Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DX1AKkeNN3Of-NWIx8yzmUOdaxg.roa
File: DX1AKkeNN3Of-NWIx8yzmUOdaxg.roa (raw, json)
Hash identifier: dxhpyyuMGVgooG1q0pdUbN6Jnh7ULIq52VuXa+TpX6Y=
Subject key identifier: 0D:7D:40:2A:47:8D:37:73:9F:F8:D5:88:C7:CC:B3:99:43:9D:6B:18
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EF9FD9DF6105B6621DCA1056908EF9A54
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DX1AKkeNN3Of-NWIx8yzmUOdaxg.roa
Signing time: Wed 24 Jun 2026 14:16:48 +0000
ROA not before: Wed 24 Jun 2026 14:16:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 31.58.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:fd:9d:f6:10:5b:66:21:dc:a1:05:69:08:ef:9a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 24 14:16:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d7d402a478d37739ff8d588c7ccb399439d6b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:16:a2:7e:a5:83:6d:04:96:3c:62:cc:d9:
28:12:bc:57:cf:44:ff:38:ff:2b:d7:9a:34:10:d5:
cc:da:58:a0:a1:a7:b9:dd:4a:d0:ea:14:61:02:03:
d9:c3:be:e9:11:20:c3:86:05:ae:3f:75:c5:0c:39:
f3:5c:64:13:c9:93:29:93:26:fb:63:73:d5:be:5b:
6c:fa:60:41:f2:e7:67:4e:5e:27:cc:40:5e:d2:13:
e4:c5:1d:91:81:40:20:c4:18:78:3c:3c:b0:6b:26:
5b:9f:d7:a9:2e:5c:2f:da:5c:42:8a:22:0f:04:b8:
92:0a:ad:a4:7e:41:14:08:e7:1d:0f:e8:ee:2b:de:
36:2a:02:48:63:a9:a3:ad:ef:ad:81:ad:1b:cd:59:
a7:1e:08:87:cc:1a:0c:ca:6c:15:69:84:d2:e0:b9:
a8:f6:c8:3a:a4:85:ff:61:de:c2:bc:20:65:46:8d:
60:fc:5e:4d:3c:6e:69:a5:e4:60:5e:76:2a:e5:92:
11:2e:c2:c3:ce:3a:fc:56:e2:f4:8f:4d:c1:f5:0d:
36:83:72:6b:fd:0d:a3:a5:58:a1:94:b6:f4:72:8d:
5f:6d:d7:53:48:8e:8b:50:39:c2:c6:0e:9d:4d:0a:
a3:d6:fd:de:1f:9a:ec:c1:a8:b4:cd:59:fb:27:34:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7D:40:2A:47:8D:37:73:9F:F8:D5:88:C7:CC:B3:99:43:9D:6B:18
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DX1AKkeNN3Of-NWIx8yzmUOdaxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.208.0/24
Signature Algorithm: sha256WithRSAEncryption
75:6b:d4:2e:1b:ca:52:e5:91:f7:79:22:95:3a:ae:30:7f:86:
03:db:a7:40:cb:c8:8a:e3:1e:9b:f2:34:b0:d0:65:52:06:ec:
c5:9f:23:af:19:75:90:40:6f:a1:25:6c:d2:9e:17:5b:13:34:
00:d7:98:ea:ad:65:1e:01:9d:b5:58:72:46:d1:20:2c:02:ff:
15:1e:81:c2:e2:4f:3a:e0:1b:a2:69:fd:ca:af:63:5d:64:0a:
c4:27:fb:90:37:bb:10:21:23:0d:ae:72:45:60:cb:b0:7d:09:
45:ff:1e:3e:ba:b4:75:4e:73:b0:61:2b:ec:3e:e3:4b:e1:dd:
5d:c0:ef:c8:58:b0:96:df:19:42:b4:6e:02:5f:58:59:33:25:
b0:45:a7:89:91:f0:03:8e:fd:d1:70:61:9e:3d:3c:b7:09:8c:
ad:d2:cf:00:aa:7f:75:ea:b0:25:fd:38:87:be:77:7c:ec:93:
ea:7e:95:20:11:04:b1:97:c9:2c:59:69:33:19:91:3c:73:4c:
ce:f9:0b:c7:36:7f:e7:90:47:cf:08:08:a3:8b:f6:e3:f6:5a:
7a:b0:be:61:ec:df:56:ec:55:1f:c9:34:5b:33:7a:f9:55:41:
69:cc:28:00:bf:d6:ae:15:03:86:5e:2a:d0:8a:03:9d:d9:87:
06:10:4c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 17:05:42 2026 by rpki-client