Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EM7slvWygESIOdYNbw6_P4n1BQQ.roa
File: EM7slvWygESIOdYNbw6_P4n1BQQ.roa (raw, json)
Hash identifier: TbhwYTuUUHlxHCuM08mHaesjOSfgs7y7NwSYbFOsVus=
Subject key identifier: 10:CE:EC:96:F5:B2:80:44:88:39:D6:0D:6F:0E:BF:3F:89:F5:05:04
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0E414B0C66995BAD7AC3509F999F3B794
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EM7slvWygESIOdYNbw6_P4n1BQQ.roa
Signing time: Sun 27 Sep 2026 18:15:56 +0000
ROA not before: Sun 27 Sep 2026 18:15:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219502
IP address blocks: 31.59.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:14:b0:c6:69:95:ba:d7:ac:35:09:f9:99:f3:b7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 27 18:15:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10ceec96f5b280448839d60d6f0ebf3f89f50504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:ea:a4:19:d1:a7:82:4b:4b:f4:da:d5:b3:
4e:30:c6:1f:5b:92:8d:70:9a:65:a4:5d:1a:6b:a6:
0a:0a:c4:18:3f:44:60:8a:84:04:45:10:11:4f:b9:
02:6a:1a:d5:1c:d0:46:9b:a5:ad:db:a8:0e:53:90:
b4:1d:f0:af:66:8d:39:e8:6c:b2:93:bc:a6:24:98:
d7:4e:fb:a9:24:44:45:21:3f:68:a5:96:cd:7a:2d:
89:60:39:db:a8:5d:06:b1:ee:76:9d:0d:fa:41:e7:
e5:a7:64:3a:f6:aa:f8:55:19:52:3d:46:8c:4f:b2:
ea:1c:96:39:e2:cf:78:e5:b8:e6:a3:0b:a8:42:3a:
5d:41:cc:47:30:4e:05:79:f5:50:ab:00:ca:9c:da:
5e:08:b6:c8:ce:9f:60:f7:5f:71:14:69:b5:26:a4:
08:ff:e5:a1:02:7b:0d:ad:f5:53:e1:4f:61:31:68:
a7:5b:ba:1c:43:9f:fb:25:0c:d9:58:b2:4e:2d:14:
54:5e:f3:6d:35:9e:b9:f9:5e:b5:6b:bb:02:bb:19:
41:b2:fd:12:f7:3b:63:40:23:8c:94:8e:aa:f8:a8:
d9:33:d4:ed:2c:de:af:c5:f8:50:cb:ae:35:8a:9b:
12:38:7b:50:54:f4:78:20:49:2f:a8:30:5f:7f:db:
ee:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CE:EC:96:F5:B2:80:44:88:39:D6:0D:6F:0E:BF:3F:89:F5:05:04
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EM7slvWygESIOdYNbw6_P4n1BQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.151.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:c9:1d:fc:0f:7d:8b:79:d7:a5:35:5b:d3:6f:c3:2e:0b:98:
e5:97:7e:bc:14:56:8a:97:bd:e2:43:5f:1f:5c:e2:16:fd:97:
b7:f5:f2:32:b3:0f:bd:13:c2:bd:d1:d2:e7:bd:d5:65:52:02:
d6:34:b4:13:22:c4:8c:17:7a:3b:21:2d:76:00:63:90:a2:93:
6b:41:1b:16:87:a7:e0:5d:fa:07:62:6c:2d:cd:21:a9:f1:9d:
6f:50:67:6c:7c:a6:d8:a0:51:1e:e3:2b:88:3e:2a:de:36:ab:
5e:fd:e0:62:5c:6d:a3:cc:72:5f:f4:c0:30:9c:a6:94:da:d3:
5b:58:50:a9:15:12:0f:e5:c2:cd:c0:e9:21:35:6a:6d:b9:7c:
64:f3:8e:bd:3a:2f:ef:9d:48:74:e7:30:e3:54:c0:0a:68:8c:
91:35:24:f9:7f:85:15:ef:8f:4f:ee:ac:40:6e:a9:e3:e8:05:
90:86:55:cb:6d:32:a9:8c:aa:8f:a4:1e:44:eb:10:4b:da:be:
db:fa:3e:7e:5f:66:eb:7e:3e:73:6d:02:ca:bc:f4:3b:81:35:
5d:be:4f:0c:21:b0:5f:02:b9:5b:d8:cf:9f:83:b4:1a:5d:77:
c3:ca:6d:58:41:68:34:67:18:04:52:b3:1f:5a:95:bf:3b:98:
31:2c:3f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:16 2026 by rpki-client