Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rjvuiZa7FQIKBV6lk8pZhuqWC2c.roa
File: rjvuiZa7FQIKBV6lk8pZhuqWC2c.roa (raw, json)
Hash identifier: 43hAQiHB1Opg0rnITLb2CjeGsEhg3YpTDArB/eUrre8=
Subject key identifier: AE:3B:EE:89:96:BB:15:02:0A:05:5E:A5:93:CA:59:86:EA:96:0B:67
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CBA8C615B3E3D5FD9AA0B92A76A956077
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rjvuiZa7FQIKBV6lk8pZhuqWC2c.roa
Signing time: Wed 04 Mar 2026 20:31:28 +0000
ROA not before: Wed 04 Mar 2026 20:31:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44714
IP address blocks: 31.58.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 19:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:8c:61:5b:3e:3d:5f:d9:aa:0b:92:a7:6a:95:60:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 4 20:31:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae3bee8996bb15020a055ea593ca5986ea960b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e4:30:35:b1:54:66:6e:c3:19:f9:0b:71:b9:
dc:8d:b8:32:a8:cb:e2:72:ee:70:7c:85:3f:e0:56:
c9:c2:af:7e:37:82:ed:f1:81:ef:32:f3:67:eb:a2:
35:aa:98:dd:50:de:95:af:7c:cb:dd:27:59:eb:14:
6a:75:1d:43:a5:84:b5:72:4a:41:09:8b:a1:9d:bf:
83:a4:46:dd:74:5f:6a:2f:c1:d2:50:d2:02:5c:14:
a1:47:a0:7c:3e:99:bf:25:27:2f:4e:be:cf:7e:52:
b8:30:19:4b:8a:a0:5c:ed:18:2d:86:8b:e9:09:15:
1c:45:4c:65:2c:7f:1d:ff:cf:21:ba:fa:86:0b:67:
b3:d3:16:34:05:8e:51:6a:a4:79:bf:d5:95:b3:5a:
3e:4d:67:56:60:4b:a2:d0:c1:9d:ea:0d:02:45:d8:
ed:10:72:f9:f8:66:64:e4:95:9f:b1:77:f4:b4:5a:
49:ad:c7:c6:d1:d6:46:85:ca:bd:29:f1:f0:a2:f2:
f4:51:63:99:3d:e7:1b:6a:25:9e:0c:3c:ba:e4:20:
05:5f:9a:27:83:68:9e:51:d4:e7:cb:10:9d:10:16:
a6:44:0c:ee:ca:4f:d7:42:e3:ef:51:ff:1c:f6:b1:
60:f2:38:cd:38:41:96:ae:06:f6:3c:79:a6:dd:c4:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3B:EE:89:96:BB:15:02:0A:05:5E:A5:93:CA:59:86:EA:96:0B:67
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rjvuiZa7FQIKBV6lk8pZhuqWC2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.245.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1e:19:61:01:bb:2b:6f:80:6c:18:89:97:28:3c:81:e7:2d:
70:68:81:b4:37:95:9e:03:db:1f:63:6b:af:d7:03:91:99:c9:
e9:31:34:d8:0f:5d:9e:37:72:e6:9b:03:f4:eb:62:68:c1:b4:
61:9a:85:17:27:88:9b:71:a0:84:31:7c:86:d5:63:bd:ce:ef:
a7:87:8c:37:93:9f:52:99:3a:14:ce:d0:cd:95:16:1a:83:e6:
46:76:a9:5d:0f:af:e1:94:11:40:36:8e:c0:48:60:b2:9d:1d:
a6:dc:6e:50:17:27:e9:8d:4a:1b:a0:b2:91:83:67:c6:d9:f1:
6a:8d:bc:01:c0:b6:a5:de:62:a3:5f:06:c4:02:bf:ba:78:c1:
46:54:c8:f7:00:22:da:c5:47:3b:c1:42:43:e5:49:9a:99:a9:
a7:fd:e0:cc:97:a3:d8:f4:23:30:a0:c8:56:88:5f:f6:1c:36:
9a:6d:6c:1c:1b:44:cb:08:f7:69:0d:e9:9e:cc:5c:3c:6b:d9:
1d:2b:c9:df:0e:44:e3:92:2a:2b:f6:26:50:14:3b:19:c4:aa:
99:80:31:29:32:9a:38:ce:a4:c2:ab:02:46:2a:42:20:78:24:
39:a0:08:86:51:6a:8f:7f:c0:43:d7:19:3f:3b:47:d1:2c:d6:
d5:46:b5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 05:55:01 2026 by rpki-client