Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EqhkzRv_S0dCEWnS3_cUQh4YzlI.roa
File: EqhkzRv_S0dCEWnS3_cUQh4YzlI.roa (raw, json)
Hash identifier: oKbEP5V8K+oRyeLfLqKcbjTKIo+3kyvzA0OKk8JZ+M4=
Subject key identifier: 12:A8:64:CD:1B:FF:4B:47:42:11:69:D2:DF:F7:14:42:1E:18:CE:52
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FB72EFAF86C50762798DAA7239DCAE01E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EqhkzRv_S0dCEWnS3_cUQh4YzlI.roa
Signing time: Fri 31 Jul 2026 07:58:57 +0000
ROA not before: Fri 31 Jul 2026 07:58:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153947
IP address blocks: 31.59.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 18:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:2e:fa:f8:6c:50:76:27:98:da:a7:23:9d:ca:e0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 31 07:58:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12a864cd1bff4b47421169d2dff714421e18ce52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:06:54:9f:ff:25:29:66:ac:d2:73:d6:cd:
32:49:76:ef:8e:3f:36:87:fb:15:f8:9d:23:34:af:
42:c9:06:68:a9:c5:07:69:89:21:fa:00:37:c4:c5:
a2:db:e1:03:66:32:de:8d:5d:1e:35:60:5a:61:d1:
93:12:2f:ab:91:c8:ea:3f:74:6a:77:13:04:29:29:
53:ad:48:18:75:be:4c:78:38:f6:95:e1:e2:91:85:
92:2d:8c:d4:ec:03:d9:af:a8:ff:72:9e:1b:5d:14:
ab:62:bd:58:96:e9:20:37:ad:30:0c:c2:b0:df:29:
a6:6e:db:b9:9b:d2:55:e3:f5:3d:9d:f1:fd:48:54:
d3:12:21:bd:95:43:14:f4:31:5c:9e:12:92:ad:11:
ae:ab:de:0a:d8:89:c2:04:4b:86:12:0a:9b:2e:33:
9f:ea:f9:a6:6b:be:ee:c7:b6:7b:30:43:aa:bb:ca:
05:77:39:cc:56:fe:43:9f:db:45:a8:47:6e:dc:1e:
1a:16:04:f5:cb:d4:bc:03:5b:d0:d1:07:87:f9:64:
2f:1f:8c:f9:b5:76:09:73:33:8a:73:79:71:32:fa:
96:d7:a2:ea:13:7d:80:ee:f2:6f:cb:16:9b:5d:da:
b8:8d:e2:8a:43:05:e0:bd:24:c2:49:6a:20:8e:e3:
19:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A8:64:CD:1B:FF:4B:47:42:11:69:D2:DF:F7:14:42:1E:18:CE:52
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EqhkzRv_S0dCEWnS3_cUQh4YzlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.52.0/24
Signature Algorithm: sha256WithRSAEncryption
52:07:d3:20:b3:1f:8c:4e:ca:da:31:df:67:e6:b8:e9:63:87:
3c:2b:34:3e:fc:c9:68:74:7c:83:be:21:e2:a6:74:07:6c:34:
2a:c9:eb:34:e6:06:b9:d3:ad:b0:87:05:0e:88:cd:94:18:3a:
6a:c7:eb:59:92:44:d5:db:a1:1c:2e:3a:ae:93:7c:f3:eb:62:
37:e4:b3:23:17:bf:65:a6:e0:30:6a:1a:81:a0:3a:aa:87:9e:
05:e9:6a:bd:e2:66:68:47:d2:97:2a:4e:ce:2b:c3:9d:54:83:
f1:63:19:83:3b:11:05:a9:fb:be:5d:e8:e8:03:94:74:f3:80:
45:d9:93:84:d2:e9:0a:4d:7c:8e:b9:b2:14:c3:36:10:a5:e8:
ad:6d:a3:22:12:d3:be:2a:2f:ce:bd:2b:09:2f:e3:b1:80:0f:
c7:e3:d8:e1:cb:d5:73:ad:6e:e4:70:1a:16:b9:2b:03:fd:a8:
85:87:b0:50:a6:85:1e:82:37:b7:87:05:b2:d1:13:91:5d:e9:
ff:ea:e7:60:4f:af:1f:0b:d6:3a:e9:1e:66:18:fa:af:51:7c:
a3:01:58:b9:04:e1:34:b1:22:8f:a5:d0:bb:6c:38:1f:00:fd:
5d:44:1c:29:57:5a:f5:76:b7:fb:53:b3:24:4d:fc:48:24:02:
e2:24:f7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:58:31 2026 by rpki-client