Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dalJA6oEhBQLc6cFFH34Ol_UluE.roa
File: dalJA6oEhBQLc6cFFH34Ol_UluE.roa (raw, json)
Hash identifier: qgE3wdyilwNOhEinXyM0oEzp+qykLw4w2JHDo9tAN0E=
Subject key identifier: 75:A9:49:03:AA:04:84:14:0B:73:A7:05:14:7D:F8:3A:5F:D4:96:E1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DDA3F3CF93B839BEFB81ECEDCA4FFC672
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dalJA6oEhBQLc6cFFH34Ol_UluE.roa
Signing time: Wed 29 Apr 2026 17:17:50 +0000
ROA not before: Wed 29 Apr 2026 17:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 31.58.36.0/24 maxlen: 24
31.59.116.0/24 maxlen: 24
31.59.196.0/24 maxlen: 24
31.59.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 16:45:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:3f:3c:f9:3b:83:9b:ef:b8:1e:ce:dc:a4:ff:c6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 29 17:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75a94903aa0484140b73a705147df83a5fd496e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:1b:95:8a:16:f3:58:13:16:5b:6b:dc:ad:
33:4e:cb:26:a1:56:de:ee:e7:44:6a:23:75:b9:98:
41:5a:ed:35:61:69:dd:8a:c7:a8:b8:2f:77:fd:81:
92:e5:2e:2d:f9:42:82:a3:8a:5d:9c:8e:fc:8b:67:
f7:1b:29:36:ad:ff:3a:1e:12:c5:3d:14:2d:e7:fe:
5b:f3:6a:26:c2:ce:b3:70:a3:ae:88:f7:74:ff:06:
e5:5e:31:45:64:7e:a6:2b:f1:f0:17:8b:0d:71:b6:
bb:9e:f3:e7:0b:b1:f8:26:cb:26:4b:c1:d0:70:8d:
b9:70:4c:a4:fd:fa:60:9e:a2:71:1b:65:1f:e7:c4:
de:6f:24:b6:ac:72:6d:de:91:ac:7b:f5:7c:36:24:
f0:00:de:65:3f:c9:eb:92:2a:33:c2:b0:d7:12:e3:
d7:1a:9a:c2:33:cc:91:a6:62:40:69:f9:27:28:c5:
a9:de:cf:ad:f3:88:be:72:70:8c:1e:0a:a4:c9:cb:
c5:44:39:79:ce:44:d5:41:f7:99:3e:a7:42:6d:4d:
03:90:41:80:19:d7:09:b4:2b:10:7a:6b:61:be:e5:
43:3c:03:c3:99:db:b0:11:9f:95:1c:38:b3:8b:ea:
5b:67:79:a0:c8:3b:c6:99:a5:7a:a2:e1:99:5c:6b:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A9:49:03:AA:04:84:14:0B:73:A7:05:14:7D:F8:3A:5F:D4:96:E1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dalJA6oEhBQLc6cFFH34Ol_UluE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.36.0/24
31.59.116.0/24
31.59.196.0/23
Signature Algorithm: sha256WithRSAEncryption
24:a2:e6:37:42:98:2b:f6:99:9c:00:4e:5c:21:a7:6e:a2:86:
89:0d:a7:ff:d1:16:ea:77:1e:00:b0:e6:d1:c6:0a:ff:19:77:
8f:23:0c:2a:81:1b:8c:10:da:f6:4a:47:c7:16:c8:d7:2a:61:
bf:20:bd:07:01:07:f4:89:42:61:8c:5e:ee:3c:27:0f:0f:ef:
e5:ea:ff:23:1a:33:4b:10:b7:42:8b:02:ef:e3:38:f7:4b:76:
ab:ba:a7:93:2d:6d:61:ae:44:13:08:26:7d:ff:d2:06:e1:cf:
e7:14:fa:ea:7a:c8:8e:10:c4:3c:03:db:23:a1:65:ce:5a:bf:
e2:84:99:6c:a1:65:eb:d9:98:15:56:e1:78:8f:9e:81:60:2c:
94:55:cf:58:4f:9e:16:18:a4:d5:9e:11:6e:f4:9a:76:bb:77:
c8:95:64:cd:fd:8a:7e:de:76:a2:36:50:1b:25:e0:f1:94:83:
01:8d:7f:39:d9:95:af:a1:97:1f:c4:71:72:23:a6:3e:37:fd:
fa:19:2f:cd:f2:b7:2c:70:38:d4:d1:23:39:9d:87:f5:e0:4e:
89:3d:9e:4d:75:ec:a7:11:12:fd:ac:26:ba:ec:ab:61:27:3a:
eb:4a:41:fb:ab:0f:b8:8b:ef:e0:33:15:a0:8d:34:80:a0:4f:
9e:0c:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:20 2026 by rpki-client