Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cOjSVzgnyy4AdYjKC-W1h6vrwBo.roa
File: cOjSVzgnyy4AdYjKC-W1h6vrwBo.roa (raw, json)
Hash identifier: qWtj+TDBTJWHHCfjNFdIbdHorqqagwD4uk5oaWTE928=
Subject key identifier: 70:E8:D2:57:38:27:CB:2E:00:75:88:CA:0B:E5:B5:87:AB:EB:C0:1A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FD1BCC5F24F854324891E9D9C5A4555A6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cOjSVzgnyy4AdYjKC-W1h6vrwBo.roa
Signing time: Wed 05 Aug 2026 11:43:57 +0000
ROA not before: Wed 05 Aug 2026 11:43:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54702
IP address blocks: 31.58.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:bc:c5:f2:4f:85:43:24:89:1e:9d:9c:5a:45:55:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 5 11:43:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70e8d2573827cb2e007588ca0be5b587abebc01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:ca:46:37:ea:b4:04:59:9d:a4:9e:74:0d:
28:db:6d:8a:81:c1:95:54:d6:cd:d0:36:7d:5b:bd:
1a:a8:1f:7a:12:58:47:1d:fb:0b:c0:25:ee:8a:03:
59:72:c2:7c:8e:13:30:d7:66:39:5e:84:2d:00:2b:
d9:94:d2:22:74:80:3e:2e:72:20:39:d3:4f:a4:8f:
95:03:40:7d:da:73:be:eb:c7:d2:0f:c0:53:6d:c3:
cb:37:4d:2b:83:1e:1b:0b:b1:6e:d3:0d:83:d4:fd:
a1:f9:2c:ca:6d:a3:35:5b:2d:0b:57:2e:21:f0:93:
37:a1:1d:ab:24:0c:d4:9e:49:3d:2a:7b:35:31:0b:
45:ee:f3:9b:d4:e1:b1:19:88:00:2c:a4:e4:80:c3:
10:b1:e2:39:6f:8c:07:40:ba:58:31:95:53:5e:87:
99:b3:d0:93:eb:15:69:c1:07:a4:2a:62:cc:36:62:
cf:c3:d4:3d:72:26:c5:e8:21:1b:ca:f2:42:c7:c5:
bf:15:e3:27:e6:10:94:6f:b4:9a:6f:2a:ad:b5:fd:
b1:12:c5:6e:84:29:7c:88:1b:f0:20:f4:41:6d:a1:
8d:eb:c1:d2:70:5b:04:22:f7:e4:47:ae:79:56:26:
5c:95:84:99:fd:c3:d1:4b:fc:35:8f:b4:25:2c:c7:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E8:D2:57:38:27:CB:2E:00:75:88:CA:0B:E5:B5:87:AB:EB:C0:1A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cOjSVzgnyy4AdYjKC-W1h6vrwBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.45.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f7:82:18:47:93:c6:49:a5:83:82:a7:1c:44:94:8a:fb:21:
a8:28:98:a8:cc:84:e8:fd:e9:a3:3d:64:25:94:2e:3c:4e:e3:
4d:29:7a:3b:c7:8b:48:09:da:4a:26:76:1b:1f:74:9e:17:7b:
d6:d9:02:e3:1e:86:ac:e8:f7:2e:04:b1:ce:2e:c1:f1:99:d6:
aa:1f:15:a5:eb:3a:7e:ff:88:97:e8:81:fa:6d:7e:62:39:d4:
0b:f8:e9:8a:d9:79:ba:e1:9d:8b:c5:13:0f:fb:3e:48:15:de:
fd:ad:f2:4b:a0:54:0f:0c:17:78:59:37:e5:20:63:28:90:52:
2c:4f:93:be:1a:d8:83:4d:43:53:f4:35:ec:e0:cc:23:e5:0d:
25:f6:db:a2:94:92:bf:d6:1f:14:29:ba:d9:8b:27:d8:e0:16:
81:3e:be:2c:b2:8a:ad:e6:51:3d:66:4c:e4:44:e4:5a:b9:bb:
b7:cd:89:ca:43:ac:b6:57:c7:9d:8c:3d:93:5a:44:2b:4f:e5:
d4:09:e4:c0:e2:a1:d9:ab:4c:e7:86:c0:66:68:e9:c4:f7:78:
c9:a0:87:df:d4:00:c4:c4:65:0e:f9:82:69:20:e8:3d:0b:bb:
37:d3:67:76:7c:e5:0a:c3:79:99:d3:ec:ad:46:f6:10:9b:50:
08:9e:e8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 07:29:53 2026 by rpki-client