Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N_6Ka86e80H6-uJFUwc2FkqhMjM.roa
File: N_6Ka86e80H6-uJFUwc2FkqhMjM.roa (raw, json)
Hash identifier: PRxGZDROg/6UJUl2uMozHXMnSTbUUaecHKD0GqwaCgY=
Subject key identifier: 37:FE:8A:6B:CE:9E:F3:41:FA:FA:E2:45:53:07:36:16:4A:A1:32:33
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1628331CAB5168D48FCB1A3D37061F3DB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N_6Ka86e80H6-uJFUwc2FkqhMjM.roa
Signing time: Thu 22 Oct 2026 07:28:47 +0000
ROA not before: Thu 22 Oct 2026 07:28:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219048
IP address blocks: 31.58.242.0/24 maxlen: 24
31.59.176.0/24 maxlen: 24
31.59.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:83:31:ca:b5:16:8d:48:fc:b1:a3:d3:70:61:f3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 22 07:28:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37fe8a6bce9ef341fafae245530736164aa13233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:80:ee:8d:f3:55:ea:8f:18:2c:5c:9e:f6:
26:31:f4:63:89:68:25:aa:8a:63:7f:1b:07:f2:7b:
fb:65:7b:1f:8b:c5:04:16:5f:c8:ea:77:ac:a5:e2:
1e:aa:22:4d:b0:0a:33:9d:05:61:58:77:58:8f:55:
2b:83:06:a9:fd:0e:92:f2:2e:c6:78:3a:7f:00:c2:
23:b4:13:b4:34:df:af:89:3c:d8:22:ec:0f:02:e0:
88:54:13:4f:0d:34:43:c5:48:24:0c:b7:26:7f:cd:
00:03:5c:c4:ff:c0:fd:8c:d4:0d:6c:86:f2:2f:59:
39:bb:de:c1:5d:30:ec:c5:34:30:cb:e2:b6:05:70:
59:40:f8:ee:60:73:fd:e2:e1:62:88:12:53:84:1d:
85:de:60:58:67:ee:4f:fb:13:87:7b:93:95:86:56:
a5:56:67:41:b9:70:40:12:8c:63:a3:f0:c4:93:81:
9e:a2:44:d1:d9:7c:2b:f7:d4:67:9e:67:b3:04:e3:
2a:a4:e2:c1:55:f0:b1:03:a1:10:73:e3:0c:57:4c:
c1:90:d3:86:70:6c:dd:fb:ae:ca:f0:de:39:67:ec:
a0:87:bc:0a:af:25:b5:8e:64:cd:0a:95:bf:3e:ae:
af:f2:1a:4d:88:e6:9f:21:33:0d:c5:e5:db:ae:94:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FE:8A:6B:CE:9E:F3:41:FA:FA:E2:45:53:07:36:16:4A:A1:32:33
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N_6Ka86e80H6-uJFUwc2FkqhMjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.242.0/24
31.59.176.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:88:dd:be:58:5d:26:9b:b6:85:ac:6b:d2:89:b5:c5:3f:88:
fb:42:09:6d:41:5c:ff:02:7a:85:bc:dc:2f:f7:bb:43:1b:75:
55:c8:04:9b:8d:9f:af:59:97:8d:e2:d7:77:f6:ac:d3:60:d2:
fc:1a:c6:b2:10:d5:27:ee:de:a3:48:f0:34:89:51:d1:50:ba:
5b:51:aa:ce:be:bc:0b:62:25:3f:ed:4c:47:0b:e7:22:d6:bb:
ec:15:51:61:c4:95:8d:11:92:f0:2d:55:e8:93:35:d7:64:14:
c0:c9:18:21:e9:db:72:45:8b:8a:68:8a:75:fc:e8:8f:c6:75:
74:16:f6:2f:92:77:87:7e:63:88:ad:6c:78:ee:37:e1:dc:ce:
30:06:3f:a8:16:ae:e4:20:b4:18:cf:14:ac:d5:17:28:16:b3:
39:90:2f:e9:6a:11:08:1b:f1:43:1a:b8:8e:de:91:ba:27:18:
24:24:05:b3:5c:0b:77:67:22:aa:72:23:42:d4:d9:4c:1a:8c:
66:56:37:11:0a:ee:0d:22:04:55:0c:8a:2f:e3:05:d9:32:53:
f9:97:e3:5e:2b:a5:03:13:0c:bd:4d:80:8f:98:be:bc:97:b1:
11:78:a9:ff:55:1e:48:7d:13:bf:13:66:3b:e5:7f:2e:ce:b4:
6e:8b:6f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:13 2026 by rpki-client