Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HzFxB0OZD2vsTkpO1GkMl3FHfZM.roa
File: HzFxB0OZD2vsTkpO1GkMl3FHfZM.roa (raw, json)
Hash identifier: ZmJN6B4KIYEWnqsi2m0Dbfy6+PJ9i4okgJ1BOi8EBF4=
Subject key identifier: 1F:31:71:07:43:99:0F:6B:EC:4E:4A:4E:D4:69:0C:97:71:47:7D:93
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E5FB6877120D9EA058FD7D2C99003C591
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HzFxB0OZD2vsTkpO1GkMl3FHfZM.roa
Signing time: Mon 25 May 2026 15:17:38 +0000
ROA not before: Mon 25 May 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202413
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.39.0/24 maxlen: 24
94.183.170.0/24 maxlen: 24
217.60.8.0/23 maxlen: 24
217.60.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:b6:87:71:20:d9:ea:05:8f:d7:d2:c9:90:03:c5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 25 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f31710743990f6bec4e4a4ed4690c9771477d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:5e:23:57:82:35:7f:5f:6d:ce:a5:a1:eb:
77:d2:a4:c0:be:69:f7:a7:6b:52:b0:7e:42:d5:50:
72:f6:54:3c:a5:f3:e5:aa:c8:b6:a8:4c:e9:df:bb:
05:de:fb:f9:4f:19:a6:10:ae:94:bc:2f:72:bc:33:
49:95:bf:fa:9b:d2:e0:a0:b6:cc:be:7b:d2:e2:f4:
3f:70:2e:aa:6e:5b:48:4a:e5:75:07:86:ce:d7:ff:
d6:02:b3:6f:b9:64:94:25:6c:c8:a2:9d:9d:12:75:
7f:4a:ce:02:f6:0c:1c:c3:c3:33:6b:92:79:23:0d:
25:15:78:6f:8e:7d:e7:57:a6:e1:6c:7b:c5:b4:16:
ff:eb:4c:98:c7:3e:b9:55:59:07:97:04:8e:da:e4:
31:8d:d8:f7:86:26:f8:49:e3:39:10:cc:56:78:d5:
cc:25:db:86:ec:29:47:55:47:ac:ca:73:17:6a:de:
4f:e4:ea:14:59:be:a7:48:b5:54:df:b2:1a:41:d2:
01:34:29:e6:58:68:86:15:ba:8f:b0:25:75:2a:43:
7e:4a:28:a2:5a:a9:1f:b7:25:19:09:10:48:c8:72:
7a:32:8b:14:3c:7e:96:7c:80:b5:f8:fc:f2:34:3b:
53:42:eb:3f:27:22:de:40:5d:f5:ba:5d:ab:d8:6d:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:31:71:07:43:99:0F:6B:EC:4E:4A:4E:D4:69:0C:97:71:47:7D:93
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HzFxB0OZD2vsTkpO1GkMl3FHfZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.36.0/24
31.59.39.0/24
94.183.170.0/24
217.60.8.0/23
217.60.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:55:e1:fd:2c:85:19:ae:7d:f3:b7:90:9a:01:f1:37:05:eb:
7c:69:5d:4a:61:53:20:6b:4f:a8:e8:c6:f4:03:28:9e:e6:d8:
0e:58:26:05:23:9d:3d:b5:41:56:5b:b7:1c:78:33:9e:1f:28:
88:db:49:08:fc:6a:d5:4f:99:4a:3c:66:0a:92:c9:42:b1:bf:
65:4d:9a:14:24:1e:23:8e:03:f6:f7:18:d6:4e:ef:b1:b5:2d:
05:32:e2:9f:08:a3:ba:a6:fd:e0:35:8f:6f:4b:51:7e:c2:8f:
56:c7:50:a5:7e:67:a0:4e:84:1c:73:98:1f:c8:5f:39:2b:a8:
6d:db:d0:64:56:3c:7b:a4:52:59:fa:cb:db:b9:23:c1:51:bd:
ed:c0:d7:7a:bb:90:64:46:28:fe:fb:c7:fb:9c:11:b2:a3:2a:
c6:ae:3f:a2:9e:63:9f:32:3e:63:9f:d5:57:3b:30:1f:38:74:
df:4e:96:7f:ce:a7:4b:8c:79:ee:ed:df:35:c2:14:5c:b2:7a:
bd:62:f2:6c:46:1a:0b:46:c3:f7:45:71:a1:a6:74:b6:d1:c1:
34:10:a0:59:d2:04:47:53:9d:33:85:57:e0:99:65:39:61:93:
55:bc:e0:76:0f:a2:36:c5:c0:b5:a2:b0:64:f9:45:1b:db:68:
93:fc:df:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:55:14 2026 by rpki-client