Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eM3g41Sw8116CGcCBp_XI6kaIP4.roa
File: eM3g41Sw8116CGcCBp_XI6kaIP4.roa (raw, json)
Hash identifier: OUHInEfcgdSVn4Qm85ZwPhGyJ2EwhyIF8Sn1swqgFZ8=
Subject key identifier: 78:CD:E0:E3:54:B0:F3:5D:7A:08:67:02:06:9F:D7:23:A9:1A:20:FE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EFEC67089D2A7C545284464FA82D03FB8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eM3g41Sw8116CGcCBp_XI6kaIP4.roa
Signing time: Thu 25 Jun 2026 12:34:38 +0000
ROA not before: Thu 25 Jun 2026 12:34:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 31.57.53.0/24 maxlen: 24
31.57.59.0/24 maxlen: 24
31.57.146.0/24 maxlen: 24
31.57.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:c6:70:89:d2:a7:c5:45:28:44:64:fa:82:d0:3f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 25 12:34:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78cde0e354b0f35d7a086702069fd723a91a20fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:cd:16:16:6b:99:8a:2a:e2:9e:8d:97:30:
9f:21:46:d9:fd:8b:9c:5b:7e:9f:ed:57:aa:82:dd:
61:26:4e:5c:1b:69:f4:21:dd:7e:0d:a6:7c:a5:48:
82:f9:ae:81:61:45:47:9e:29:52:f6:b2:ff:ba:48:
23:bf:0f:17:58:e2:d4:42:0f:2e:9f:93:f6:39:c9:
58:9a:5d:75:45:32:f3:3f:b5:79:24:b0:09:64:bc:
08:a9:1f:1b:80:e6:e7:4d:e1:ad:bb:3d:7b:06:16:
48:fd:30:f0:70:67:8f:de:b3:45:a2:94:77:b3:c6:
a6:14:bf:53:47:fe:1f:05:15:d0:65:20:ab:58:18:
62:15:44:5a:0c:49:fd:1d:5a:a3:e3:a8:ca:1b:97:
33:13:7b:b7:5b:e4:ad:b9:84:c4:2d:67:86:70:fa:
d7:7d:d1:29:d1:75:6d:af:23:af:45:da:12:5d:d9:
9d:fc:e9:d6:43:a8:81:b2:2a:0b:78:4d:35:a7:be:
0b:e3:b9:79:b8:06:b4:37:6c:e5:95:97:d8:10:73:
a6:56:9e:e3:92:1f:8a:e8:e5:28:b4:f9:b4:8a:89:
6a:54:0f:b4:a0:96:dd:cf:0a:ab:f4:46:bd:86:32:
19:33:8d:e5:e8:15:9b:fa:41:b6:92:34:3f:c2:31:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CD:E0:E3:54:B0:F3:5D:7A:08:67:02:06:9F:D7:23:A9:1A:20:FE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eM3g41Sw8116CGcCBp_XI6kaIP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.53.0/24
31.57.59.0/24
31.57.146.0/24
31.57.171.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b3:ff:15:d9:73:14:13:52:d8:a0:d6:8b:ea:f8:44:76:3f:
bd:24:2e:e9:5c:b6:de:2a:39:95:b7:91:8f:c5:df:49:9e:38:
ef:b8:13:0d:71:7e:39:0f:a9:15:8d:5a:b1:2f:1b:b8:4b:67:
a6:1f:0e:8b:75:b1:56:88:42:2c:99:aa:46:e8:62:35:41:64:
69:29:1f:c3:17:41:a0:6e:2f:63:ee:10:c9:e6:85:bf:da:67:
fe:01:e7:36:4b:62:ba:1a:73:94:86:fc:ce:98:09:77:9d:21:
97:a5:e1:37:57:af:e1:87:2e:ac:73:4a:92:0b:dd:c5:99:fb:
5e:02:f4:5e:7b:bf:6f:48:f2:fe:cd:9c:3b:f7:25:3e:ad:8c:
d2:1d:c4:1c:de:e2:f7:46:73:c0:9a:c9:61:47:c8:c9:29:00:
62:b8:a8:50:34:10:60:bf:20:ec:63:ab:66:86:5c:11:96:b0:
e3:62:3d:ea:dc:29:d7:66:23:b5:07:19:e6:89:77:d0:12:67:
de:60:06:d6:3d:6d:b7:85:63:e9:d4:b3:99:c6:0f:77:76:c5:
57:0e:2a:7c:1a:f0:2e:6b:4a:81:d1:b6:f0:20:49:24:67:7e:
b3:1a:85:a9:7a:5d:49:80:31:1d:e0:eb:1d:22:41:fb:33:9e:
7d:60:13:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 17:01:05 2026 by rpki-client