Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UbwxKTiFyK-NMP1Y2dqZrGu5JBo.roa
File: UbwxKTiFyK-NMP1Y2dqZrGu5JBo.roa (raw, json)
Hash identifier: 4pKl2LRwwjUHcP+AmDLFCAizLoBEsqLcYB75fmY4+d4=
Subject key identifier: 51:BC:31:29:38:85:C8:AF:8D:30:FD:58:D9:DA:99:AC:6B:B9:24:1A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E4BEFA828C858A26CBA909CC55E09546F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UbwxKTiFyK-NMP1Y2dqZrGu5JBo.roa
Signing time: Thu 21 May 2026 19:07:37 +0000
ROA not before: Thu 21 May 2026 19:07:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55280
IP address blocks: 31.58.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:ef:a8:28:c8:58:a2:6c:ba:90:9c:c5:5e:09:54:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 21 19:07:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51bc31293885c8af8d30fd58d9da99ac6bb9241a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:9f:cc:6b:8f:ca:c3:6a:8f:9e:39:20:68:
4c:44:84:5c:92:d2:b3:f3:de:2d:a6:a5:05:56:71:
12:cb:99:c9:27:f5:ae:50:1a:d9:1c:f3:ac:40:5a:
ef:cf:60:bb:f1:f6:a4:e7:51:55:de:2d:b4:f1:cc:
83:eb:01:9c:f4:2e:c9:ed:b1:9d:3f:0f:34:f1:69:
b4:27:fb:b8:7c:c8:73:a9:ac:df:6c:20:60:1d:31:
48:f8:17:4a:be:e9:4f:21:23:bc:71:a6:7b:8d:69:
be:c3:61:a6:ba:cd:41:c6:dd:08:a6:2a:fc:e4:ef:
ad:6d:97:d5:af:3e:28:c5:7a:bd:35:20:c4:f1:d9:
d1:0f:db:10:19:b5:b5:64:e8:4a:0f:c6:1e:1d:16:
7f:27:0a:73:68:40:8e:4d:d0:f7:51:47:c8:6c:a5:
92:2c:df:b9:e7:6c:42:1d:a5:b8:b3:74:50:01:fd:
20:2d:9e:4e:0f:39:e9:b8:1f:3a:b4:c1:1f:8e:d4:
3a:57:85:af:cd:ac:48:40:06:f0:9f:35:40:1b:9a:
d8:61:e1:5c:eb:9e:e4:50:18:57:5d:97:ce:ad:b0:
55:4e:87:31:f8:6b:02:6a:dd:91:45:ca:a1:4a:a3:
c4:55:08:6b:06:67:1a:c2:ac:f7:2f:bf:02:ea:da:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BC:31:29:38:85:C8:AF:8D:30:FD:58:D9:DA:99:AC:6B:B9:24:1A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UbwxKTiFyK-NMP1Y2dqZrGu5JBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.228.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:41:69:aa:d8:0a:68:2d:c3:1b:28:5b:20:46:42:b3:89:53:
a3:0b:e1:c2:f6:2b:b0:ad:52:e8:51:e9:fe:d0:3c:68:fb:c7:
ee:11:f7:86:0e:1e:e6:d8:b8:99:2e:69:a9:75:a6:14:92:a3:
21:30:d4:95:c3:43:b8:56:e7:61:a8:70:2a:60:b4:a1:59:de:
b5:11:c8:13:10:03:40:55:f1:96:2f:cb:7d:9c:13:0e:0b:97:
84:23:85:a9:35:1e:d8:ee:d2:6f:94:58:44:33:59:f5:d9:43:
f6:7b:b2:c2:6b:d3:6a:02:80:34:49:84:b8:f0:06:a3:93:4c:
fa:da:ec:16:cf:78:f5:42:bb:fa:75:9b:db:ac:86:b5:3f:6e:
31:85:78:8a:b4:dd:39:ca:8a:84:96:0b:35:70:67:81:1c:d2:
d1:ab:59:c4:ef:e4:ae:3d:40:4b:1a:a3:9c:0c:b2:ad:6b:1d:
f9:db:69:d2:4a:40:80:30:b3:12:50:42:a0:1b:f7:13:ce:7d:
32:22:8e:a3:35:fb:69:9f:0b:a1:bd:bc:62:aa:84:b4:b1:68:
64:37:26:9b:8c:1c:b8:af:17:69:78:c3:69:98:eb:13:3c:e5:
db:5f:67:e4:cf:2c:18:0a:c7:aa:17:80:c4:9b:ca:4c:22:2a:
06:5b:0e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:55:28 2026 by rpki-client