Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JhDcAeWFqIwnLSFmSGsdNM4xyfs.roa
File: JhDcAeWFqIwnLSFmSGsdNM4xyfs.roa (raw, json)
Hash identifier: yM3gR8CagdbkabVmC7KVqh44kVpy54jJCUG2M1G5Rzk=
Subject key identifier: 26:10:DC:01:E5:85:A8:8C:27:2D:21:66:48:6B:1D:34:CE:31:C9:FB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A169C53685FDC7C7510E6199087D92E762
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JhDcAeWFqIwnLSFmSGsdNM4xyfs.roa
Signing time: Fri 23 Oct 2026 17:18:14 +0000
ROA not before: Fri 23 Oct 2026 17:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215197
IP address blocks: 31.58.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:c5:36:85:fd:c7:c7:51:0e:61:99:08:7d:92:e7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 23 17:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2610dc01e585a88c272d2166486b1d34ce31c9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:f3:79:b0:4c:c6:36:93:28:42:f7:6f:b9:
fb:72:7c:0d:34:f7:6e:fb:60:d1:aa:66:49:7b:c8:
db:cf:56:7b:8e:33:6f:fb:39:a1:a8:88:77:65:ea:
11:98:47:c9:4c:7f:e2:53:9d:d5:19:c8:4a:9e:eb:
db:17:6d:85:9c:93:75:20:0a:54:00:4a:ce:e6:41:
6e:de:ad:be:cb:20:e2:43:ec:cd:0c:3e:6b:a4:f5:
4b:bf:d6:d8:84:74:1f:1b:df:19:39:56:a4:9e:83:
18:6e:54:c2:d1:67:1a:ce:88:0e:f4:fc:ba:b9:ee:
dc:6c:23:f5:57:3d:e8:15:59:38:d3:c7:b5:67:f1:
01:00:38:d1:e2:c8:64:e8:d4:eb:1e:cd:27:b3:73:
6d:e9:b1:1c:66:5c:c9:cf:b7:e3:e1:bb:04:63:44:
9c:35:37:99:0d:b1:fe:42:70:b9:54:c2:a9:dd:d5:
86:01:0f:bd:d5:69:88:74:be:76:f0:67:c1:eb:78:
f9:09:eb:de:38:67:8b:ec:a6:60:2c:e1:28:d6:c0:
96:da:b8:29:6c:a0:da:22:44:8a:82:6f:9a:36:1a:
aa:4a:c3:8e:1e:b6:8b:e5:1e:e4:56:22:ab:f8:f5:
0c:87:b8:b8:10:00:0d:58:25:e3:7c:8a:6a:18:4f:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:10:DC:01:E5:85:A8:8C:27:2D:21:66:48:6B:1D:34:CE:31:C9:FB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JhDcAeWFqIwnLSFmSGsdNM4xyfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.144.0/24
Signature Algorithm: sha256WithRSAEncryption
69:fa:80:71:a4:53:a4:04:50:5a:52:9e:3e:9d:fc:cf:62:2b:
df:c0:68:af:31:52:03:3a:26:be:d8:76:e5:12:ea:72:76:dd:
37:d6:33:7b:94:be:0c:21:a7:71:85:cf:bc:c9:d1:56:27:71:
16:f1:8d:ec:5e:37:2d:32:bc:2f:ec:47:50:6f:5c:73:f7:00:
b0:3e:25:e6:58:d7:63:3f:f0:7f:90:80:a0:0f:b0:0d:a3:b5:
f3:7f:fc:c0:95:e5:62:85:ca:18:fa:cf:08:5e:38:28:89:46:
e2:e8:b3:45:5e:0f:6a:ca:0e:37:9a:c2:09:c5:6b:a3:29:41:
a3:c1:4e:34:86:38:7d:ea:a1:75:05:42:50:91:98:c2:27:01:
84:a2:c0:37:e9:32:07:46:07:45:98:8c:6c:2f:bc:c8:7f:cd:
b2:00:16:74:ed:73:ba:04:31:c7:6f:4e:47:54:aa:fb:97:de:
40:ba:95:2d:8c:25:d5:92:b8:4c:4f:11:19:c5:36:d7:6e:33:
21:3f:53:7d:b0:e9:48:31:6f:0d:d0:08:df:39:de:7e:de:66:
4c:bb:a3:bc:b6:83:ed:49:fd:79:85:f4:a4:19:5e:cd:0d:03:
5b:af:79:ad:af:08:83:ac:3c:43:56:82:68:59:a3:95:f3:90:
ff:c1:11:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:09:41 2026 by rpki-client