Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RhJyg311e1XtHZ7_JsCVOAKK1Ss.roa
File: RhJyg311e1XtHZ7_JsCVOAKK1Ss.roa (raw, json)
Hash identifier: 1/FKKZ8kCNOXuDeAxKHt/11f8s7fTB/MEjaJihhRuXo=
Subject key identifier: 46:12:72:83:7D:75:7B:55:ED:1D:9E:FF:26:C0:95:38:02:8A:D5:2B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A14B5490F59859ADD31B13FE30F46FF790
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RhJyg311e1XtHZ7_JsCVOAKK1Ss.roa
Signing time: Sat 17 Oct 2026 19:26:35 +0000
ROA not before: Sat 17 Oct 2026 19:26:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 31.57.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:54:90:f5:98:59:ad:d3:1b:13:fe:30:f4:6f:f7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 17 19:26:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=461272837d757b55ed1d9eff26c09538028ad52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:d5:5d:a0:56:39:b9:65:ea:ba:37:1a:dc:
eb:c5:bd:2d:84:be:be:c4:bd:ff:34:f5:cc:11:9f:
b3:c5:3e:0a:f2:7b:09:d6:07:b8:50:78:90:4a:a0:
23:5c:b5:a4:ab:50:dd:08:8a:4b:90:46:db:dc:a8:
77:87:83:66:8a:96:32:6d:d7:5e:9f:af:35:e3:33:
3e:b8:33:2d:12:11:28:3f:4c:19:a1:8b:e1:3f:e4:
2d:3a:0a:09:2d:78:73:8e:2f:c0:27:22:9b:c6:d2:
15:d7:f3:5f:55:18:14:c0:8e:9e:5d:a7:16:98:88:
09:ce:19:6e:12:c7:b2:33:8f:1a:07:e2:f4:81:7f:
d3:75:6a:d4:7c:c1:be:ee:fe:0c:43:a9:8f:e2:00:
fb:a3:6f:26:4e:13:6a:e7:fc:9b:25:8b:65:ac:d3:
37:1d:c7:c8:29:43:84:23:60:bc:83:ec:1d:bf:74:
e2:ec:eb:8f:86:46:85:f5:3e:c9:c7:22:f2:41:c8:
af:3d:3b:79:31:b5:28:46:ea:16:21:82:d7:dc:12:
1d:61:21:64:72:6f:46:65:3f:a4:b8:5e:1d:27:4c:
2d:78:69:83:fb:c0:98:a2:f5:78:4c:81:e3:f5:1e:
4b:76:68:64:b9:f6:a1:67:1f:e5:77:05:55:db:b8:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:12:72:83:7D:75:7B:55:ED:1D:9E:FF:26:C0:95:38:02:8A:D5:2B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RhJyg311e1XtHZ7_JsCVOAKK1Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.6.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:21:ea:18:22:c3:8e:69:d0:5e:ec:b5:29:74:5a:9e:b8:05:
34:ef:ee:6a:96:b2:57:1f:8b:bc:f9:78:36:a6:b4:ac:74:79:
a5:77:f1:99:1e:5e:09:e6:b7:20:80:4f:db:1c:d2:a9:17:72:
55:ad:aa:9f:a9:2c:7c:73:83:e5:32:94:80:38:e5:83:2a:e2:
6f:52:74:40:99:f3:c7:d6:9b:29:8d:95:15:14:80:81:a8:f3:
78:d9:da:33:98:10:f5:e2:db:12:fd:dd:c2:d9:42:fa:cc:1d:
ec:99:68:34:b8:9a:4e:3f:6f:c0:7c:6b:e3:59:71:d2:de:9b:
14:68:8f:0f:5c:4f:b2:f2:6d:ad:9f:94:66:07:45:c3:12:0f:
8e:47:54:f1:b9:a8:24:94:6e:c0:1f:ff:d7:ef:31:e6:7c:db:
47:ac:3c:c2:81:29:ad:f4:d3:80:a4:34:1b:7a:94:94:bb:1d:
e5:3f:09:4c:11:72:ee:da:81:7e:25:e1:19:ba:48:82:5c:b4:
dc:52:62:02:78:f3:c3:ef:df:4e:dc:5c:9e:d6:4e:06:1b:95:
53:a9:44:6c:35:23:f1:41:56:ac:91:38:01:1e:6b:be:b6:e3:
a5:37:69:bf:a6:9f:91:62:d1:14:cf:36:8e:70:ee:e1:74:85:
8a:58:d0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:05 2026 by rpki-client