Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yY_OyewC9JUbdQ5CgV9XHlQka4k.roa
File: yY_OyewC9JUbdQ5CgV9XHlQka4k.roa (raw, json)
Hash identifier: cQy1hhoLNQ5oh1jr3l8FXCBpp3uEaCLCQEts1fEZdSI=
Subject key identifier: C9:8F:CE:C9:EC:02:F4:95:1B:75:0E:42:81:5F:57:1E:54:24:6B:89
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E26655E3F559D64C60D14D04A1F1DEF27
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yY_OyewC9JUbdQ5CgV9XHlQka4k.roa
Signing time: Thu 14 May 2026 12:10:37 +0000
ROA not before: Thu 14 May 2026 12:10:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51082
IP address blocks: 31.59.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:26:65:5e:3f:55:9d:64:c6:0d:14:d0:4a:1f:1d:ef:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 14 12:10:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c98fcec9ec02f4951b750e42815f571e54246b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:80:e5:fd:7b:64:68:d8:9e:5d:a4:42:1b:
18:d4:f4:3e:dd:d3:40:1f:ee:b2:e8:dc:38:0d:e1:
a3:43:e0:7b:fe:fe:22:05:5b:02:88:78:62:ea:10:
a7:05:66:8e:d8:45:1a:7e:72:f3:97:43:0e:c9:42:
e7:aa:bf:c4:44:d5:66:a4:77:4d:b4:cc:d5:d5:ce:
0e:33:69:e5:d7:de:05:d9:c6:ae:01:42:18:21:7b:
d2:e7:d5:6b:39:9b:5f:88:62:ae:34:9a:7c:2b:b1:
48:bb:5e:9f:e8:44:7b:c5:23:2f:ff:ad:e5:e2:9b:
f4:5b:b7:e0:72:4b:c3:32:73:11:e9:e6:f4:f7:01:
75:20:ba:d3:57:6a:49:94:c4:30:8d:bb:d3:fe:ce:
d5:58:d9:74:7b:a3:85:75:30:da:3a:0d:84:04:86:
01:74:0e:c4:3b:08:40:69:7c:c0:7b:be:43:f1:0b:
84:9e:87:f2:a4:e4:8e:32:4d:f2:b9:41:11:a2:70:
4a:ea:cf:f7:28:2e:88:b0:bc:b5:22:5b:21:76:7e:
e9:09:ca:b0:39:41:72:a5:e7:6f:23:97:11:d8:fa:
ae:ea:b3:56:44:76:0a:10:e4:4f:27:96:96:a2:32:
b2:0f:66:b2:a8:da:62:0f:23:08:cc:eb:b0:03:b8:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8F:CE:C9:EC:02:F4:95:1B:75:0E:42:81:5F:57:1E:54:24:6B:89
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yY_OyewC9JUbdQ5CgV9XHlQka4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.98.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f1:e5:e9:2e:bf:ca:d2:91:78:50:32:61:ec:05:bb:c7:39:
c5:1e:90:bf:1d:69:71:b2:57:07:fd:c3:5e:8e:b5:51:82:eb:
d1:48:0d:2f:72:fd:ea:96:73:22:f3:85:45:4e:b0:0e:dd:aa:
3b:db:ce:fe:51:9b:62:7d:8e:8a:73:95:31:05:80:ee:fe:70:
1d:a2:5b:60:9b:8b:1d:6f:46:11:21:68:19:22:68:83:05:cf:
53:4b:6e:1d:f2:7d:a2:84:45:23:d0:c0:cd:a3:e8:31:92:bb:
b2:5b:e2:b8:9a:0b:34:21:fa:12:a7:d8:dc:37:e5:39:ad:78:
81:c8:c7:68:39:a6:d5:f0:c6:75:34:a7:25:e8:e3:b0:0d:9c:
37:3d:fd:40:60:c1:97:e0:e5:b3:6e:04:1a:f8:aa:92:81:f2:
8b:b7:84:da:ca:e1:c5:bc:e5:c7:72:62:ad:ac:f2:b0:28:7b:
2e:6c:a1:31:ec:aa:54:a7:cc:71:ac:58:c5:cf:d4:9f:0b:64:
0d:2a:c4:0b:50:de:49:2a:e9:0d:8f:0d:03:3a:b7:15:c0:c5:
be:78:62:82:36:82:b4:24:a3:bd:7a:92:15:ff:ff:bd:36:3d:
bb:fd:b9:a6:e8:6a:2e:d9:e6:eb:3a:bf:e6:84:cc:b4:82:33:
b5:45:58:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:56:46 2026 by rpki-client