Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bkT2I62y7yw9WoqC9SlFRjZgP-o.roa
File: bkT2I62y7yw9WoqC9SlFRjZgP-o.roa (raw, json)
Hash identifier: lJwQdyo7pt/pXy+3V2xeDSuq9NAeQBKBstQ/dP1mDy4=
Subject key identifier: 6E:44:F6:23:AD:B2:EF:2C:3D:5A:8A:82:F5:29:45:46:36:60:3F:EA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A020D427C70E8DAED9AA33A4596AE245F7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bkT2I62y7yw9WoqC9SlFRjZgP-o.roa
Signing time: Thu 20 Aug 2026 20:19:29 +0000
ROA not before: Thu 20 Aug 2026 20:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219357
IP address blocks: 31.59.140.0/24 maxlen: 24
217.60.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 06:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:d4:27:c7:0e:8d:ae:d9:aa:33:a4:59:6a:e2:45:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 20 20:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e44f623adb2ef2c3d5a8a82f529454636603fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:9c:da:64:86:ad:5b:55:1b:e6:c4:d0:ce:
5f:b9:df:5e:e8:7b:db:5b:52:ff:88:f6:87:93:fc:
40:f2:3e:c1:d6:30:0f:ac:31:75:9f:a8:ad:47:85:
82:9b:a3:73:b1:a5:90:b9:7e:24:b6:79:c3:47:17:
15:2e:4b:b2:6a:8d:6f:e8:93:06:f3:8f:6a:83:6f:
93:90:a7:af:3e:2c:c4:1e:d5:37:f0:bd:d2:fb:28:
64:22:1d:fc:67:d6:79:b2:a3:60:3c:77:ab:a2:1c:
3b:61:d6:35:d1:34:e3:ad:95:88:61:41:8c:97:8e:
8b:e0:64:23:87:49:44:9d:cc:10:26:39:bb:a7:80:
54:0c:fc:dc:6a:b0:51:77:5a:91:63:56:8e:96:e5:
52:46:41:b8:cb:d6:9c:cf:b0:87:f7:2a:fe:df:69:
e0:f3:92:d3:c4:9a:13:cf:1f:11:e4:0a:4a:50:b9:
9b:00:19:22:cf:ae:0c:ff:10:4a:41:a1:4c:1e:07:
84:05:f8:01:81:58:12:36:b5:82:bf:fa:04:db:ff:
b1:ac:b8:4c:11:8d:09:32:1e:4e:05:17:b5:0f:fc:
0a:ec:a1:b0:45:6b:d4:bd:90:e8:9d:0c:af:2e:66:
a5:be:4a:ad:9a:92:3b:81:b1:2f:cf:14:fe:0c:21:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:44:F6:23:AD:B2:EF:2C:3D:5A:8A:82:F5:29:45:46:36:60:3F:EA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bkT2I62y7yw9WoqC9SlFRjZgP-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.140.0/24
217.60.67.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:44:64:07:86:3d:7d:db:1e:ae:56:40:8e:d7:bf:0e:1d:53:
ff:84:76:25:56:60:d7:14:65:69:12:5f:c1:59:e4:7d:ce:cd:
15:bf:0b:46:e5:c4:d1:a9:1c:80:06:19:a5:04:64:8e:c0:12:
c6:fc:5b:30:e7:17:dd:d6:ca:15:96:fa:2f:1b:4e:eb:08:40:
e6:05:77:c1:87:00:65:44:0d:a6:7b:50:87:ac:2c:8c:15:98:
69:41:5b:38:5b:72:98:6f:51:fd:c1:6f:23:af:93:d0:a5:62:
0a:44:e4:ab:d7:2a:44:58:0d:85:4a:ad:62:aa:ca:a2:f9:96:
68:f2:0e:52:52:d1:14:f2:74:16:7b:f2:af:78:e1:0d:08:8d:
58:38:6f:f4:ec:6c:4d:80:5e:f4:a3:59:3b:57:75:b1:04:33:
cf:b2:3a:b6:3b:a0:d8:51:96:d6:eb:07:72:e9:e0:ba:ce:01:
7a:4b:2b:0c:7a:2d:1c:94:3b:de:c1:0d:a2:a2:c8:43:66:cb:
24:6e:73:3c:9a:6a:2e:66:73:21:96:5b:4d:ef:0e:1b:02:c9:
75:c3:15:aa:71:e2:a3:84:0c:37:a0:1e:23:5f:9f:44:ac:bb:
89:26:24:de:5f:3d:1d:85:7e:8f:3b:4b:a3:8c:51:22:14:0f:
20:4b:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 12:55:12 2026 by rpki-client