Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VDvo3FYaat9hbr-9mIJrJMsjgWo.roa
File: VDvo3FYaat9hbr-9mIJrJMsjgWo.roa (raw, json)
Hash identifier: hmk/2u8HhMfBzKgYZGBoLhBJnG7K0mC+u7AGAJcvXLk=
Subject key identifier: 54:3B:E8:DC:56:1A:6A:DF:61:6E:BF:BD:98:82:6B:24:CB:23:81:6A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A13A9B3B83D7053B28357C03EEB9687154
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VDvo3FYaat9hbr-9mIJrJMsjgWo.roa
Signing time: Wed 14 Oct 2026 13:30:14 +0000
ROA not before: Wed 14 Oct 2026 13:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 31.59.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:9b:3b:83:d7:05:3b:28:35:7c:03:ee:b9:68:71:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 14 13:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=543be8dc561a6adf616ebfbd98826b24cb23816a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:eb:76:8d:11:67:17:4b:09:f9:83:58:3c:
66:ee:8f:00:40:62:61:5f:f2:de:e9:a5:a1:df:06:
49:ec:06:c8:34:32:4a:72:08:af:51:6e:2c:a6:4b:
2a:1a:a4:30:38:43:f2:50:f0:df:19:08:9b:73:b5:
68:52:c6:b3:42:70:6e:11:82:e9:dc:dd:66:d7:5f:
3e:bd:04:25:9d:d3:28:32:ea:bc:a3:c1:32:52:aa:
8c:a7:e7:73:fa:7c:b0:e0:f6:c4:f4:3c:5c:e4:3a:
87:73:d1:e3:99:f1:e2:db:f0:95:8d:a1:44:10:f7:
9b:d4:74:19:3f:cc:84:6f:73:6b:a0:9c:41:1c:19:
35:78:48:52:c2:78:5c:c0:a3:a6:b9:76:0e:1d:b8:
5f:8f:39:24:5f:5d:fa:c3:2a:cc:65:61:44:23:bb:
a4:4e:3a:86:59:9f:5a:8e:c3:6e:30:14:b1:29:e9:
37:7c:16:1a:11:66:57:08:bb:d5:8b:ca:1a:cb:88:
61:a0:34:0d:3e:1e:f1:97:b5:e4:04:04:88:59:c6:
84:08:f6:89:bd:0b:da:c7:11:71:41:8f:d1:41:bb:
38:f3:34:01:c1:1e:cb:88:16:89:d8:37:a4:a7:89:
3e:b5:cf:ab:64:fb:e1:ca:66:51:58:54:f2:f4:cc:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3B:E8:DC:56:1A:6A:DF:61:6E:BF:BD:98:82:6B:24:CB:23:81:6A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VDvo3FYaat9hbr-9mIJrJMsjgWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.96.0/24
Signature Algorithm: sha256WithRSAEncryption
08:1b:08:76:57:f7:d5:97:39:6e:74:c0:49:36:5e:f1:82:2c:
87:9c:74:f6:eb:0b:0e:3d:19:88:33:8c:60:4a:8d:ce:56:d5:
ac:8e:bd:01:11:de:da:77:40:96:10:6d:99:b3:16:be:7d:0f:
b0:5a:4b:87:56:43:82:56:9d:aa:2e:ca:87:97:46:fb:0a:bf:
0c:38:6c:29:c5:35:fe:1a:82:b0:fd:65:6c:c8:62:55:74:8f:
b6:5a:56:3f:f3:ac:28:a5:dc:eb:5e:00:8b:35:c9:30:fe:ce:
79:1a:60:2a:bb:e2:99:94:00:bd:9f:f0:0f:3b:b0:07:37:dc:
46:20:11:05:bb:15:00:51:60:08:32:73:13:49:77:6f:f0:e4:
1a:20:6f:c4:4d:d7:31:36:43:89:53:93:65:a3:03:e6:59:3f:
a1:2f:f7:e8:67:e1:db:a3:48:e9:70:02:7a:af:35:ba:b3:56:
80:f9:e6:ec:1b:54:bc:94:23:93:30:8d:31:9c:91:ad:ba:02:
41:f8:8f:3a:fb:96:94:d4:fd:d2:0b:9a:d0:b3:75:24:43:be:
9b:93:91:9e:1c:3e:c7:58:57:d3:85:b8:42:1f:a2:9c:2c:c8:
b6:3b:45:f8:57:2d:60:0f:0c:f7:28:dc:00:3b:9b:bb:77:41:
30:ac:0e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:36 2026 by rpki-client