Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OMdFHt2YbG7B-wrHLdAq0tke4nA.roa
File: OMdFHt2YbG7B-wrHLdAq0tke4nA.roa (raw, json)
Hash identifier: t7dm98TJznx/BLn7zoWxhLnRJtxqEncbDCAcK1AAutc=
Subject key identifier: 38:C7:45:1E:DD:98:6C:6E:C1:FB:0A:C7:2D:D0:2A:D2:D9:1E:E2:70
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F9588257CB1186B253DE8D92E15BE55A1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OMdFHt2YbG7B-wrHLdAq0tke4nA.roa
Signing time: Fri 24 Jul 2026 19:09:15 +0000
ROA not before: Fri 24 Jul 2026 19:09:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 31.57.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:88:25:7c:b1:18:6b:25:3d:e8:d9:2e:15:be:55:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 24 19:09:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38c7451edd986c6ec1fb0ac72dd02ad2d91ee270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:ea:70:eb:82:e7:6c:ea:69:fd:1b:1c:89:
03:9b:f5:dc:2d:9c:dd:f5:ce:a7:0a:d6:13:d4:5a:
fe:ab:0c:fd:64:78:63:71:48:b1:49:31:34:79:d0:
0f:d6:ea:d4:c8:a3:c7:6f:57:d2:e1:b6:60:6f:a5:
32:7f:1b:18:bf:c1:bf:60:8b:1f:50:ed:b6:74:f9:
4d:bc:36:7f:10:63:05:8a:be:9c:8d:d5:e0:17:ef:
19:b5:8b:15:a8:08:61:05:b8:bc:c6:a0:50:f9:69:
aa:13:c3:12:c0:4c:6a:b4:ab:ef:84:a0:e5:5c:b7:
06:20:da:65:cb:57:03:7c:81:a6:41:b7:ba:e3:d6:
74:96:a5:d0:f7:d4:22:f7:0a:50:76:dc:4a:49:12:
ce:1b:10:15:8d:1a:72:64:d7:26:8e:6e:04:7d:46:
29:08:a7:d2:05:e8:16:1f:0a:d0:64:01:13:6d:67:
4a:0e:4e:c7:d1:77:4c:c0:d0:1d:6c:3b:98:0a:31:
a3:31:42:35:4d:cf:7e:af:18:8d:60:9f:55:9f:74:
44:0b:72:2d:0e:09:64:ac:3a:30:9d:7a:bc:e8:9a:
ae:3b:f4:aa:05:81:d0:9e:96:02:ff:bc:ca:d1:5f:
90:e5:46:d8:3f:17:17:1a:0a:04:0f:d9:f7:f4:1d:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C7:45:1E:DD:98:6C:6E:C1:FB:0A:C7:2D:D0:2A:D2:D9:1E:E2:70
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OMdFHt2YbG7B-wrHLdAq0tke4nA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.140.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a4:3d:b5:da:5e:a0:d0:12:5f:94:c7:bf:8c:cc:11:ac:6b:
60:82:38:fb:96:f3:68:95:7b:cf:32:7e:c8:ee:15:13:e6:ab:
9f:fe:b7:d0:13:79:33:fc:9a:1b:3b:04:c6:26:50:d5:35:32:
30:64:c2:9a:82:0b:29:23:d7:93:23:fc:b8:3b:45:41:2f:8e:
81:75:2f:0c:2d:70:dd:d4:48:27:76:e8:3a:0e:3d:55:32:09:
06:ed:25:46:e7:cb:f0:c7:b8:c6:34:9a:17:4f:d2:a9:de:fc:
c1:78:64:62:b6:67:a0:6b:dc:7f:d9:8e:bd:bc:71:96:ba:73:
da:cf:71:92:8e:12:75:42:88:d2:d3:2a:de:cf:f9:e8:91:a4:
ba:55:c6:d7:df:23:bb:c4:72:56:c4:b0:fa:99:bf:cb:7c:f7:
7c:16:75:8d:6c:21:57:4f:67:5c:a8:17:90:80:ea:25:e4:1d:
2b:fa:1a:76:1e:94:8c:ec:9b:4c:67:4c:9a:71:81:e6:b1:3c:
db:ac:a5:a5:eb:a7:93:43:ef:a3:54:97:2d:7c:ce:07:ca:dd:
d6:cd:b9:95:ad:d7:71:7a:85:cd:4a:00:df:3b:46:b2:aa:5f:
8a:e4:ab:13:21:47:ab:9e:2e:2e:16:51:99:d5:b4:cd:17:f2:
f7:14:2e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:54:33 2026 by rpki-client