8:a7:75:ce:42:94:c0:18:17:
a9:59:07:de:2c:23:c2:c5:a2:6e:ef:1a:f3:c0:f5:
07:36:f6:76:35:3a:16:92:68:42:c2:4f:51:b4:99:
f1:0b:c1:a8:e0:03:00:da:bb:22:3b:59:df:30:61:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:78:F1:05:F8:D5:07:4C:6F:88:AC:1A:E4:CF:80:3D:CE:05:83:E3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8XjxBfjVB0xviKwa5M-APc4Fg-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.157.0/24
Signature Algorithm: sha256WithRSAEncryption
79:35:5f:60:62:ea:07:01:b8:55:92:4a:f6:72:46:a1:a3:27:
0e:52:a4:d4:7f:0c:b2:51:b5:16:ac:7b:1e:0e:f7:79:b4:78:
8d:f6:6f:4d:57:d7:5c:fb:1b:7a:89:94:4c:74:16:00:11:7f:
f6:c6:0e:f6:65:c2:95:5a:ac:f1:e8:9b:29:d4:7b:33:17:76:
0d:e7:29:b9:de:a1:e2:04:b8:32:1d:e2:fe:4f:a5:5c:06:7f:
19:f0:34:25:08:9a:46:96:e2:45:0d:e9:4c:46:b3:b7:93:90:
53:e4:4a:9c:98:c2:4e:e7:b9:ce:01:71:94:b8:28:b8:08:23:
15:5e:32:af:fd:83:a2:33:20:a5:c9:1a:e5:7f:9b:fb:6f:01:
58:08:57:ef:cb:4f:1c:91:0f:a8:63:92:d3:f9:ba:fd:2a:14:
95:a7:b6:1e:11:dc:7b:42:e2:1a:ff:95:1b:37:2a:5f:cc:38:
98:29:02:e1:88:a5:d5:5f:d6:b9:1c:7d:5e:ae:62:eb:53:6b:
56:f8:35:53:ac:f1:14:5e:c1:ad:18:f6:f3:d8:05:18:38:8d:
9e:8b:3b:50:be:28:56:a5:11:be:d0:58:b3:37:48:10:36:a5:
98:0d:0d:bc:4a:d0:ec:24:73:33:f3:c2:94:74:39:7c:ac:2e:
52:ad:d7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:41:30 2026 by rpki-client