Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aji3m9ZQKTF6x7t-l0S4_EQ4woU.roa
File: aji3m9ZQKTF6x7t-l0S4_EQ4woU.roa (raw, json)
Hash identifier: r3ZmYkhaSQ8b1Ame5IKji091QAzkIapTCXUlZDDn4KU=
Subject key identifier: 6A:38:B7:9B:D6:50:29:31:7A:C7:BB:7E:97:44:B8:FC:44:38:C2:85
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E3FD841DC1517BA95DA3AAB533B6EF748
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aji3m9ZQKTF6x7t-l0S4_EQ4woU.roa
Signing time: Tue 19 May 2026 10:46:37 +0000
ROA not before: Tue 19 May 2026 10:46:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 31.58.182.0/24 maxlen: 24
94.183.230.0/24 maxlen: 24
94.183.252.0/24 maxlen: 24
94.183.253.0/24 maxlen: 24
217.60.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:d8:41:dc:15:17:ba:95:da:3a:ab:53:3b:6e:f7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 19 10:46:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a38b79bd65029317ac7bb7e9744b8fc4438c285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:38:44:82:73:7f:2a:4c:3b:a7:61:59:3d:
4e:ca:5d:6b:96:52:52:a1:c3:82:14:31:d1:ba:c9:
7c:96:3a:28:b0:05:47:c3:02:66:5e:7c:9b:04:3a:
2d:2d:13:42:0e:d1:8f:bc:3c:96:6d:f6:d3:19:6a:
dc:de:41:91:bc:0f:89:12:12:05:79:f6:26:c7:60:
21:ee:d2:59:58:94:3d:b3:06:cf:2e:f8:73:93:1a:
74:5b:1b:b8:6d:a7:24:09:fe:8e:6a:77:56:66:7a:
a0:c5:ab:ff:a7:f1:4c:b4:e6:ef:01:3e:f6:f2:44:
10:8f:43:8b:54:b6:4e:fb:00:e9:1b:4c:7d:3e:6d:
bf:a2:3e:6b:bd:70:c3:53:ed:fb:d9:0a:6f:11:92:
02:93:fd:84:7a:d6:ef:82:ea:ac:10:1a:a7:cb:95:
d9:f1:aa:d9:2f:6c:59:e9:c8:54:d6:91:2b:ee:7a:
23:14:69:78:73:48:d2:fe:21:f2:ef:3d:64:85:5d:
69:c5:56:a1:98:94:f8:14:d9:7e:a3:f5:f3:0a:fe:
d6:e1:e5:e9:90:f6:80:0b:d2:d6:9a:9f:39:6d:cc:
52:b8:a9:91:02:17:00:58:4a:64:46:e2:9b:74:13:
96:cc:74:0c:ba:8a:91:02:83:5d:58:ed:38:01:16:
33:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:38:B7:9B:D6:50:29:31:7A:C7:BB:7E:97:44:B8:FC:44:38:C2:85
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aji3m9ZQKTF6x7t-l0S4_EQ4woU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.182.0/24
94.183.230.0/24
94.183.252.0/23
217.60.185.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ad:78:32:cc:53:44:4f:a0:10:bd:88:30:3b:f9:54:54:aa:
11:27:fb:80:47:23:5f:e3:c0:e0:f2:28:53:7f:3f:09:a4:b8:
91:63:16:83:9d:84:82:d2:b6:fc:f7:92:e0:a8:fa:f3:65:8a:
d2:e9:b6:be:86:03:20:a3:fe:6f:6d:25:f3:5b:c5:b5:44:fd:
60:ed:ce:74:77:ca:22:d3:a6:76:99:ff:0f:20:dc:7e:c7:cc:
ac:19:c9:32:b4:fc:f7:ff:93:92:a1:25:2b:a2:19:0c:94:32:
a9:40:f4:2d:2f:10:23:b1:bf:c5:ba:c5:9e:e9:51:a1:d1:d0:
66:b4:4a:5a:2f:15:79:86:03:54:af:32:0a:49:98:51:c6:92:
f2:69:7b:ba:75:5b:ca:c6:c6:d2:ec:59:0b:70:1c:b0:48:10:
b0:40:cc:f1:5b:d7:07:ed:83:09:3f:fc:d0:8f:39:4c:0c:cd:
b3:06:7e:d7:60:d3:0e:83:6a:ec:40:86:07:cf:12:06:75:6d:
1c:7d:9e:ca:2a:26:c7:f4:10:fe:58:ea:19:ac:5f:88:b4:80:
12:0e:a3:b7:bc:9d:28:37:ae:fc:aa:57:24:b2:1a:fa:81:45:
3c:07:c6:c9:36:c8:b4:a4:e3:33:0d:74:98:89:e4:c5:cc:af:
34:f2:83:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:59:24 2026 by rpki-client