Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oOV3OszPd5K-88RC_uVmZ2MaTnY.roa
File: oOV3OszPd5K-88RC_uVmZ2MaTnY.roa (raw, json)
Hash identifier: 6n0gHcIT7JLTTJeZKISDqT0MB2RVQBqn7bhKWMGtvPg=
Subject key identifier: A0:E5:77:3A:CC:CF:77:92:BE:F3:C4:42:FE:E5:66:67:63:1A:4E:76
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A14B55795D9856BE686E658A2BD5BBE255
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oOV3OszPd5K-88RC_uVmZ2MaTnY.roa
Signing time: Sat 17 Oct 2026 19:27:35 +0000
ROA not before: Sat 17 Oct 2026 19:27:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 31.58.131.0/24 maxlen: 24
31.58.139.0/24 maxlen: 24
31.58.169.0/24 maxlen: 24
31.58.221.0/24 maxlen: 24
31.58.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:55:79:5d:98:56:be:68:6e:65:8a:2b:d5:bb:e2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 17 19:27:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0e5773acccf7792bef3c442fee56667631a4e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:f3:82:63:3b:e9:53:e6:94:e6:7e:40:c3:
a5:b6:0f:2b:d3:1b:a0:85:66:dc:ba:93:ca:d0:51:
b4:59:f5:0f:69:1c:cc:65:d7:77:98:bb:9f:94:bd:
f2:ed:ea:68:be:73:7d:35:8a:5a:88:21:2d:71:19:
ac:84:73:dc:22:a1:c4:e2:eb:ae:5a:a6:dc:6a:f0:
e4:6a:34:07:b3:34:75:5c:9f:ee:12:fb:b4:94:b2:
f0:b8:41:ea:3c:a8:bc:46:ed:d0:55:fd:1d:f9:4b:
a6:ab:eb:a9:69:7d:17:71:9f:be:3c:3a:bc:cb:6a:
b5:92:a5:cd:57:0a:3a:7a:60:5f:98:a3:49:0b:9f:
c9:0d:ba:5e:58:74:5e:9b:55:c2:2f:69:d7:37:47:
01:be:88:4b:65:48:54:17:45:41:4b:af:47:35:a9:
d1:cc:53:87:59:ee:aa:77:36:e8:9d:66:61:88:26:
55:b1:c0:98:0c:c0:d3:48:e4:4d:99:08:26:80:fe:
91:5c:c7:f8:b3:93:0c:1f:74:c4:13:04:12:6b:8a:
18:77:b4:47:76:b4:be:26:41:3f:22:e1:26:84:d9:
44:af:33:4c:62:c2:96:8e:b0:b0:62:db:e2:32:f3:
89:04:d0:84:32:72:04:c3:f5:91:9a:9b:b4:41:1b:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E5:77:3A:CC:CF:77:92:BE:F3:C4:42:FE:E5:66:67:63:1A:4E:76
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oOV3OszPd5K-88RC_uVmZ2MaTnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.131.0/24
31.58.139.0/24
31.58.169.0/24
31.58.221.0-31.58.222.255
Signature Algorithm: sha256WithRSAEncryption
71:67:80:a3:d0:78:62:f0:b7:01:df:de:d1:6b:3e:86:34:b0:
06:8c:fd:79:2d:6f:d5:ba:5f:8c:91:3b:8e:c8:b0:65:b7:e1:
79:1e:07:60:20:0e:54:80:72:1c:d5:72:5e:52:f3:c9:70:d4:
c7:6d:e6:76:91:5d:ae:7a:21:f3:cb:5a:05:97:2e:18:f3:16:
a2:65:c5:52:17:4d:46:c3:9a:e7:67:8c:dc:9c:5a:8e:4f:3d:
91:71:de:83:32:88:85:1d:ed:0c:0f:57:70:44:a5:c2:39:4e:
33:a6:bb:54:61:9f:80:82:df:73:bd:cb:c4:ae:43:1b:e2:7d:
88:ec:0d:e7:95:36:f4:e6:6f:28:62:ad:c5:cc:fe:4d:0b:92:
6b:55:0a:e9:ef:29:f1:b5:2a:08:a6:1b:a1:5c:eb:4a:b8:f0:
b3:2d:f4:38:e8:8a:a4:d2:55:26:61:90:96:9d:0e:6d:f5:07:
26:9d:80:cc:2c:0d:99:b2:d7:51:ec:b6:77:50:22:26:87:f5:
9e:ee:b1:31:2a:7f:d1:90:7a:8e:dd:aa:7d:d8:db:b7:58:31:
45:e8:d1:8d:24:99:e8:c4:95:5c:1e:c7:b0:c1:28:d8:b7:b1:
e8:87:d6:c0:5e:2e:5e:32:97:33:08:e5:f0:1f:4f:19:23:ff:
6a:2a:5a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:34:56 2026 by rpki-client