Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TtR7cHNyTpQ5CgI92AAma2jZoS8.roa
File: TtR7cHNyTpQ5CgI92AAma2jZoS8.roa (raw, json)
Hash identifier: 9frQT2nsccCGWzl9G4kt2S/WOlw1yD3BS/Ath81zF/E=
Subject key identifier: 4E:D4:7B:70:73:72:4E:94:39:0A:02:3D:D8:00:26:6B:68:D9:A1:2F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D337F613FF1414AE9BD7638B61D84835E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TtR7cHNyTpQ5CgI92AAma2jZoS8.roa
Signing time: Sat 28 Mar 2026 08:11:19 +0000
ROA not before: Sat 28 Mar 2026 08:11:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137564
IP address blocks: 31.58.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 08:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:7f:61:3f:f1:41:4a:e9:bd:76:38:b6:1d:84:83:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 28 08:11:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ed47b7073724e94390a023dd800266b68d9a12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f0:15:d8:27:8d:a3:e0:92:37:2e:5e:9d:b1:
60:3d:08:cb:32:9c:7f:37:2a:29:5e:4f:fa:1d:c5:
8c:46:5a:59:16:9c:c7:35:0a:eb:a7:61:a5:ab:53:
d8:45:3c:ba:a2:2b:38:0b:b2:e6:27:5e:e6:65:c3:
02:66:f0:29:09:cf:e0:c6:c5:52:f5:e4:2c:73:54:
0b:bb:68:a6:9d:28:d8:66:6a:11:ba:3f:d9:3e:8a:
77:39:bd:e2:62:bd:aa:b9:d3:ec:83:10:03:95:eb:
a2:ad:9f:82:f2:54:2a:6b:0c:9f:dd:55:76:a0:e3:
d3:fd:48:50:f2:ac:e9:4f:06:f2:c9:0b:a3:2b:4b:
cd:a7:8c:7a:a6:91:d2:dd:19:b9:e6:56:3a:04:a4:
4b:11:6f:2c:b9:bc:3b:14:8b:49:e8:2b:85:30:c5:
6f:74:b0:cf:1f:00:67:7b:83:b8:c3:aa:52:b2:bc:
59:0a:8f:9e:da:bd:12:72:f3:dd:a6:c5:ec:eb:b1:
52:2f:a1:73:58:9d:3b:5d:d4:ca:40:e5:20:65:26:
30:b3:24:f7:5f:f6:79:b8:bc:a7:8c:e4:3e:8e:84:
88:71:1c:05:f5:f4:32:1d:8e:6a:23:e9:28:f2:1b:
f0:49:9c:d7:ff:80:8b:64:7f:c1:ac:0c:b5:fc:b6:
14:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D4:7B:70:73:72:4E:94:39:0A:02:3D:D8:00:26:6B:68:D9:A1:2F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TtR7cHNyTpQ5CgI92AAma2jZoS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.66.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1e:80:dd:c0:ef:b6:6f:62:62:49:2e:df:a2:b4:21:67:42:
2f:41:8e:6c:6a:1b:3c:ca:55:04:dc:1d:c6:55:de:d8:3e:f2:
83:ce:ca:14:75:15:68:f5:33:4d:f3:3d:4e:29:a8:78:e5:3d:
60:28:ed:2d:5d:7f:d2:eb:96:ef:78:40:bc:5f:2e:d1:e4:9e:
d0:e3:8e:b8:97:65:b5:59:8f:ad:85:98:f4:ca:b3:cf:f8:e6:
37:f0:28:2d:bc:af:45:df:dc:c6:4e:d4:3d:b0:a6:69:68:5f:
f9:d2:2e:e8:83:0e:7d:76:9b:21:8a:0e:8c:5b:78:b2:27:89:
30:d5:b7:33:aa:69:df:c4:8f:2a:cd:cf:23:ac:24:a1:40:71:
d8:09:25:f7:6c:6b:c5:10:44:bb:4a:2e:8f:0a:8c:71:52:e9:
62:f5:97:57:af:2a:f4:1c:5b:ed:d6:3c:5d:b1:e3:66:fa:63:
67:b8:e2:dd:f5:c2:56:2e:45:f2:ca:11:b0:31:81:07:8c:2a:
77:fe:54:b6:22:78:a1:4f:93:a3:d9:f8:3b:48:0a:9d:76:85:
58:5b:68:c1:8d:62:b8:c9:5c:0d:c1:94:d9:dd:ee:cf:e8:76:
f6:f8:73:16:d4:73:94:3f:44:ea:bf:3e:01:c6:a1:e7:23:67:
9c:2f:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:03:02 2026 by rpki-client