Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TjsCk9xuGiXCAGH5475EwExM8eY.roa
File: TjsCk9xuGiXCAGH5475EwExM8eY.roa (raw, json)
Hash identifier: knNrVXXXcgQyKQPPLDwPENXo0WDju/tm7VkRjjShZzQ=
Subject key identifier: 4E:3B:02:93:DC:6E:1A:25:C2:00:61:F9:E3:BE:44:C0:4C:4C:F1:E6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A16F692D0CFB70053B8970E33989D29B30
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TjsCk9xuGiXCAGH5475EwExM8eY.roa
Signing time: Sat 24 Oct 2026 19:35:26 +0000
ROA not before: Sat 24 Oct 2026 19:35:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24940
IP address blocks: 31.58.88.0/24 maxlen: 24
217.60.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:69:2d:0c:fb:70:05:3b:89:70:e3:39:89:d2:9b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 24 19:35:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e3b0293dc6e1a25c20061f9e3be44c04c4cf1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:de:05:62:0c:88:6e:79:0f:e6:a5:40:e5:
c4:71:b2:31:c6:f0:39:ec:b8:99:75:ba:f0:7f:09:
b0:61:93:66:e2:22:e4:da:eb:82:9b:73:97:71:c0:
e3:fc:7e:da:3b:48:58:b1:29:55:88:da:ef:ec:97:
c8:f4:4b:db:81:7c:f1:67:e3:ea:67:33:39:94:ad:
ae:b3:da:9a:e4:f1:24:2e:3b:bf:30:f3:1b:6e:02:
b1:84:69:18:f6:84:d2:91:83:d8:e7:a6:6c:4b:9b:
80:ad:6b:ba:c5:8c:16:6b:9f:35:d9:48:65:6b:93:
37:b2:3b:b2:bf:cf:78:f9:fa:5f:a5:d6:67:a2:6a:
53:9a:a4:49:b2:b2:49:96:bf:c2:07:ad:5a:95:6d:
ac:95:14:8f:b9:ba:35:5a:90:27:c9:3c:ab:b0:54:
27:a7:11:5a:37:9e:63:b1:db:bf:28:8e:84:c2:7f:
0d:51:6f:fa:c3:2b:f2:d1:ec:37:bf:91:8f:76:4e:
63:83:90:9f:e5:62:1c:a0:65:7c:3e:2f:11:31:12:
96:3f:7f:0a:95:9a:49:de:91:41:26:8c:c4:fd:59:
9c:f1:df:c7:fc:fe:ae:3f:84:80:e2:c0:f7:6a:13:
f2:57:53:91:36:64:5b:c3:f4:32:c1:ee:db:8c:92:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3B:02:93:DC:6E:1A:25:C2:00:61:F9:E3:BE:44:C0:4C:4C:F1:E6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TjsCk9xuGiXCAGH5475EwExM8eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.88.0/24
217.60.74.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:b2:16:39:80:8e:63:d1:6e:45:1f:80:7e:b0:18:01:0d:1c:
94:51:50:1a:c0:b8:c2:27:cb:30:fd:7a:f8:87:1f:41:a9:d7:
7c:2e:12:2c:af:33:84:b4:6c:0c:e6:2f:95:d2:3d:90:a0:46:
63:c4:62:a4:f4:68:40:dc:90:4e:1a:e8:72:69:38:b1:3d:1e:
5f:ae:1a:c5:13:3b:46:4e:54:cd:4a:4f:2c:2c:b1:8e:28:5f:
8a:d5:50:b7:7d:05:54:e8:f9:91:d0:a2:8e:77:8f:1c:27:49:
55:c6:24:3e:6f:19:3f:16:c8:1b:33:39:c9:53:d0:92:2f:de:
82:95:4e:5a:1d:32:64:de:33:7e:92:e3:5d:a7:b5:9f:d6:49:
bc:b3:60:de:06:4b:5e:fb:e4:46:f4:aa:ef:13:0e:39:9f:0f:
f4:a5:be:ae:cf:b0:b6:d0:d3:d7:fb:fa:e9:43:c9:58:6a:f2:
c2:ea:e5:38:8f:46:58:b8:f3:4d:db:8e:3d:b5:5e:08:99:6f:
fe:45:35:5e:86:e1:ee:c7:8c:46:f1:60:df:ee:6c:65:9c:ed:
e8:cc:bc:23:58:51:ed:a5:75:8c:a8:72:63:30:8a:b1:3f:a9:
31:70:30:41:59:a9:3a:a1:0d:87:3e:3e:72:55:6c:57:b2:de:
44:96:84:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:46:15 2026 by rpki-client