Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8eheZhhTHHYvmfTobv2z2y_trxU.roa
File: 8eheZhhTHHYvmfTobv2z2y_trxU.roa (raw, json)
Hash identifier: AAOFz5WYAlkN3qDav/Rg7XVBTDbkgPrQmKzpnnqX+ks=
Subject key identifier: F1:E8:5E:66:18:53:1C:76:2F:99:F4:E8:6E:FD:B3:DB:2F:ED:AF:15
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FD60936412A5B45F4F7DFC06C3856EC49
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8eheZhhTHHYvmfTobv2z2y_trxU.roa
Signing time: Thu 06 Aug 2026 07:45:55 +0000
ROA not before: Thu 06 Aug 2026 07:45:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 31.58.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:09:36:41:2a:5b:45:f4:f7:df:c0:6c:38:56:ec:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 6 07:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1e85e6618531c762f99f4e86efdb3db2fedaf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1b:79:7c:29:1a:28:48:24:c5:0a:03:4b:59:
ac:14:45:56:50:56:19:2d:20:3f:ac:bc:c3:8c:30:
3c:fb:b7:5e:d8:f7:22:2d:63:29:3e:cd:dc:5d:85:
05:06:6c:51:5d:a1:10:30:0c:12:9b:55:23:d3:e9:
7a:58:6d:7e:c9:d6:44:98:8c:2d:a0:d2:a7:9b:e5:
4a:97:16:93:e4:99:bb:52:3b:a6:c7:2c:0c:42:94:
20:04:ca:5e:0f:5a:df:6d:16:9c:a7:50:69:0e:b7:
14:4a:e0:b2:e0:14:5e:95:7b:14:41:a4:3b:14:28:
8e:38:71:2b:7e:64:09:93:c9:07:f9:14:cd:17:c7:
47:5b:a1:98:81:02:a3:36:d0:0d:90:6f:43:f0:0a:
5b:42:ce:c3:43:f8:1e:1b:fc:5b:2b:74:4a:95:11:
a7:3e:70:7f:fc:e7:c7:cf:f3:06:64:2d:a2:e4:f4:
01:4b:7c:7f:23:b7:cf:f7:37:a6:46:3f:47:56:be:
13:65:1f:6a:32:fa:8a:d8:72:39:56:83:87:3a:8e:
7b:d9:81:d3:8c:f5:b4:29:8c:ac:c5:d8:b0:05:97:
3b:8f:ec:08:fd:2d:37:60:e3:de:7c:19:7e:63:6e:
ef:92:bc:28:3a:f8:25:eb:0a:48:2d:e5:56:56:e8:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E8:5E:66:18:53:1C:76:2F:99:F4:E8:6E:FD:B3:DB:2F:ED:AF:15
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8eheZhhTHHYvmfTobv2z2y_trxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fa:93:3c:ae:dc:32:1e:a7:2b:25:56:29:b8:17:a8:66:30:
f1:43:f8:b1:37:df:99:a9:60:27:20:2e:f4:94:f3:17:bb:5e:
a9:8a:6f:d0:36:08:c8:d8:df:1a:37:99:a1:6a:76:79:5c:35:
8b:3b:39:ee:5a:39:94:a1:c3:6c:10:19:19:29:fa:4e:53:86:
81:5a:bb:7a:5c:63:2a:ca:88:60:16:b8:4a:bc:b1:77:c0:f4:
98:4c:fe:81:4c:bc:c5:09:97:52:9b:a7:96:33:97:d6:5a:7a:
79:40:ab:82:c8:e5:76:12:90:ae:4d:19:e2:6e:27:0a:1d:be:
af:5b:e2:88:ff:df:08:11:69:2a:a7:7e:25:cd:f9:13:6d:2c:
af:87:cf:48:e7:c6:83:2d:0d:b3:1a:d0:df:17:f7:4c:3c:49:
b2:1d:39:ce:a0:12:5e:a1:1c:a9:09:1c:e0:35:79:4a:ba:26:
2c:9a:39:15:0f:0e:4d:00:43:ea:53:73:16:26:42:5e:bf:75:
88:fe:37:53:58:84:00:4a:0d:0d:19:16:aa:ec:a9:0e:6c:43:
cc:e2:c3:53:8f:61:55:01:96:58:e4:2f:f4:58:86:ed:95:4f:
d5:69:50:98:63:52:4b:b4:fe:a3:aa:c3:a1:53:88:6d:f8:2f:
b7:79:fe:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 06:59:12 2026 by rpki-client