Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nC7GWI7EgMaUA50n-2MJtesP_q4.roa
File: nC7GWI7EgMaUA50n-2MJtesP_q4.roa (raw, json)
Hash identifier: W0oVhqhVsivz49DFBZ8ZlRSVBPoAkIk4nvNxd1VPjzM=
Subject key identifier: 9C:2E:C6:58:8E:C4:80:C6:94:03:9D:27:FB:63:09:B5:EB:0F:FE:AE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FE0255AF6293793A4D05A6F5AFA27AAA8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nC7GWI7EgMaUA50n-2MJtesP_q4.roa
Signing time: Sat 08 Aug 2026 06:52:52 +0000
ROA not before: Sat 08 Aug 2026 06:52:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210542
IP address blocks: 31.57.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:25:5a:f6:29:37:93:a4:d0:5a:6f:5a:fa:27:aa:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 8 06:52:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c2ec6588ec480c694039d27fb6309b5eb0ffeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:f4:71:69:0d:cf:fe:f4:26:0c:ce:59:fa:
59:78:92:ad:49:7f:dc:95:c3:fb:be:20:77:37:65:
75:74:9b:72:c7:17:ed:72:6c:8f:24:14:51:ba:67:
1f:27:89:7b:ee:49:62:9a:69:7a:9e:96:fa:61:31:
4c:71:80:cd:84:c2:71:da:65:19:6f:b8:26:ce:28:
06:73:60:66:e6:75:15:b3:0c:6b:50:18:69:f6:df:
f7:b4:a9:52:7d:b3:00:c7:b3:30:b4:fc:80:72:19:
e5:f9:4e:87:7a:01:b4:f9:5e:de:d2:9d:c0:03:39:
9f:b0:91:e0:3b:75:87:0d:b5:1c:03:73:00:bb:8b:
d4:35:20:55:94:f7:c4:f5:a9:41:a5:51:c0:e6:e5:
e6:d3:b9:0f:ab:de:6f:05:ea:93:97:35:15:29:a2:
2e:77:53:22:88:e3:55:88:d8:b0:6c:0c:08:e1:ac:
39:18:04:d0:a3:07:97:e3:de:cf:72:82:62:4f:45:
a8:48:7e:74:ed:80:4a:24:c3:1f:91:41:e0:d2:42:
7c:f6:09:90:07:75:01:34:52:f0:2e:09:7e:e8:10:
e4:e4:e3:a3:4a:2f:f6:79:cc:75:71:6a:0b:35:b1:
c4:e1:8d:c5:12:8a:d2:df:1a:53:43:8f:c1:c7:a1:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2E:C6:58:8E:C4:80:C6:94:03:9D:27:FB:63:09:B5:EB:0F:FE:AE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nC7GWI7EgMaUA50n-2MJtesP_q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.202.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b8:72:b1:68:e4:2d:41:4b:0d:78:a7:76:1b:04:d9:e3:6b:
02:f8:45:72:d9:cb:71:3d:11:c5:6e:a3:a6:19:77:24:f7:ab:
ff:bf:3b:a4:0b:34:02:4e:ee:75:7d:8a:f2:0c:64:16:d4:9f:
de:e8:82:77:70:40:41:2f:1e:35:e2:04:cd:4b:2b:d2:0b:4a:
8a:2e:d9:31:db:09:eb:2e:da:8c:1f:47:09:f4:ec:4d:e8:b0:
34:8b:4e:17:f1:b4:00:b2:1b:d1:50:50:96:ee:fa:9b:7e:fe:
e8:4f:5c:68:a5:3a:64:85:79:ba:f9:2c:bd:67:43:8b:a5:a0:
30:a6:6f:dc:05:0c:c5:f7:2e:aa:22:39:e0:1b:7a:16:cd:0a:
d9:84:a2:f9:3c:5a:96:25:70:f5:5f:e8:7d:3a:79:02:14:cd:
b3:5a:a7:5d:0d:fd:3f:5a:43:48:f9:b6:17:7a:cb:f1:24:63:
76:41:5b:e4:a7:9b:3f:ec:8f:08:87:46:2b:8c:77:85:88:9a:
ec:5c:fd:de:5b:77:5d:74:d5:c1:ee:6b:11:01:d4:ef:cd:71:
9c:10:e9:16:58:d9:85:26:fd:04:88:58:81:2a:05:d9:88:f2:
19:0e:e3:e1:79:77:bb:0c:52:28:f4:fc:63:35:64:39:52:d5:
ae:2b:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:59 2026 by rpki-client