Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N_tv7-hBitCFlRL0eOfK5dNOG-c.roa
File: N_tv7-hBitCFlRL0eOfK5dNOG-c.roa (raw, json)
Hash identifier: ynexvepjNAW2A9Pb2cx52qeFDGOUL3SmWODw6rsIqQ0=
Subject key identifier: 37:FB:6F:EF:E8:41:8A:D0:85:95:12:F4:78:E7:CA:E5:D3:4E:1B:E7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1448DA2EA7D2196D62CAB33C3165D0C82
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N_tv7-hBitCFlRL0eOfK5dNOG-c.roa
Signing time: Fri 16 Oct 2026 11:51:35 +0000
ROA not before: Fri 16 Oct 2026 11:51:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40352
IP address blocks: 31.59.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:8d:a2:ea:7d:21:96:d6:2c:ab:33:c3:16:5d:0c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 16 11:51:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37fb6fefe8418ad0859512f478e7cae5d34e1be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:a8:f7:2a:06:a2:d6:e1:43:cb:1d:4b:60:
51:f8:e7:f4:47:30:d3:9b:80:74:53:2f:6c:ac:db:
eb:df:29:2d:38:57:54:8e:13:ef:c2:8d:26:b5:4d:
ee:c5:c7:3e:b6:26:f5:5b:30:40:90:a8:28:fd:31:
8f:7e:f1:84:75:71:6f:7c:a1:a3:e0:a5:33:6c:5e:
e7:0e:e7:8d:e2:0f:72:5b:9d:96:66:d4:c8:8e:bb:
13:82:4c:aa:c3:f5:3b:95:00:63:64:68:4e:58:23:
63:fa:86:2c:4f:0d:9e:38:95:0e:f6:b1:23:bd:f7:
6b:dc:2d:92:fc:c8:e8:4c:68:a5:17:e2:a7:a2:0d:
b8:36:bd:e7:5d:89:e8:f3:19:92:be:50:91:d4:0d:
66:c0:d0:1d:bb:c6:9a:b2:ea:24:7d:97:ae:e1:54:
42:32:90:7d:9a:29:6b:e8:67:9a:0d:34:f8:a5:f0:
7c:87:47:45:20:63:ed:14:0a:55:ba:64:d8:c1:1b:
f6:1b:28:61:a9:74:06:6d:6e:39:3b:05:02:8d:c8:
29:50:6b:a9:b1:d4:84:da:75:d4:bb:da:0d:1b:4e:
f9:87:4c:6f:f4:6c:a3:68:84:7e:06:9c:c4:aa:92:
84:27:52:78:a1:d0:09:a8:ec:f9:c3:74:d9:72:0d:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FB:6F:EF:E8:41:8A:D0:85:95:12:F4:78:E7:CA:E5:D3:4E:1B:E7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N_tv7-hBitCFlRL0eOfK5dNOG-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.75.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ce:ac:94:43:ab:4b:bf:d5:e5:79:13:b7:0d:3a:3a:54:6a:
b5:a0:90:5a:3a:27:72:44:24:a7:78:92:82:1a:cf:54:86:50:
6d:37:4a:3e:4f:e0:58:36:17:f1:85:8b:25:68:0a:d4:77:d7:
6a:b1:0f:e9:02:6b:36:29:26:ec:78:91:bb:7c:a4:08:3c:92:
9f:2f:a8:8a:d4:1c:01:76:55:79:2f:3d:5e:35:c0:86:96:76:
3f:c5:2e:74:28:2e:00:08:7d:e4:79:b7:5c:94:68:51:66:d8:
29:ea:d6:09:78:61:b0:8c:59:a3:a6:d0:63:81:51:d7:a2:d9:
f2:9e:46:5a:5c:e5:71:e7:cd:93:b5:09:0c:ae:91:8e:e6:79:
ff:69:e6:b7:f7:18:ec:49:83:74:9b:3c:54:f7:72:d6:2c:82:
be:17:b7:dd:31:93:e8:71:91:5b:45:61:34:ab:50:7d:0d:8f:
f9:16:5f:07:ed:1a:d7:d7:e1:59:e2:04:a7:d9:b8:1a:c4:e0:
74:e9:df:f8:3e:6c:15:07:d6:98:89:44:8d:c4:67:83:db:dc:
b4:2b:f8:0e:7a:9e:1b:79:a1:fa:fb:0c:c1:4f:be:a5:74:d0:
fb:d7:95:94:d3:46:e3:6e:70:9b:41:50:e4:77:3a:ae:0f:2d:
5d:9c:07:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:25:20 2026 by rpki-client