Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T8DQP9PdJf5rfPHB03T4ePpMSsA.roa
File: T8DQP9PdJf5rfPHB03T4ePpMSsA.roa (raw, json)
Hash identifier: /nNVVunaY9A4q6D06FlGmz7grBuZT9uYwpfmhCMiWLk=
Subject key identifier: 4F:C0:D0:3F:D3:DD:25:FE:6B:7C:F1:C1:D3:74:F8:78:FA:4C:4A:C0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0FCAADE72FFA2F993B6C238D0E31C87D3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T8DQP9PdJf5rfPHB03T4ePpMSsA.roa
Signing time: Fri 02 Oct 2026 12:50:51 +0000
ROA not before: Fri 02 Oct 2026 12:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218583
IP address blocks: 31.58.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:aa:de:72:ff:a2:f9:93:b6:c2:38:d0:e3:1c:87:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 2 12:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fc0d03fd3dd25fe6b7cf1c1d374f878fa4c4ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cb:8f:38:4f:02:f3:c2:3e:1f:67:2f:16:84:
f1:87:1a:00:27:85:83:43:de:74:6b:fc:a1:f4:22:
9d:a3:24:b3:bd:de:50:48:04:bc:20:cb:1f:51:84:
de:41:b7:1c:de:c3:45:29:6d:20:ca:ce:70:33:5a:
9c:fc:c4:47:f3:a0:46:e1:b6:15:8d:37:f6:bd:94:
3b:aa:a7:f4:13:66:ed:a4:22:e2:2d:ed:d9:0f:68:
31:7c:d2:7e:b1:28:32:f7:87:5a:3f:40:68:02:21:
5c:49:d4:af:0b:ed:29:16:8c:99:5b:ba:7e:1c:61:
d5:a9:20:8f:44:b0:12:23:dc:02:e6:3a:ef:60:5c:
78:9e:21:98:9d:c3:04:83:8c:46:3e:05:34:d7:8b:
b8:38:90:dd:07:0c:12:9f:fd:a3:7b:11:de:39:20:
85:4a:b8:44:3d:25:4e:6c:94:58:6d:06:4c:4f:07:
c4:77:c1:a5:99:cb:6f:78:77:4c:9c:fd:5f:23:2c:
f1:ef:38:61:17:10:6d:45:73:ec:46:12:ff:ac:08:
e2:6a:6d:0f:cf:03:d2:18:d5:bd:0b:cb:0d:28:4c:
80:97:8f:80:47:05:1e:7f:06:25:90:1e:be:91:7d:
f6:bc:62:53:42:45:78:0a:15:33:0a:29:02:1b:fb:
c0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C0:D0:3F:D3:DD:25:FE:6B:7C:F1:C1:D3:74:F8:78:FA:4C:4A:C0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T8DQP9PdJf5rfPHB03T4ePpMSsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.94.0/24
Signature Algorithm: sha256WithRSAEncryption
44:30:f6:7a:51:54:ab:32:c9:a8:45:3d:f8:14:0c:66:b0:1b:
93:9a:df:f9:05:35:a8:a6:6e:40:79:b5:a0:cd:1f:6e:f0:d3:
7b:be:e1:6e:20:ee:91:aa:df:88:b3:68:66:1c:0a:63:49:24:
b1:2f:94:1b:e2:86:5e:68:c5:eb:6b:a6:d4:de:76:05:53:74:
39:67:2b:dd:e8:b9:c7:e0:bb:6a:c7:25:6e:31:71:b1:b5:5d:
02:a1:5b:bc:07:d2:d5:13:d5:50:e0:11:d3:c5:33:3b:2d:4a:
17:1d:40:52:d7:db:f8:5f:23:b0:88:fe:66:0b:61:c4:54:bd:
b1:b0:44:b8:99:6f:e2:3a:47:ea:73:8f:86:8d:ab:44:23:41:
25:71:28:5d:d2:98:96:e5:89:6a:c0:71:da:40:b0:b5:d9:0d:
fc:a0:cd:f6:91:c9:a8:f3:21:25:ac:98:be:8f:f7:77:80:2f:
1c:bd:c6:c1:14:15:cd:ee:28:0c:6c:69:b6:02:1a:a4:0d:d8:
12:ed:bb:49:3d:10:73:46:26:d9:1f:45:ea:76:68:ec:95:39:
dd:9b:d4:11:e1:a7:df:4c:17:0e:5f:d5:0b:ab:2b:74:6e:71:
51:8b:ab:70:82:d8:4b:2d:c6:c0:d6:f1:63:56:bb:70:12:54:
b7:52:b3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 06:28:35 2026 by rpki-client