Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/siHji8Cmj2yNV8nzuF_pWtl_oFs.roa
File: siHji8Cmj2yNV8nzuF_pWtl_oFs.roa (raw, json)
Hash identifier: 4Ytni/e6Th2SbQbFLa8co0AVGvZqkif0ct2twn9v6EU=
Subject key identifier: B2:21:E3:8B:C0:A6:8F:6C:8D:57:C9:F3:B8:5F:E9:5A:D9:7F:A0:5B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A019F65662E4CD9D463EA10EA0728EBA38
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/siHji8Cmj2yNV8nzuF_pWtl_oFs.roa
Signing time: Wed 19 Aug 2026 12:19:29 +0000
ROA not before: Wed 19 Aug 2026 12:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200912
IP address blocks: 31.58.216.0/24 maxlen: 24
217.60.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:f6:56:62:e4:cd:9d:46:3e:a1:0e:a0:72:8e:ba:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 19 12:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b221e38bc0a68f6c8d57c9f3b85fe95ad97fa05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:b3:40:ba:2d:ba:7f:67:cb:e0:10:80:26:
d3:42:71:ce:77:df:a8:ad:02:6c:73:13:f0:71:f7:
13:0c:91:0d:75:07:2d:a3:cc:3d:fe:cf:c6:36:56:
2f:82:30:68:38:f2:f1:0a:a8:3e:da:6b:7f:31:44:
68:98:2f:bd:08:f7:0f:3e:65:fa:98:20:03:7d:b5:
88:8a:1b:e6:5c:7f:6d:4f:6f:5a:82:a2:8b:a1:52:
c8:b1:b4:31:d3:f2:d5:ef:4a:a0:75:e3:38:e1:fb:
08:59:5f:a2:18:bc:b3:43:f5:6f:6c:c8:46:13:59:
ae:fc:7a:ce:e9:7c:d9:ae:2f:30:bb:a9:ae:d5:b1:
a7:fe:0d:c1:46:90:e0:c5:96:20:82:44:12:9a:1c:
a8:3c:58:2e:1f:e9:de:da:0d:f6:4a:e0:c5:ba:4c:
43:ff:61:6d:ae:35:13:0c:90:16:aa:c2:eb:0f:80:
4f:da:d5:bd:6f:4a:8a:68:6a:e4:7c:d0:4a:fe:f9:
bd:6d:6e:c8:f0:23:7c:3a:b1:fa:2c:dc:ae:68:a9:
d0:9a:98:a4:e4:b1:d5:9e:da:e0:5f:c7:9d:28:76:
5d:83:20:17:8f:b3:2c:eb:5d:6b:e4:f9:c9:81:e4:
3f:16:48:aa:34:f8:07:06:c3:17:f8:dd:0f:77:47:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:E3:8B:C0:A6:8F:6C:8D:57:C9:F3:B8:5F:E9:5A:D9:7F:A0:5B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/siHji8Cmj2yNV8nzuF_pWtl_oFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.216.0/24
217.60.237.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b3:2c:4e:8e:d5:80:56:b5:38:87:c9:0d:a8:ed:92:21:43:
ae:e6:73:16:5e:b5:4a:b4:f4:b4:aa:d3:05:9d:f0:5a:bc:f3:
88:6b:00:9c:41:b0:fc:4f:fc:39:78:4c:1b:63:27:be:9e:e0:
46:93:ef:03:5e:8e:6f:f0:81:6f:2a:93:7a:5a:42:36:14:73:
90:a3:77:f5:95:d9:d7:8f:28:3e:b3:5b:d0:5b:0c:00:aa:eb:
b1:38:44:2f:37:99:e9:2c:ee:44:cc:2c:de:cf:d5:f4:81:cc:
a2:cb:f7:bc:81:70:7f:8e:d8:35:7b:e2:21:b3:e8:96:d3:ad:
33:e7:c6:2b:e9:84:6b:be:07:df:11:67:d4:33:39:3c:75:05:
3d:46:8e:c0:01:73:48:c3:5e:1d:69:e7:07:3a:45:53:d9:d0:
8f:cf:01:f1:f5:44:3a:49:29:e0:74:3e:9b:19:41:ed:de:1c:
0d:b0:a6:e1:8b:15:36:e3:cf:21:4c:f7:39:30:8b:28:ed:dc:
44:78:18:df:22:ac:9a:6e:f7:88:46:f0:e9:22:4a:5f:1b:50:
c2:24:17:f4:ec:a8:b5:e0:a9:8e:3c:71:c8:2d:cf:e2:12:91:
84:be:ba:74:a0:d5:eb:5e:f8:c1:0e:e7:2a:01:25:20:e9:29:
66:29:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 06:12:19 2026 by rpki-client