Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WIKYkIpXwdESs19cnROjSoE9ucE.roa
File: WIKYkIpXwdESs19cnROjSoE9ucE.roa (raw, json)
Hash identifier: 45uWL6fOVmiVihAJf80PLJ7gCDLFaUXPc6aGCnQrNAI=
Subject key identifier: 58:82:98:90:8A:57:C1:D1:12:B3:5F:5C:9D:13:A3:4A:81:3D:B9:C1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1316AB5D93F1BF11C20FE7A61DFBA0FF2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WIKYkIpXwdESs19cnROjSoE9ucE.roa
Signing time: Mon 12 Oct 2026 18:40:39 +0000
ROA not before: Mon 12 Oct 2026 18:40:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213900
IP address blocks: 31.57.56.0/24 maxlen: 24
217.60.96.0/24 maxlen: 24
217.60.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:6a:b5:d9:3f:1b:f1:1c:20:fe:7a:61:df:ba:0f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 12 18:40:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=588298908a57c1d112b35f5c9d13a34a813db9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:8f:93:eb:3c:03:6c:1a:13:c1:48:bd:74:
84:9f:3c:ba:91:c5:96:b1:12:f0:20:e2:a6:e9:6c:
69:81:9d:5a:3b:20:b2:2a:50:89:f6:43:39:db:63:
9b:54:63:af:d1:08:1f:d3:03:f5:4f:3d:55:81:f7:
04:d2:50:ba:2f:a1:8c:29:a6:be:b4:47:92:33:87:
99:3d:04:99:6e:4f:f6:e1:38:05:91:ae:6f:6b:b0:
81:1c:fc:cc:05:37:81:d2:c6:c2:2c:a1:8d:2e:10:
b9:ef:c3:66:f5:00:37:e8:01:c8:ea:bf:36:a2:63:
8a:d1:30:f0:30:43:5d:16:38:cb:bc:e7:c1:21:e9:
68:8c:f8:54:4a:71:ca:d9:69:8a:aa:82:0d:c2:ed:
b3:c7:3a:e8:e5:eb:07:18:3c:3a:a5:00:bd:e6:66:
27:70:ca:c2:55:de:bd:e1:47:3c:6d:34:c2:ee:03:
b8:65:b0:19:00:22:0c:9e:f9:0f:8d:55:cb:d6:5a:
b5:bc:75:71:80:6b:d1:e1:96:97:d7:01:47:b9:8e:
61:c4:33:fe:5f:8c:91:24:e1:75:51:e1:fe:08:81:
d7:2f:35:b0:7b:6a:5e:dd:66:88:24:fc:88:90:d9:
2c:de:93:fa:19:47:3d:d3:6b:d3:df:a8:93:e2:7a:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:82:98:90:8A:57:C1:D1:12:B3:5F:5C:9D:13:A3:4A:81:3D:B9:C1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WIKYkIpXwdESs19cnROjSoE9ucE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.56.0/24
217.60.96.0/24
217.60.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:9d:d3:e5:44:d8:3c:46:ef:46:65:70:74:96:c0:6d:1e:f9:
fe:7d:2b:33:fc:a6:12:40:38:f2:71:64:40:26:86:26:3d:d4:
7f:8b:ef:36:e3:12:15:9f:47:9a:a0:2a:f2:fd:40:5f:b7:79:
c0:e8:32:24:52:b6:35:17:85:41:96:a1:33:9e:4a:9f:f9:55:
1e:a8:13:99:49:a6:29:3a:21:b7:04:bc:1b:88:9f:55:15:c3:
be:3c:32:36:81:0c:1f:df:31:cb:1b:1d:f7:e5:a1:05:c5:91:
5b:e0:50:e8:29:6e:50:f0:b5:81:4f:a7:2d:c0:a7:cd:84:47:
e0:66:03:12:63:a0:d5:b3:2b:38:6d:9e:b7:ec:05:fe:1f:ed:
d8:85:d6:02:87:06:c6:7a:52:f5:ee:f0:81:6c:13:2e:8e:fe:
bc:a7:75:e0:18:a0:b5:02:d9:16:1e:95:85:a7:c6:e8:39:82:
49:e4:b8:d0:31:aa:2e:93:8c:0b:de:fe:1e:68:af:db:91:1a:
4b:da:1a:60:7c:85:87:28:b5:2e:e5:f3:ff:04:ad:b6:6f:1c:
11:4f:f4:93:36:4e:db:0f:df:f7:1f:87:1e:83:5d:c4:36:a4:
ae:cb:b2:3e:fb:ac:5b:f5:d5:ec:5d:ef:8e:f0:2b:3d:fc:2b:
cd:0a:d6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:06 2026 by rpki-client