Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XlOVXOEmQr2anBm1RpSFp6f87N0.roa
File: XlOVXOEmQr2anBm1RpSFp6f87N0.roa (raw, json)
Hash identifier: Pu1R1oK8rD0CvGHZE3vmJJJjsEDsFWwbiF2w3bMroXc=
Subject key identifier: 5E:53:95:5C:E1:26:42:BD:9A:9C:19:B5:46:94:85:A7:A7:FC:EC:DD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FAA3EE3F868EA7E47CAEC7223E9471EFD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XlOVXOEmQr2anBm1RpSFp6f87N0.roa
Signing time: Tue 28 Jul 2026 19:41:15 +0000
ROA not before: Tue 28 Jul 2026 19:41:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402343
IP address blocks: 31.59.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:3e:e3:f8:68:ea:7e:47:ca:ec:72:23:e9:47:1e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 28 19:41:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e53955ce12642bd9a9c19b5469485a7a7fcecdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:84:4d:c1:8d:40:fc:2e:3f:88:0a:ac:41:
5c:d9:fa:74:e4:03:26:3f:68:d5:cc:bb:b2:5b:04:
b5:91:9a:7a:09:51:cf:dc:b5:33:e8:a8:35:2b:ef:
62:97:95:44:53:e0:ee:76:dc:6a:35:d5:a4:8b:29:
45:93:dc:8c:78:d9:d4:f8:90:23:c7:db:46:6d:5f:
18:9f:0a:71:06:39:3a:03:0b:ee:af:e7:92:5c:57:
ef:59:95:97:83:c7:8f:f2:cd:35:a4:b1:47:3d:42:
ab:c5:ce:81:18:cf:90:be:05:ed:1a:93:2f:20:50:
52:f8:d4:b5:1d:a9:43:72:3f:63:b0:32:ae:44:4e:
7b:62:28:ad:bb:03:c1:ca:47:e1:3d:7b:57:4e:ac:
e9:7b:9b:83:29:8f:23:e5:60:3c:a7:8f:6e:be:79:
2f:b2:1b:f3:2f:c7:a9:b8:ca:c2:8b:0a:93:8f:cd:
87:4b:90:ad:a1:a5:80:de:99:8d:7d:9f:d9:02:ea:
1a:2b:cd:27:8f:b9:90:99:82:83:de:78:73:ca:35:
ce:7c:5b:fb:a8:a7:ac:d5:c7:3b:1c:42:9a:9a:90:
42:a6:e2:53:6c:9c:2d:ff:c7:00:91:2c:5d:6c:0f:
27:3a:3e:3f:78:3e:89:79:44:96:33:a5:8e:50:21:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:53:95:5C:E1:26:42:BD:9A:9C:19:B5:46:94:85:A7:A7:FC:EC:DD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XlOVXOEmQr2anBm1RpSFp6f87N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.117.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c3:38:36:25:44:52:76:8b:fa:e7:45:75:b4:5d:e6:1a:27:
f2:74:a0:a7:38:ee:ac:7b:1b:ef:ce:d6:1d:9f:12:b4:e0:c1:
e9:56:5c:f7:02:a9:0c:3d:bb:74:88:ae:71:b2:27:31:7a:0e:
63:65:cb:87:d3:e1:e0:21:cd:f4:e5:5c:74:24:be:dc:cc:30:
0a:cf:12:d1:d3:13:68:81:1f:0d:af:d7:62:38:9d:13:f1:8f:
ec:16:fd:c0:0b:f1:b9:95:44:bf:5a:84:f2:d7:3d:dc:ae:ce:
eb:5c:3d:42:b7:ba:ba:f1:3b:a5:02:ab:76:4e:0a:6e:32:13:
bc:e6:8f:40:82:ed:46:cd:dd:63:15:9e:fe:66:c4:50:8c:07:
ef:cc:bc:21:8f:29:c3:87:4a:09:c8:48:8c:12:36:e6:39:91:
83:69:fb:42:39:08:27:18:4b:a7:5f:45:ec:19:38:8d:c8:44:
6c:6b:48:a8:b6:3d:40:ad:a3:95:0e:3d:6e:26:01:a2:93:c7:
88:ad:bf:10:ed:39:e8:e8:b0:22:b9:32:41:10:07:37:b5:1f:
24:04:9f:66:a5:04:b2:e2:9c:9b:84:39:5d:9c:b7:e2:ee:72:
05:04:07:02:de:3c:bb:87:20:e5:07:1b:5e:24:ae:7f:c8:12:
85:dd:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:40 2026 by rpki-client