Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JwtlJGsAWEvRS16yk_TpG040MrQ.roa
File: JwtlJGsAWEvRS16yk_TpG040MrQ.roa (raw, json)
Hash identifier: dcOL1WzbcW2WU1THAVSeCR+F1XDnat5P5f+b92VduN0=
Subject key identifier: 27:0B:65:24:6B:00:58:4B:D1:4B:5E:B2:93:F4:E9:1B:4E:34:32:B4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A173C0A21DF8A48B19DF7D737B486AC912
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JwtlJGsAWEvRS16yk_TpG040MrQ.roa
Signing time: Sun 25 Oct 2026 15:49:26 +0000
ROA not before: Sun 25 Oct 2026 15:49:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 31.58.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:c0:a2:1d:f8:a4:8b:19:df:7d:73:7b:48:6a:c9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 25 15:49:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=270b65246b00584bd14b5eb293f4e91b4e3432b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:72:48:bb:7e:ee:5d:17:21:85:11:64:e5:ae:
ad:89:5e:05:97:4d:1f:11:34:c9:7d:59:d5:12:94:
83:40:11:c9:bf:e0:35:48:bf:45:fa:34:36:ff:4c:
7c:e2:c2:08:ce:85:81:21:c2:26:10:a1:5c:6f:db:
b6:2b:b0:3e:e2:cf:63:82:db:f0:08:cc:e7:7c:25:
8a:2d:6c:e1:b8:f8:72:1e:1b:5e:cd:a7:28:8c:c3:
3c:8c:f7:cf:bd:d8:02:2e:88:c2:51:bd:a6:86:7f:
07:ef:42:cb:7a:8f:59:fd:d6:85:d2:83:4d:b9:dc:
79:d7:56:0d:fa:15:41:ee:ca:34:7e:97:93:7f:c3:
81:16:ef:6d:20:8d:7d:96:93:db:3a:25:7d:45:fd:
4b:92:f7:e2:d4:6b:ab:ab:72:3c:81:c6:2f:06:9a:
11:97:44:6c:8b:81:4b:bb:fd:91:fc:24:cc:fc:e2:
05:4f:e8:36:7b:ce:9f:fc:f0:a9:ed:73:94:d3:5f:
70:56:7e:72:97:9d:09:a7:91:3f:0b:c9:97:8f:6b:
50:31:ff:f1:a3:87:c9:6d:21:58:5f:e0:34:50:a9:
b6:76:d5:07:0f:3a:39:f7:78:2f:14:b9:1b:9c:53:
d8:59:bb:81:50:1e:2b:c4:9b:57:d7:b6:a6:a5:74:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0B:65:24:6B:00:58:4B:D1:4B:5E:B2:93:F4:E9:1B:4E:34:32:B4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JwtlJGsAWEvRS16yk_TpG040MrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.63.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9a:4d:e0:b8:86:6d:88:55:b2:c4:6c:db:e2:84:e6:c0:09:
89:ae:26:a5:09:6a:c1:7a:09:96:f6:4a:00:7c:c3:9d:f4:8b:
3a:1c:3a:f3:92:82:0f:63:79:c4:a4:d9:6b:38:1e:65:ec:bb:
24:5f:35:bc:d0:5a:c8:b4:8b:86:c3:78:3b:03:27:50:83:5d:
4f:83:93:07:eb:e8:b6:46:d5:cf:0b:52:f6:6f:e6:b1:7f:f2:
8f:af:c6:7a:1e:fc:10:8e:11:fc:aa:5e:bb:ca:c3:e2:41:86:
7a:b5:13:51:8b:7f:16:4a:d4:e5:8c:25:17:0b:eb:93:13:33:
87:a4:bf:68:fa:f5:0a:21:dc:05:ee:c0:42:c7:06:61:e9:29:
27:b7:fe:28:4d:2c:ab:68:49:28:d0:5e:d6:21:a1:87:28:96:
29:b4:38:0d:10:91:e9:b9:a5:76:99:01:cc:d4:e6:af:cc:ad:
31:93:29:cf:3b:71:82:5c:27:9e:83:e9:db:90:21:fe:0b:1f:
14:df:39:c3:6d:13:8d:af:ba:87:9e:91:3c:02:b1:fb:05:3e:
00:37:62:e0:09:09:93:65:fc:6c:38:44:5b:8b:5c:89:57:58:
36:d5:f8:a3:96:91:ca:b3:40:74:d8:6f:0a:86:e5:d8:ad:29:
9e:d2:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:46 2026 by rpki-client