Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V4wiUsJxA5bZ4qh2yxLTdix10eY.roa
File: V4wiUsJxA5bZ4qh2yxLTdix10eY.roa (raw, json)
Hash identifier: DJi+X7f8WHqNvCWcrvbf8UoBOkhK7qtWb1Kx+pZWkMw=
Subject key identifier: 57:8C:22:52:C2:71:03:96:D9:E2:A8:76:CB:12:D3:76:2C:75:D1:E6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F958F7AA58F43D6EF1556FE5B9EF1FEF4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V4wiUsJxA5bZ4qh2yxLTdix10eY.roa
Signing time: Fri 24 Jul 2026 19:17:15 +0000
ROA not before: Fri 24 Jul 2026 19:17:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219357
IP address blocks: 31.59.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:8f:7a:a5:8f:43:d6:ef:15:56:fe:5b:9e:f1:fe:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 24 19:17:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=578c2252c2710396d9e2a876cb12d3762c75d1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:49:0a:0b:ef:3e:f5:a8:d7:b3:2c:c5:74:
df:98:de:93:02:4a:6c:0e:3a:6c:b7:58:3f:0e:0c:
f7:5e:5f:9b:33:4e:39:8f:5d:77:5e:a0:7a:db:e5:
35:85:8b:d1:db:56:82:da:3c:fc:49:4d:b6:0c:fc:
32:7b:a1:6d:4d:16:87:f5:0b:cb:ca:e3:2c:55:2b:
e6:62:a0:97:a7:65:cd:35:20:c0:8b:f9:4f:c1:a4:
a6:aa:80:1d:6b:a8:1b:ee:c2:d6:3f:e0:4e:2a:dc:
de:da:ea:c9:b5:73:48:d9:45:d1:a7:8f:a6:fc:e3:
52:cc:b2:ec:6f:c8:9f:d5:ae:eb:2b:99:e7:3b:a5:
84:83:c4:6a:c0:54:a5:70:67:ef:93:a9:22:8b:d3:
a5:84:80:ac:7a:b8:0c:49:34:05:69:16:64:2c:51:
45:be:7c:0d:93:32:84:56:98:9b:d4:49:76:0a:e6:
ff:42:e5:23:9b:76:f9:05:a0:89:e4:ef:7d:95:ba:
90:aa:33:f5:2b:90:08:c3:d3:a2:88:6e:af:55:a9:
c2:be:2e:1d:23:b0:d6:fc:ba:b8:1c:4a:3f:d1:5d:
2b:b6:0b:fb:2e:46:0e:f3:a4:cd:19:93:97:f2:6e:
c3:16:ba:d4:dd:b6:10:4f:84:86:34:f0:0d:6c:a2:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8C:22:52:C2:71:03:96:D9:E2:A8:76:CB:12:D3:76:2C:75:D1:E6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V4wiUsJxA5bZ4qh2yxLTdix10eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.140.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fb:9b:53:e6:e5:c5:e0:60:94:b9:7f:18:e4:54:75:79:8f:
b1:99:b5:01:2c:ce:b3:8f:a1:09:fe:ac:24:ff:f9:b0:d3:46:
50:fd:e2:ee:9a:6a:1b:12:66:6c:d2:70:8c:ec:e4:9e:e8:f1:
b3:77:d6:5f:11:32:f9:de:b2:6b:24:66:a0:e5:54:77:6a:d0:
7b:24:54:83:80:3b:85:ea:07:21:c3:53:7a:2e:0f:51:1c:ec:
af:b9:a7:79:ac:14:77:e3:c4:38:4e:f5:5b:ae:60:d5:38:2d:
f2:2b:c5:42:56:f7:ec:89:e8:cf:b6:1f:5b:f6:00:21:fa:d0:
03:59:66:cd:51:a6:55:1a:22:5f:ef:5d:27:4f:55:31:dd:15:
10:b4:26:9e:51:81:42:9b:07:32:31:e8:eb:8a:72:d2:ac:1d:
e1:4b:aa:9e:0b:11:01:5f:45:1b:39:04:3d:10:99:bf:58:27:
3b:c5:00:c2:a1:0d:1f:a4:9f:ff:9e:7b:73:3e:56:a1:d3:d5:
0c:c5:da:dd:e3:52:84:46:0f:84:5c:4f:9b:63:54:7f:b6:55:
41:75:af:1e:5b:e1:35:c7:6b:77:da:d3:40:a6:ac:8d:1d:d5:
5d:41:99:b9:7d:c3:6c:bf:ae:b8:cd:fe:41:ae:e6:70:be:e1:
e9:e3:cb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:54:34 2026 by rpki-client