Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fINAZFbY8j6m6UBz40cjjN6qQr4.roa
File: fINAZFbY8j6m6UBz40cjjN6qQr4.roa (raw, json)
Hash identifier: 87GqU5mwrs4sIotWysnxpT50/EfdFY+yvHUnAtbYe58=
Subject key identifier: 7C:83:40:64:56:D8:F2:3E:A6:E9:40:73:E3:47:23:8C:DE:AA:42:BE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FF08DCD11212D60CE66A25869573DC433
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fINAZFbY8j6m6UBz40cjjN6qQr4.roa
Signing time: Tue 11 Aug 2026 11:20:52 +0000
ROA not before: Tue 11 Aug 2026 11:20:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215294
IP address blocks: 31.58.44.0/24 maxlen: 24
31.59.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:8d:cd:11:21:2d:60:ce:66:a2:58:69:57:3d:c4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 11 11:20:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c83406456d8f23ea6e94073e347238cdeaa42be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0a:7a:7c:f0:fe:18:55:09:55:8a:b1:85:75:
49:21:7c:a5:8b:e9:52:40:0f:67:c3:49:f5:72:2b:
97:b1:a4:74:5f:cd:17:4f:1c:e8:23:7f:d9:41:11:
c9:db:0a:a4:e9:9c:c9:52:84:f5:c7:39:2f:e0:06:
09:d4:6c:98:be:49:eb:e3:b2:b4:a1:e3:84:37:af:
ad:96:11:4a:7c:1c:bd:bb:ff:16:f6:8c:47:f9:84:
49:f6:2a:32:b8:bd:2b:fd:85:aa:2f:dd:6c:cd:e4:
32:f7:c4:54:42:a0:49:4f:e4:1b:62:dc:be:f4:e5:
45:ea:8a:ed:e9:01:cb:fb:00:d6:9d:64:0b:17:0d:
54:92:5e:6a:b3:85:b6:9d:87:40:d8:00:a9:f5:42:
48:da:fa:3b:58:84:22:e1:8b:4c:54:b0:fc:50:01:
f4:7e:a6:78:fc:19:09:67:66:51:96:25:46:84:aa:
90:66:a9:1d:f4:92:93:53:65:a0:3f:7f:57:35:ee:
0b:e7:11:30:51:f8:a5:a7:39:aa:2e:8c:de:df:d6:
5a:77:1d:e6:b0:fb:f2:0b:23:50:dc:0d:73:92:a7:
51:15:f8:15:db:39:89:19:a4:46:5d:2d:cb:19:49:
93:a9:03:c9:17:a4:18:69:b1:8d:93:7e:71:62:93:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:83:40:64:56:D8:F2:3E:A6:E9:40:73:E3:47:23:8C:DE:AA:42:BE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fINAZFbY8j6m6UBz40cjjN6qQr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.44.0/24
31.59.54.0/23
Signature Algorithm: sha256WithRSAEncryption
25:de:9f:83:b2:2a:03:42:be:12:f6:50:bf:d7:e3:31:da:46:
5d:78:4c:a7:72:3b:a8:5d:52:56:f9:a8:29:65:2d:8e:1b:56:
23:a6:3c:9e:14:91:40:2a:f5:33:50:3b:8e:05:2f:8a:cb:85:
a9:23:db:35:44:be:f1:fc:90:1f:48:eb:c0:39:ad:bc:31:71:
0e:bb:68:d4:07:72:66:8b:86:e9:ca:4f:2a:44:00:2b:e2:f8:
d3:64:a8:14:69:db:cc:ae:15:9a:45:2c:23:c4:11:d6:ec:a5:
b0:93:04:fa:c2:20:34:82:d9:ba:f9:3f:3c:dc:8f:c2:c7:1d:
f6:74:8b:b4:e0:05:54:0c:8f:c9:63:7e:15:ea:eb:eb:ca:2a:
d3:32:79:1f:22:40:50:f2:ed:fe:0c:07:86:bf:db:fb:51:ac:
1b:71:36:a9:41:4e:cf:14:a4:34:72:c7:f1:1c:7a:64:94:d0:
92:cb:4c:e7:a6:0f:aa:c3:3e:10:a1:b9:e5:8d:cd:1b:1a:64:
87:d2:3d:05:67:1d:b4:ac:d3:82:a2:82:b6:b6:43:48:9c:81:
82:bf:fa:fb:d7:0f:92:ec:45:e1:09:93:12:e9:d6:87:61:68:
1c:9b:c3:47:a5:2e:3b:9e:fd:fd:88:6a:ba:7d:4b:a3:99:ec:
dd:3e:e3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:11 2026 by rpki-client