Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z6-eHQ2r_-DClTDC-DbM-4kpzqU.roa
File: Z6-eHQ2r_-DClTDC-DbM-4kpzqU.roa (raw, json)
Hash identifier: VsXEaQoyhuLc1i7BPXCL/Ms9IvzvamWo+azbJ5TbqVc=
Subject key identifier: 67:AF:9E:1D:0D:AB:FF:E0:C2:95:30:C2:F8:36:CC:FB:89:29:CE:A5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0D47117AD8006F2C1111C42C8A24D710E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z6-eHQ2r_-DClTDC-DbM-4kpzqU.roa
Signing time: Thu 24 Sep 2026 17:22:56 +0000
ROA not before: Thu 24 Sep 2026 17:22:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34534
IP address blocks: 31.58.192.0/24 maxlen: 24
31.58.193.0/24 maxlen: 24
31.58.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:71:17:ad:80:06:f2:c1:11:1c:42:c8:a2:4d:71:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 24 17:22:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67af9e1d0dabffe0c29530c2f836ccfb8929cea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:18:97:88:c9:d2:15:93:7e:1b:89:b3:54:
a9:c1:41:13:e7:48:11:a7:69:85:6f:50:2f:0a:87:
c3:18:c8:1a:b9:63:e6:61:31:c9:73:3e:15:30:11:
5f:3b:fe:fd:a7:6e:ef:39:de:11:69:92:dd:2d:6c:
cb:1c:a6:ec:fb:a5:b3:7b:e8:a4:fe:ff:9b:13:58:
35:b9:ab:bd:8e:e1:e7:a4:e4:ca:8d:a7:a8:60:e6:
d7:8e:bc:51:75:68:92:50:34:28:10:9b:44:2f:37:
bf:5f:d3:14:54:0a:1e:b2:c9:3e:e3:36:6d:e7:4b:
30:88:c3:e5:1e:9d:42:40:cb:ef:76:00:95:c7:e1:
c4:9e:fe:93:69:17:03:5b:1b:18:4a:2b:06:e8:12:
f2:dc:75:c5:aa:72:cd:53:46:71:d0:c5:c4:c6:c8:
a6:e1:df:10:6c:9d:89:a7:dd:a7:d4:c2:f1:1c:05:
30:48:64:0f:4e:1e:b3:1d:e6:61:69:5d:73:67:7b:
bf:d5:11:be:fc:bd:52:2c:e1:bc:18:a0:38:d3:f0:
77:f0:4b:0d:32:93:77:9c:f1:16:d8:f4:f6:77:1f:
93:43:da:e2:2e:36:6b:25:61:40:88:1f:a4:b1:b2:
ba:49:04:80:ab:4b:7a:0d:fa:ce:8f:b1:d2:c2:66:
19:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AF:9E:1D:0D:AB:FF:E0:C2:95:30:C2:F8:36:CC:FB:89:29:CE:A5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z6-eHQ2r_-DClTDC-DbM-4kpzqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.192.0-31.58.194.255
Signature Algorithm: sha256WithRSAEncryption
26:22:6a:39:ef:a5:82:38:68:a4:30:02:19:83:66:af:cc:37:
e6:34:5c:97:de:37:38:2d:1a:36:bb:eb:3b:90:1c:ab:fa:c0:
d8:03:ae:39:2b:1c:bb:5b:2f:c2:1b:86:d3:bb:d9:eb:14:f7:
7f:c0:3d:e9:f4:dc:f7:d0:f2:65:46:4d:e4:f6:ce:46:dc:bc:
95:40:16:77:c0:3e:4b:65:6a:53:d0:5f:0d:49:b9:2c:ab:72:
23:eb:f8:9e:a6:dc:34:16:b8:2a:7a:4a:76:12:5d:19:e5:49:
68:11:39:a0:74:ff:28:7b:36:93:1b:d9:26:29:59:46:3e:cb:
e2:71:ea:0c:75:18:02:23:08:49:04:11:5e:e6:3e:8b:e0:69:
f3:06:89:9e:fa:56:09:e7:d9:ae:e7:b3:e6:af:0f:78:02:86:
3a:42:f1:e1:33:aa:de:af:44:fd:ea:24:64:19:f3:d6:11:70:
72:cd:cf:f6:f6:7a:82:fa:45:85:47:b7:3c:39:6b:03:b4:2a:
5d:c9:2c:a6:e6:51:7e:9f:ff:76:b7:5f:89:dd:ec:73:72:b0:
81:3d:8b:e0:94:68:99:26:63:01:79:5c:8e:83:20:a6:0f:a0:
27:c8:39:6c:72:b3:02:3c:52:d5:6e:93:09:80:ce:a6:79:b8:
d9:90:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:57:57 2026 by rpki-client