Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aFhr-O8QePEao-G5bvfoKuJYktg.roa
File: aFhr-O8QePEao-G5bvfoKuJYktg.roa (raw, json)
Hash identifier: aBwT+JUXJVgSbMyXyF5ffgNOw3giCxGPQHdWkX/pLuw=
Subject key identifier: 68:58:6B:F8:EF:10:78:F1:1A:A3:E1:B9:6E:F7:E8:2A:E2:58:92:D8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FE02388F9B18E77A894B8B4E3C1129522
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aFhr-O8QePEao-G5bvfoKuJYktg.roa
Signing time: Sat 08 Aug 2026 06:50:52 +0000
ROA not before: Sat 08 Aug 2026 06:50:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219050
IP address blocks: 31.59.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:23:88:f9:b1:8e:77:a8:94:b8:b4:e3:c1:12:95:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 8 06:50:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68586bf8ef1078f11aa3e1b96ef7e82ae25892d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:19:02:cf:89:1c:cf:50:67:0f:7f:cb:a6:
bc:a0:ad:79:a6:d7:fb:7c:c7:16:c8:a0:42:98:bf:
be:f2:6a:7e:8f:f6:ae:b3:f1:f5:d6:92:80:8d:cc:
dc:19:d6:37:52:46:a5:1b:02:87:09:00:e1:da:87:
af:20:a7:ed:ff:f2:41:09:a0:c0:b7:37:34:38:8b:
31:55:00:f7:c8:b8:f0:94:ae:ca:cb:e5:07:a3:ab:
1b:bd:2d:71:bd:ab:19:fb:70:64:44:17:68:55:f7:
c7:b0:46:b2:2f:45:ef:5d:28:cc:be:c2:92:ba:0b:
02:42:6c:be:55:d5:4d:64:08:d2:c3:29:ef:34:f4:
2a:f2:40:34:19:42:ab:18:32:23:2b:00:2d:63:ef:
9b:42:4c:24:80:4c:0a:be:b8:56:8d:91:ea:4b:d3:
ac:e7:28:9d:64:b7:02:d0:c6:78:c8:d4:95:96:ea:
8b:6f:db:73:7d:13:c9:2d:31:fd:6b:30:52:be:6c:
e6:b0:10:7c:ee:fa:cd:22:5b:81:40:61:7d:59:2a:
94:45:bb:83:09:7f:6a:06:0b:4c:c1:af:10:99:c9:
9b:27:26:68:a2:e1:c4:c9:71:ec:6b:14:d6:a1:a3:
4b:60:ed:d8:69:41:cb:08:b5:0f:50:16:b7:f5:75:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:58:6B:F8:EF:10:78:F1:1A:A3:E1:B9:6E:F7:E8:2A:E2:58:92:D8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aFhr-O8QePEao-G5bvfoKuJYktg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:6b:49:f8:be:80:c7:72:95:48:e0:aa:e2:6b:39:12:13:22:
a0:03:bd:96:57:55:8a:5f:b7:78:47:47:03:62:98:4b:25:0e:
36:3c:4a:61:b3:65:a6:27:d2:ae:9c:b0:0a:94:77:02:31:7a:
46:ca:2f:7b:6a:39:8a:fb:b4:3c:87:53:1e:84:a6:fa:2b:6d:
01:7f:8b:8e:ba:75:de:c4:32:86:62:cc:07:f2:9c:18:44:cb:
2e:b0:3d:bc:01:d0:da:9d:e5:f4:d3:60:33:b2:14:2d:a1:8e:
bf:88:b5:66:53:a0:b2:bc:50:bf:19:f3:2f:17:8e:c0:ef:37:
f5:fc:2e:3e:e9:d6:f8:97:71:51:e0:76:99:ad:f8:34:f8:bd:
df:aa:9f:fb:5b:c8:4a:3d:df:2e:0e:2d:b9:d7:f3:d2:f3:7b:
fd:89:50:77:01:e5:4a:71:dd:75:f1:32:d0:f3:5d:8a:46:c2:
84:10:7f:b4:e0:fb:9e:4b:2f:90:fa:1e:72:66:20:99:10:af:
32:65:49:ec:c8:4b:32:c7:f1:ee:72:83:80:40:3c:a3:39:41:
14:c5:62:a8:60:e6:8a:dd:67:33:63:aa:ee:9f:2a:11:85:18:
fc:09:92:d0:ea:49:cc:5b:fd:75:c9:b7:15:c7:0b:30:9e:28:
9a:db:1e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:00 2026 by rpki-client