Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YgZWqJINoMhPlhmeNeCRJH7qagk.roa
File: YgZWqJINoMhPlhmeNeCRJH7qagk.roa (raw, json)
Hash identifier: nKQKymW+FFVPBDbR/Y/fFqWkZg2NO4FUYpzQw1M3vGg=
Subject key identifier: 62:06:56:A8:92:0D:A0:C8:4F:96:19:9E:35:E0:91:24:7E:EA:6A:09
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F958F7A29A45C99B511C642C1A0F1E6D2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YgZWqJINoMhPlhmeNeCRJH7qagk.roa
Signing time: Fri 24 Jul 2026 19:17:15 +0000
ROA not before: Fri 24 Jul 2026 19:17:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212743
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.39.0/24 maxlen: 24
94.183.170.0/24 maxlen: 24
94.183.203.0/24 maxlen: 24
94.183.206.0/24 maxlen: 24
94.183.208.0/24 maxlen: 24
94.183.209.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
94.183.238.0/24 maxlen: 24
94.183.239.0/24 maxlen: 24
94.183.254.0/24 maxlen: 24
217.60.8.0/23 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:8f:7a:29:a4:5c:99:b5:11:c6:42:c1:a0:f1:e6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 24 19:17:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=620656a8920da0c84f96199e35e091247eea6a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:32:aa:fb:63:f1:b3:ee:48:6c:bf:d7:b4:
e8:a2:a9:b2:84:d6:89:48:36:8d:b6:0f:02:32:2a:
91:26:48:ef:2b:84:a5:27:18:20:54:49:70:d5:66:
cd:20:af:af:7a:b8:87:62:73:2d:67:73:15:9f:57:
60:f7:3b:5f:6b:b9:6c:35:80:c0:d6:ef:b0:e0:12:
cf:c6:ff:71:51:dc:3c:99:54:50:d0:6d:19:85:41:
2b:05:0e:95:06:a8:71:8d:1f:74:6b:67:e5:4f:08:
64:ff:3b:40:7f:52:f0:90:7a:67:58:fb:51:a4:66:
1b:4c:d4:09:03:9d:5a:f5:b3:bf:d0:17:f2:c1:50:
38:26:a0:96:4b:c5:eb:9f:77:a2:54:29:33:f0:ae:
85:75:56:9c:8d:6a:d7:d4:02:a3:b7:58:df:68:f8:
b3:53:aa:4b:ce:54:36:51:56:02:92:11:4b:12:ee:
fc:c9:bc:89:ed:33:a8:d7:40:99:4c:19:7d:04:17:
4d:09:e2:87:4c:92:8b:46:33:e1:ed:fa:4d:af:bf:
dd:2d:17:f5:0b:b3:ce:90:98:31:e8:25:83:02:46:
b2:ad:03:58:12:f1:a5:69:83:ae:06:33:ea:bc:e4:
bf:05:1a:d8:ad:10:08:71:05:2c:21:56:b4:26:5f:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:06:56:A8:92:0D:A0:C8:4F:96:19:9E:35:E0:91:24:7E:EA:6A:09
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YgZWqJINoMhPlhmeNeCRJH7qagk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.39.0/24
94.183.170.0/24
94.183.203.0/24
94.183.206.0/24
94.183.208.0/23
94.183.226.0/24
94.183.238.0/23
94.183.254.0/24
217.60.8.0/23
217.60.24.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:1c:c1:c1:c6:5b:e8:20:7c:cb:e3:40:3c:a9:55:d6:67:d5:
74:5c:b2:77:ac:14:a4:c7:10:74:44:a2:e5:c8:74:ff:51:9d:
49:ab:77:75:a0:4a:6f:f4:f7:18:a9:49:d3:93:33:0b:df:87:
b5:49:16:2c:06:da:f6:db:bb:a4:2c:66:6d:34:67:63:a6:27:
a9:95:d1:0c:03:08:a5:83:e7:24:e2:33:e6:a2:b4:28:6c:18:
f6:e4:f4:b0:40:d6:8e:2d:22:2a:a0:0c:0d:cd:78:77:0e:4d:
71:a8:38:be:65:a7:7a:e2:44:d5:0f:98:04:41:3c:92:8a:18:
88:8c:79:c1:a0:56:2f:78:e1:70:ea:51:5b:f5:da:b5:4f:a2:
cc:70:5c:6c:dd:26:6a:12:4a:b4:9d:9f:c4:40:ed:42:59:d2:
fb:c3:ae:6a:16:82:8d:e9:c9:42:38:35:aa:e9:53:71:0c:2a:
ab:ab:d0:6b:09:38:59:07:bf:3a:34:9a:7d:b2:2e:b0:a8:da:
cb:2a:b0:2e:4f:fd:ba:8b:2f:01:f2:d9:9a:05:5f:02:8a:b4:
f6:03:4f:2a:57:47:83:dd:f7:ad:db:49:c9:f8:b7:4c:44:43:
66:b8:ab:1c:c0:59:20:1f:39:26:76:76:a7:69:30:c2:63:e3:
11:ad:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:54:20 2026 by rpki-client