Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8m133AVWcvWE3wzXHKV3nygv8xw.roa
File: 8m133AVWcvWE3wzXHKV3nygv8xw.roa (raw, json)
Hash identifier: 9aKIdXE7i/E+lAtU9GWJaK81veFXufPbozrL2d2WrDI=
Subject key identifier: F2:6D:77:DC:05:56:72:F5:84:DF:0C:D7:1C:A5:77:9F:28:2F:F3:1C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A00E716CC6F0A67D55EB820863A99E1D0C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8m133AVWcvWE3wzXHKV3nygv8xw.roa
Signing time: Mon 17 Aug 2026 06:38:29 +0000
ROA not before: Mon 17 Aug 2026 06:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 31.58.54.0/24 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.139.0/24 maxlen: 24
31.58.169.0/24 maxlen: 24
31.58.221.0/24 maxlen: 24
31.58.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:71:6c:c6:f0:a6:7d:55:eb:82:08:63:a9:9e:1d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 17 06:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f26d77dc055672f584df0cd71ca5779f282ff31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:fb:7d:38:f9:d8:d8:11:80:67:30:d7:ba:
99:5c:e7:90:ec:41:0a:da:8d:70:6f:2f:01:a6:4b:
fa:03:22:19:ab:8d:0a:d0:38:7c:ca:66:15:61:e6:
a0:2d:10:e8:97:59:a9:24:7f:17:0a:36:54:f4:95:
7a:68:1a:73:29:28:93:89:e5:0b:67:7f:14:f1:69:
fd:ab:37:67:b8:38:0d:9c:3e:69:c6:e1:9e:70:ab:
d7:68:65:33:e4:54:e2:a2:be:80:5c:6d:bb:f6:0b:
e4:78:90:c3:c7:d1:24:e4:c7:7f:aa:31:46:6b:a0:
cc:26:e3:8d:40:ab:4a:13:63:22:d3:1e:37:50:9f:
86:11:ea:08:9e:cf:8b:c2:b9:02:55:e1:9d:21:6b:
95:85:de:01:db:6a:fd:d2:d3:f8:2e:64:0a:11:a0:
ba:43:43:7a:47:24:7e:4c:d7:f8:cc:52:ec:e3:da:
64:6a:b6:df:e6:77:dd:a4:e0:c4:70:b6:56:8f:82:
c1:97:91:2f:97:9f:c2:89:4c:32:8a:81:93:c6:20:
c8:41:4e:9d:ff:e3:82:bc:a6:c1:04:98:5f:d2:11:
91:31:6e:00:39:4e:8d:55:f0:b4:7e:c1:3b:63:6e:
8b:90:17:9b:3a:db:83:ff:09:a2:40:62:db:81:d5:
77:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6D:77:DC:05:56:72:F5:84:DF:0C:D7:1C:A5:77:9F:28:2F:F3:1C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8m133AVWcvWE3wzXHKV3nygv8xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.54.0/24
31.58.131.0/24
31.58.139.0/24
31.58.169.0/24
31.58.221.0-31.58.222.255
Signature Algorithm: sha256WithRSAEncryption
72:9c:e5:2e:c6:63:62:8e:3c:8e:5a:7f:45:1c:b1:c3:6f:01:
cc:c0:e3:d7:ba:1a:48:2e:8c:54:c9:96:7d:f6:86:6d:c1:74:
a9:a6:cb:6e:ec:e1:a5:4d:5b:47:39:93:a3:82:e9:d3:76:48:
31:0f:f4:67:e8:2a:8d:d8:cb:74:9a:d8:38:b5:86:3a:dc:5d:
11:57:25:c4:f2:e1:09:8d:f6:b5:c1:01:a6:2c:a2:30:56:28:
4f:7a:c3:a6:7a:ca:70:ac:73:a8:fc:84:56:88:9c:01:34:52:
e2:b2:f0:34:7c:e4:23:9c:a4:10:86:f5:84:45:48:dc:c8:17:
a6:30:e8:50:d7:2c:75:94:c0:e7:4b:0b:79:ad:76:3a:e0:c2:
65:11:1c:6d:a5:2d:3e:3b:87:88:3f:04:a2:59:ea:2f:9b:92:
13:a0:fb:07:82:d4:91:41:c0:16:e0:dc:d6:61:9f:b0:8d:63:
b3:20:d2:04:a6:ac:30:2d:14:35:7d:27:77:d5:74:37:9c:d5:
53:69:96:b2:0e:dc:37:db:c7:0a:34:0a:46:ff:19:cb:e2:70:
bd:6e:aa:6e:6c:26:71:90:e9:60:ed:09:6b:c5:1e:ba:12:b1:
29:ea:73:34:33:08:23:b4:1e:1d:3b:04:5a:28:18:84:79:a8:
4a:64:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:31:24 2026 by rpki-client