Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dhRB4qsHc-deEsangyRWekgz0V8.roa
File: dhRB4qsHc-deEsangyRWekgz0V8.roa (raw, json)
Hash identifier: 0+mI2JY/AmJunf8dmhUTTzsO3te/shpyPI/DOqkG6k4=
Subject key identifier: 76:14:41:E2:AB:07:73:E7:5E:12:C6:A7:83:24:56:7A:48:33:D1:5F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A127495258E0853F1B7FD65D2756B72B87
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dhRB4qsHc-deEsangyRWekgz0V8.roa
Signing time: Sat 10 Oct 2026 19:27:58 +0000
ROA not before: Sat 10 Oct 2026 19:27:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 31.57.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:49:52:58:e0:85:3f:1b:7f:d6:5d:27:56:b7:2b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 10 19:27:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=761441e2ab0773e75e12c6a78324567a4833d15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:5c:3d:ff:23:00:e6:14:db:80:b7:ec:38:
c9:49:ce:03:25:2c:a1:a9:3c:ff:e5:33:c3:fe:e0:
f2:41:78:b2:11:01:52:44:1c:ae:f3:4b:0c:22:c1:
7e:07:c1:6e:42:ba:cc:41:c6:e9:ee:7a:ae:2e:c7:
f3:ae:2f:98:79:e8:aa:d7:5a:04:73:f4:47:2c:75:
43:23:f2:40:20:56:76:0c:09:7f:4b:58:71:c8:1d:
46:63:9d:2c:7e:4e:83:f8:57:06:4c:ad:39:a6:a7:
78:6a:99:42:49:c2:58:74:01:11:18:db:17:29:34:
fb:55:88:74:45:a6:99:1d:39:cb:9f:ef:4e:2a:08:
fb:7b:de:62:f3:08:ef:67:21:c0:45:b7:ea:35:ec:
d5:fc:ef:94:41:43:d1:57:d0:f8:10:28:ec:b0:14:
36:db:43:0b:0e:10:96:ce:77:b1:f0:db:1d:80:66:
b3:4a:2f:ae:10:22:bc:11:3f:56:bb:31:93:b8:ed:
6d:7d:10:b5:a6:27:c9:ca:73:6a:93:dc:3f:01:20:
47:2f:fc:15:7a:29:8c:a6:10:16:21:e1:aa:1d:e7:
e7:b2:42:e9:8b:41:7c:b2:60:dc:7b:25:31:c0:ad:
23:bf:ae:68:e8:b1:4f:f3:05:ba:73:62:28:d7:f1:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:14:41:E2:AB:07:73:E7:5E:12:C6:A7:83:24:56:7A:48:33:D1:5F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dhRB4qsHc-deEsangyRWekgz0V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:78:5b:5d:6b:51:fa:e5:7c:80:cc:23:2b:ea:69:70:7d:ec:
00:45:eb:65:9d:2c:e8:4b:80:82:85:69:33:ef:91:ac:33:0d:
de:90:e0:25:1d:3b:f2:02:a3:da:04:44:44:c7:ba:8d:43:0d:
94:39:b9:0b:c5:6f:4d:f2:00:83:84:e3:6e:47:19:91:8e:2b:
85:79:6d:af:4f:2c:b1:63:2e:18:67:ff:8b:fe:65:58:e4:82:
30:a4:a2:72:7a:82:97:1d:f9:ca:27:a3:18:3d:18:37:57:48:
cc:b4:a2:40:80:df:5c:ae:0c:ed:cc:0d:cc:a9:e6:33:22:a7:
15:ac:37:1f:af:88:ff:3d:df:40:79:84:04:8d:42:68:e9:b0:
49:b9:06:66:6b:00:c8:c4:6f:0c:28:0b:c3:83:cc:79:96:f1:
e3:98:ad:ab:17:71:b8:44:e4:74:54:ff:d9:f7:0c:b1:9d:a0:
83:e8:0b:de:70:79:92:8e:b5:1f:9c:d3:2d:59:37:57:96:7a:
62:ec:2a:bc:74:18:c3:48:aa:a2:fb:eb:94:76:d7:05:e1:4e:
04:a0:96:85:0b:18:47:9d:e1:14:70:2d:85:19:89:44:cb:5a:
18:21:e0:54:ca:c5:b8:a3:92:8b:e9:3a:db:eb:d7:6b:d8:00:
64:ab:c3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:44:01 2026 by rpki-client