Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kFjqhluUl9EDUn8vVnwvNOaHdWw.roa
File: kFjqhluUl9EDUn8vVnwvNOaHdWw.roa (raw, json)
Hash identifier: 5NZOQJnUSusZ+zy1VXkefik3bU61po4eZIoq7dplykQ=
Subject key identifier: 90:58:EA:86:5B:94:97:D1:03:52:7F:2F:56:7C:2F:34:E6:87:75:6C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FDDD32DCE846853E19C84662711F06263
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kFjqhluUl9EDUn8vVnwvNOaHdWw.roa
Signing time: Fri 07 Aug 2026 20:03:52 +0000
ROA not before: Fri 07 Aug 2026 20:03:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209630
IP address blocks: 31.57.208.0/24 maxlen: 24
217.60.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:d3:2d:ce:84:68:53:e1:9c:84:66:27:11:f0:62:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 7 20:03:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9058ea865b9497d103527f2f567c2f34e687756c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c1:6e:a4:b4:db:0b:b2:9a:aa:7f:1a:bd:14:
fc:7d:78:7e:1f:1a:a9:22:5a:52:61:62:b4:61:f2:
ed:b7:f7:56:db:6e:35:ef:fd:b6:61:99:84:30:f4:
63:08:4c:9f:65:20:c7:0c:b1:34:f4:7c:04:91:7d:
7b:81:fc:d7:99:61:33:a8:3c:74:ed:50:71:f4:c6:
70:e8:77:54:77:13:da:4a:71:aa:46:68:03:75:5c:
b7:44:11:8e:e5:b7:99:80:d0:e3:3e:66:68:57:db:
a6:58:b8:5b:e6:aa:08:05:b5:b7:e1:82:2d:9c:a3:
9c:a1:15:9b:85:3d:c7:d2:bf:cd:fe:da:b6:05:cd:
6b:4f:76:58:72:af:7f:22:4b:b1:5d:0f:88:37:da:
52:dc:a0:87:10:b5:50:80:e0:83:56:39:2b:0f:a3:
0b:e8:3c:88:3c:51:f0:b8:07:2f:43:39:64:63:d0:
c8:be:13:03:4d:2c:2d:39:22:bd:42:d9:be:af:41:
59:92:f3:6d:83:98:94:f5:67:7d:68:44:c8:2d:13:
81:bd:21:c2:2b:41:a1:af:52:f9:ef:c7:f7:a3:1f:
c6:bb:1d:ba:8a:e5:82:25:f3:dd:2d:fa:9d:2e:31:
4c:10:04:65:ab:cf:1a:7c:0a:cb:53:05:b6:a1:5c:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:58:EA:86:5B:94:97:D1:03:52:7F:2F:56:7C:2F:34:E6:87:75:6C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kFjqhluUl9EDUn8vVnwvNOaHdWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.208.0/24
217.60.180.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:7d:5a:08:04:4c:31:c5:72:6d:97:e7:d8:50:bb:66:30:46:
f2:7f:5d:75:88:89:e7:8b:cb:ff:75:5b:b3:27:1b:ee:e6:de:
33:df:ed:ab:9d:2a:22:d8:90:f8:2d:bb:e1:6b:50:8d:54:6d:
b2:b7:20:b4:28:a2:f4:26:b7:57:e0:e2:d6:15:27:81:38:be:
ef:e5:e0:c6:be:36:39:d4:8f:9f:7f:2a:66:8f:fb:b4:75:aa:
89:7a:63:70:49:22:14:ac:fe:7e:b0:be:ad:ff:44:48:9a:e8:
b0:54:16:20:37:a9:f5:50:72:0c:23:1e:c4:c8:53:f1:05:ac:
95:fc:14:f1:6f:06:af:41:cd:21:fc:ac:a6:8b:6b:25:93:00:
ac:c4:62:4b:bd:53:94:09:f2:ad:f8:f0:61:35:f8:3d:af:1e:
23:f5:16:9c:21:83:fe:b7:b1:69:a7:02:1a:26:ec:73:ef:9f:
9d:98:f9:59:20:a5:a6:c4:e1:11:45:1e:ed:d6:51:ed:cb:77:
b9:a5:ad:e6:41:b0:f7:ad:c9:a8:27:61:b8:07:da:39:d9:10:
0e:b5:68:19:0f:93:69:c6:78:76:d6:df:b6:e8:70:f3:18:cb:
27:6a:34:87:de:dd:b5:aa:65:65:07:0e:bb:a4:72:d7:7f:d4:
2d:bc:8a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 20:10:02 2026 by rpki-client