Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fhbLd6H6l086wkDekqgi9MezBXU.roa
File: fhbLd6H6l086wkDekqgi9MezBXU.roa (raw, json)
Hash identifier: Pot7nkrmyxegIrTrxDp0qjkLA8/FVh/ytb7VH0/WU+w=
Subject key identifier: 7E:16:CB:77:A1:FA:97:4F:3A:C2:40:DE:92:A8:22:F4:C7:B3:05:75
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0635666B43695F1EC94DB0A36F433C514
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fhbLd6H6l086wkDekqgi9MezBXU.roa
Signing time: Wed 02 Sep 2026 18:16:41 +0000
ROA not before: Wed 02 Sep 2026 18:16:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218955
IP address blocks: 31.58.213.0/24 maxlen: 24
31.59.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:56:66:b4:36:95:f1:ec:94:db:0a:36:f4:33:c5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 2 18:16:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e16cb77a1fa974f3ac240de92a822f4c7b30575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:9c:4a:75:42:a6:ef:7c:5b:f1:0c:a2:9c:
56:f8:7a:a5:ce:68:b4:b3:f8:58:4b:ca:04:62:2a:
11:1d:3d:b7:3e:c4:2c:e5:1c:fd:50:6e:32:58:87:
0b:59:d8:70:19:5d:32:14:cc:b0:f3:a5:9d:97:39:
a9:64:db:c9:ce:85:bd:9e:2f:bf:a5:26:fe:ec:6e:
40:91:70:da:e5:be:e0:fa:9e:5e:de:7f:25:cb:3b:
02:c9:c0:ca:41:c6:92:c7:0b:86:32:a0:41:2c:e6:
2f:45:a2:9f:f7:9e:8a:14:16:40:45:14:40:62:dd:
76:e3:64:3b:44:89:c7:8e:c6:6a:82:86:a9:a3:60:
62:a2:f1:71:2c:9d:64:b8:bd:7c:04:06:18:ed:e8:
c3:78:b8:dc:01:bc:a7:17:50:2a:d3:27:54:c1:57:
8b:c6:6f:29:e8:6c:0c:d1:81:62:15:21:0a:2d:14:
48:c5:6c:cc:d4:08:f2:f9:45:c5:dc:75:05:43:02:
b0:7a:ba:2a:c9:17:5c:64:5f:c6:c5:0d:41:59:25:
b9:e5:69:f7:40:9d:be:1d:cb:ff:8c:a6:f2:13:83:
f9:35:98:38:d5:f4:73:eb:53:ca:f9:d2:97:a8:97:
ad:b9:2f:61:50:6d:93:ca:d7:8a:4d:b1:7d:91:f4:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:16:CB:77:A1:FA:97:4F:3A:C2:40:DE:92:A8:22:F4:C7:B3:05:75
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fhbLd6H6l086wkDekqgi9MezBXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.213.0/24
31.59.215.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:da:d0:0e:06:ed:35:cd:72:0b:ce:e8:2c:c8:aa:8b:99:1b:
9d:4f:78:fe:d2:f7:75:cb:82:c0:76:ca:c0:94:10:0d:14:da:
a6:ef:19:e8:cb:44:da:8a:1c:01:5f:a0:e4:89:11:fa:97:2e:
68:19:d8:46:bc:4e:40:fb:5d:a7:f8:6d:55:ad:14:9e:80:3d:
9f:82:c6:78:79:46:1d:31:c9:b5:05:b8:be:53:33:33:e5:ca:
91:0a:85:0f:46:14:03:23:e6:95:17:0c:75:5e:cb:11:e4:46:
e2:4b:a8:dd:64:fa:93:53:d2:1c:57:7e:00:40:99:6d:cd:12:
d0:72:d7:38:61:18:ab:2a:fb:e0:cf:bd:e7:20:7d:94:27:d7:
1f:8c:34:78:4f:9a:cb:35:e7:4a:78:1e:41:f8:1c:16:bd:af:
da:9c:29:8a:d2:95:67:a5:15:40:5c:48:c1:43:99:ef:36:3a:
d5:94:72:4d:89:d0:94:72:b2:20:8d:71:33:03:12:71:0f:70:
96:88:5f:2c:fc:47:d4:c7:6c:04:48:14:90:0e:26:6b:61:85:
7d:32:28:96:6a:e1:89:99:06:0a:69:ed:59:37:cd:91:4e:d0:
06:48:62:ad:c7:f0:4e:57:7a:a3:b6:48:bb:cc:98:a8:ab:6f:
0c:dc:c7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:30 2026 by rpki-client