Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qTVjHBggwMoOiJKDJK8e7Y0OQSI.roa
File: qTVjHBggwMoOiJKDJK8e7Y0OQSI.roa (raw, json)
Hash identifier: YSauQrQaQLdIou1cPkVct3WgC3CiceDeDfN7XPUA5As=
Subject key identifier: A9:35:63:1C:18:20:C0:CA:0E:88:92:83:24:AF:1E:ED:8D:0E:41:22
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0F16BAE77BE5AC572E2053685897F0599
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qTVjHBggwMoOiJKDJK8e7Y0OQSI.roa
Signing time: Wed 30 Sep 2026 08:26:01 +0000
ROA not before: Wed 30 Sep 2026 08:26:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 31.58.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:6b:ae:77:be:5a:c5:72:e2:05:36:85:89:7f:05:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 30 08:26:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a935631c1820c0ca0e88928324af1eed8d0e4122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:fe:24:18:63:d8:78:03:5f:05:d3:40:9a:
9f:56:4a:39:a2:57:c8:be:a0:13:7d:48:4d:ca:22:
60:82:8f:bb:14:3e:fb:c6:68:3e:b9:8c:8a:da:89:
b1:df:a7:a8:5f:8d:97:a0:39:60:59:70:22:2b:74:
5c:1a:83:c0:53:89:e9:1c:f0:11:f1:73:f5:1c:7e:
0f:c9:ef:83:af:76:0c:8b:da:0a:d7:dd:93:47:85:
6b:f0:44:2c:97:53:79:d3:b8:7e:e4:4a:9f:2d:36:
41:d0:b0:54:29:d1:ca:1b:8a:7e:62:d9:18:02:32:
43:58:1d:25:b7:b5:99:91:95:7e:19:c8:95:34:98:
dd:b4:16:ae:99:45:60:a1:a0:60:af:12:3e:42:ca:
e9:24:42:3c:dc:6b:30:2a:6a:67:b2:b0:7b:49:31:
f9:6d:16:b2:06:14:98:0a:af:a9:63:b3:ec:c4:09:
58:61:b5:71:d7:64:de:93:19:e4:1a:da:8f:c9:3d:
04:09:04:72:9e:86:f7:9e:c9:23:47:b6:93:36:e2:
1d:ac:b2:af:21:4c:e9:2d:80:ba:8a:17:3a:1a:11:
be:b4:d6:60:a4:3f:8b:32:24:ec:83:85:57:73:94:
2c:f9:60:40:53:99:b5:95:23:18:49:a7:ec:0e:14:
04:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:35:63:1C:18:20:C0:CA:0E:88:92:83:24:AF:1E:ED:8D:0E:41:22
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qTVjHBggwMoOiJKDJK8e7Y0OQSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.49.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:88:e1:e5:d0:c5:f1:b1:7d:ef:a4:c1:94:26:f0:26:65:95:
48:6e:f6:ea:17:af:36:94:05:f0:a2:e0:d2:ff:5b:33:8a:bf:
5e:07:a7:c4:c7:5d:4f:16:44:93:ec:55:91:23:4d:06:fd:c3:
23:65:20:a2:21:6a:c0:06:40:0c:b5:6a:f2:5f:82:1d:93:6c:
be:bc:de:48:13:b8:1b:75:d5:44:cf:60:6e:a0:09:f5:c5:23:
d7:b2:f1:80:b9:ee:e9:9b:01:ef:1b:a7:2a:d2:f2:87:0a:7a:
52:a6:0b:9a:54:6c:e9:b4:9b:bd:a9:e8:8f:f0:4d:c1:1f:97:
cc:32:40:c3:d9:80:46:02:91:26:42:28:5c:ab:89:70:82:7b:
e3:61:b0:fe:d4:83:54:88:60:d7:09:2b:0a:5f:b3:f6:af:69:
ff:79:fe:11:d8:e5:9c:01:cc:fa:f6:17:83:91:d2:d1:6a:50:
a5:50:b6:48:74:5a:1f:34:ba:89:0d:f6:00:21:f3:1f:01:2d:
dd:8b:70:da:f5:22:9f:6e:7d:32:12:ae:e8:90:63:74:ac:29:
63:a2:6f:5c:c1:a9:30:e0:aa:1e:3c:c1:68:d0:06:ae:65:64:
8f:fc:9f:5d:84:9a:b4:48:92:40:f1:19:ba:50:41:b5:64:19:
71:66:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:50 2026 by rpki-client