Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Km-OLw4WVWWhBTCjavNQ4NgHXnw.roa
File: Km-OLw4WVWWhBTCjavNQ4NgHXnw.roa (raw, json)
Hash identifier: moAEZyzdVZonNLy/rlGJqMVrIJcNgD1aMGWxHHbewR4=
Subject key identifier: 2A:6F:8E:2F:0E:16:55:65:A1:05:30:A3:6A:F3:50:E0:D8:07:5E:7C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A03A2D67B6FB4B00E8568C25CADD1F2B08
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Km-OLw4WVWWhBTCjavNQ4NgHXnw.roa
Signing time: Tue 25 Aug 2026 18:27:29 +0000
ROA not before: Tue 25 Aug 2026 18:27:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59692
IP address blocks: 31.57.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:2d:67:b6:fb:4b:00:e8:56:8c:25:ca:dd:1f:2b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 25 18:27:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a6f8e2f0e165565a10530a36af350e0d8075e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:46:29:2c:99:e5:7a:ae:18:ad:45:f0:9e:
c8:17:f9:8d:c4:54:96:59:8f:35:be:49:be:ab:74:
77:ae:44:50:6c:19:19:de:89:0b:73:c6:18:f2:fc:
80:4b:f7:12:57:ec:b5:d2:f9:e5:cd:b1:ed:f9:c9:
0d:3e:1d:89:cf:11:7f:1c:d3:f5:86:39:2e:5e:dc:
ad:7e:11:3c:d7:98:35:3b:cd:93:52:1b:fa:81:1e:
d9:5b:71:a4:80:94:ba:68:0a:48:0e:3f:42:fb:73:
74:ed:52:35:7e:11:19:a3:a4:5c:2a:b4:88:06:2c:
07:33:c9:36:44:27:24:d4:e4:eb:4f:a7:c2:ec:07:
fd:06:3b:4b:8a:f8:27:3f:cc:ca:74:8c:c7:62:70:
ec:fa:78:54:c1:fd:39:08:63:7e:88:2f:b8:65:c9:
28:58:35:c1:f8:d5:e1:27:a6:fb:5c:d9:36:ce:2f:
b2:ca:b8:3c:d8:de:1b:fc:64:50:06:c4:f2:06:ee:
24:bd:c4:de:2f:86:17:91:8b:97:98:2a:e6:ca:f5:
18:87:fc:50:50:dd:fe:e2:4f:40:71:8b:07:c6:ed:
b5:49:04:62:4e:a9:b5:dc:2b:c4:94:2c:0b:c8:e5:
10:99:c9:05:fb:39:66:69:67:11:ac:e9:19:7e:77:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6F:8E:2F:0E:16:55:65:A1:05:30:A3:6A:F3:50:E0:D8:07:5E:7C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Km-OLw4WVWWhBTCjavNQ4NgHXnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.152.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e6:82:71:09:f4:51:4a:63:7a:d8:1a:28:dc:e8:53:e8:13:
fe:50:b1:16:e9:6c:36:8b:05:1d:a7:d8:32:7d:e1:24:1a:5c:
09:d6:e3:bc:d0:32:f9:61:52:19:83:c2:2c:2c:e1:c8:57:7a:
66:22:17:3f:a2:80:e4:93:6a:bb:20:d3:3c:87:11:37:8d:d3:
6f:ad:0c:4c:73:8e:8c:f6:63:3e:f0:5a:a6:0c:d6:9d:8c:ad:
f7:82:53:e0:90:d8:4b:7e:d4:da:e8:d0:aa:56:af:2c:77:b6:
c8:4f:57:39:e6:09:82:95:af:fa:0f:13:53:a9:5a:50:e6:78:
24:b9:6d:16:cd:2f:fd:35:a9:6b:44:bb:f9:f7:50:12:6d:87:
76:ae:5c:b4:05:07:aa:4e:9b:74:68:9e:2f:2f:09:8b:16:68:
29:ee:20:3a:8f:45:5c:4e:cc:0f:7f:c4:26:10:6c:8f:10:eb:
1d:c4:1d:6c:0d:4c:e7:29:21:8a:33:ad:15:a3:54:08:d2:20:
94:e9:78:90:6b:e2:dc:62:ee:30:21:00:ce:da:2c:30:45:40:
d8:71:d9:b4:e9:88:1d:fb:19:c9:87:d8:b8:3e:71:9c:01:44:
d1:ac:20:93:86:7f:f2:91:af:a5:5d:df:c5:0c:67:12:cd:42:
da:dc:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:08 2026 by rpki-client