Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qWKbFdDmxD6rWp0p-kRdrue68Xs.roa
File: qWKbFdDmxD6rWp0p-kRdrue68Xs.roa (raw, json)
Hash identifier: fgfWIJvDobUg/NjfKqBOouHwfgcMdJThR53VDkIPruc=
Subject key identifier: A9:62:9B:15:D0:E6:C4:3E:AB:5A:9D:29:FA:44:5D:AE:E7:BA:F1:7B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F037FD9E32976EE165688DF98AAB24AAB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qWKbFdDmxD6rWp0p-kRdrue68Xs.roa
Signing time: Fri 26 Jun 2026 10:35:38 +0000
ROA not before: Fri 26 Jun 2026 10:35:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202051
IP address blocks: 31.57.142.0/24 maxlen: 24
31.58.44.0/22 maxlen: 24
31.58.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:7f:d9:e3:29:76:ee:16:56:88:df:98:aa:b2:4a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 26 10:35:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9629b15d0e6c43eab5a9d29fa445daee7baf17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:68:bf:de:d7:04:9a:f4:d2:b1:5b:fe:22:
69:9d:7b:ea:ec:1f:8a:64:fe:57:3a:90:c6:f2:f0:
e8:5c:f6:25:eb:49:f6:e8:b4:6e:d9:b5:e8:29:44:
6f:f1:c0:f2:ab:6a:92:3f:d9:62:23:69:d3:f1:46:
0a:d8:c4:43:8d:2d:6f:fd:9a:b5:79:71:e6:b6:1a:
a9:b5:f3:03:eb:c5:fc:9f:ac:d3:88:b0:aa:e4:54:
38:ed:56:f4:96:db:61:f0:c7:e8:2b:aa:22:4c:38:
2f:fa:f4:10:87:8f:97:2f:25:ca:fc:bd:87:09:31:
9e:59:8b:d3:de:23:10:e9:bc:3a:39:ae:6b:0a:db:
6b:05:3c:58:07:b0:71:81:73:3d:86:0f:f7:09:b6:
b1:8e:96:97:ce:1e:fb:1a:39:63:44:6d:4f:46:00:
3c:cf:21:db:9d:35:b2:ee:06:a5:39:08:21:0d:f2:
4f:19:1e:61:51:42:2b:4f:be:ba:82:73:2e:d7:64:
92:c5:f1:be:2c:fd:d7:91:82:5a:54:6b:90:47:3c:
e2:73:4f:d1:83:53:a3:73:b4:5a:d0:57:a6:47:8b:
ec:9c:d4:4b:14:72:28:a8:e6:13:7b:16:c0:c1:a5:
15:62:16:d8:3f:dc:cc:a6:7f:3d:78:a6:6a:3a:38:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:62:9B:15:D0:E6:C4:3E:AB:5A:9D:29:FA:44:5D:AE:E7:BA:F1:7B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qWKbFdDmxD6rWp0p-kRdrue68Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.142.0/24
31.58.44.0/22
Signature Algorithm: sha256WithRSAEncryption
72:17:9b:48:8f:fb:44:38:ea:4e:93:50:6d:9e:d6:22:18:a2:
8a:5d:92:20:df:c2:26:2a:81:3a:e8:c6:f9:a4:57:d8:c6:32:
b2:79:22:6e:ec:17:61:d5:62:66:18:29:5f:84:06:ca:a9:8e:
de:36:4f:31:4b:6f:d6:b6:34:39:21:df:c3:30:1b:a7:67:01:
ec:06:6c:e6:5b:79:6f:85:9d:4c:7b:34:9d:03:68:01:65:e2:
7f:4a:e0:31:7e:ee:19:66:a7:e5:24:64:82:46:7d:ee:62:91:
9c:bf:ce:02:a2:b0:16:ff:37:33:a3:d7:8d:3e:50:5c:d1:4b:
db:80:70:9d:19:39:43:2a:60:92:03:0b:b8:d9:9f:c6:63:bd:
8c:af:8e:c9:ee:bf:02:5c:2d:ff:da:64:cc:d0:4c:8f:7c:43:
b0:7b:c6:b0:f9:5a:df:28:4a:3a:50:6e:b0:80:66:ec:b4:28:
05:e2:e0:76:59:78:b4:0d:fc:92:ed:b2:ed:e8:05:55:1e:19:
a8:b6:d9:7c:01:b9:6e:68:e9:ef:ea:75:64:dd:e9:f4:53:c0:
fe:03:45:20:a0:64:5c:47:c9:a6:5e:3b:d5:e7:1b:32:62:9f:
6b:1d:4b:ba:1f:a9:3a:ae:d3:72:e6:de:02:fc:40:de:3a:5e:
1f:e3:27:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 17:03:13 2026 by rpki-client