Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PE-tCyAWTyDHcKhzkrvSpjGVlSs.roa
File: PE-tCyAWTyDHcKhzkrvSpjGVlSs.roa (raw, json)
Hash identifier: 1TIs8rBS+MVItrdqPBPIgYbwNYkuV6AEZDJvnr790RQ=
Subject key identifier: 3C:4F:AD:0B:20:16:4F:20:C7:70:A8:73:92:BB:D2:A6:31:95:95:2B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E6F2EF3E3A23AF4468F9989817F926B1F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PE-tCyAWTyDHcKhzkrvSpjGVlSs.roa
Signing time: Thu 28 May 2026 15:23:28 +0000
ROA not before: Thu 28 May 2026 15:23:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 984
IP address blocks: 31.59.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:2e:f3:e3:a2:3a:f4:46:8f:99:89:81:7f:92:6b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 28 15:23:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c4fad0b20164f20c770a87392bbd2a63195952b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:75:d1:12:28:3c:88:47:d8:07:24:48:73:
21:0c:27:2a:c7:91:a2:d1:f5:fb:85:fa:b8:30:ce:
46:c0:2f:51:06:eb:52:e5:2b:13:e7:88:e1:21:05:
51:9b:a5:f8:7e:f4:02:c3:06:af:35:3f:e1:54:7c:
70:bb:5a:f0:5a:a0:8d:56:c9:2d:e1:60:a5:f8:47:
70:ec:12:a9:dd:af:9a:ab:b1:ad:76:3a:e2:e3:7c:
45:57:80:98:ac:6d:85:47:32:d2:e1:21:3f:6f:c2:
a0:16:d1:38:29:1e:4e:b4:ed:48:2e:15:3f:8a:25:
c6:79:64:72:84:2e:b8:5d:63:12:08:4a:7c:65:19:
1b:e3:c7:5d:df:ff:9f:ac:44:51:d4:93:47:0d:68:
aa:66:6a:35:08:9b:c9:61:16:07:f6:f0:7b:c9:88:
8d:9a:34:e3:a3:b9:ff:63:36:0b:99:e3:0a:fd:32:
45:51:8c:01:f8:34:a9:68:87:52:e0:ba:3f:ef:6d:
07:67:b6:9a:71:ee:fe:dd:ec:5d:0c:47:7a:e2:56:
4a:96:3c:42:a0:bb:54:c1:00:a6:2a:44:ad:1f:f9:
54:e6:a2:f8:24:9e:01:e7:49:0b:93:f5:cd:47:f8:
fc:1d:ee:7e:32:21:40:4f:7b:f5:b0:02:43:ac:01:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4F:AD:0B:20:16:4F:20:C7:70:A8:73:92:BB:D2:A6:31:95:95:2B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PE-tCyAWTyDHcKhzkrvSpjGVlSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.98.0/24
Signature Algorithm: sha256WithRSAEncryption
29:24:9e:1b:96:04:20:ba:f9:cb:f4:28:85:50:bf:a3:dc:f1:
eb:ad:5c:4b:63:29:07:39:dd:f2:88:08:e8:55:bd:79:a0:bc:
4f:80:45:15:2b:72:81:4f:24:f7:92:b0:f6:73:e8:1d:17:b0:
f9:fa:35:10:34:2b:be:94:25:f1:47:91:4f:e7:7f:95:b4:28:
59:c4:37:3b:ad:94:41:d5:49:1e:73:63:ce:59:54:2e:15:6c:
bd:bc:d3:b2:3c:5d:11:d6:0b:c3:36:f6:a9:9a:9b:25:97:94:
92:1e:0f:d3:97:df:36:78:c0:b6:9b:eb:ef:4f:8c:1a:57:1e:
5f:6a:02:a2:fa:c5:07:81:d8:0d:1f:5a:4f:2e:bf:8e:73:a7:
c2:e1:7d:4d:43:be:13:ad:1a:61:ff:b9:d6:ca:6e:85:39:fc:
00:f6:d7:e1:65:25:da:e3:ca:60:3d:f6:da:64:e9:62:26:6f:
6f:ca:9b:f2:2e:fc:10:a5:7c:39:23:59:30:a0:b2:3e:5d:77:
ca:56:ee:98:f1:e0:80:fe:11:42:7c:1c:ea:84:89:c7:49:49:
7a:cd:20:75:8b:38:c0:8e:09:2d:53:37:dc:98:ff:f9:2a:3f:
a7:42:62:0d:bf:61:71:3c:55:26:cc:b6:0d:d1:82:60:4c:35:
bb:e2:0d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:34 2026 by rpki-client