Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/F1oa5NvdJ-xmInsK9d62Ets2sr4.roa
File: F1oa5NvdJ-xmInsK9d62Ets2sr4.roa (raw, json)
Hash identifier: QBk2mnAoewXrn0LuXaoRkJH1DnxgLdlv9EBVDfXeR2U=
Subject key identifier: 17:5A:1A:E4:DB:DD:27:EC:66:22:7B:0A:F5:DE:B6:12:DB:36:B2:BE
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019FA95CBCC4D99DF0EE4FC2CAC3C099D51D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/F1oa5NvdJ-xmInsK9d62Ets2sr4.roa
Signing time: Tue 28 Jul 2026 15:34:14 +0000
ROA not before: Tue 28 Jul 2026 15:34:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274903
IP address blocks: 31.15.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:5c:bc:c4:d9:9d:f0:ee:4f:c2:ca:c3:c0:99:d5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 28 15:34:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=175a1ae4dbdd27ec66227b0af5deb612db36b2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:f2:4c:51:19:69:64:ab:b5:ad:44:9d:a7:
9f:99:c9:ca:a7:ac:1c:20:ea:28:35:b8:a8:f8:a1:
74:98:b1:82:18:18:2c:97:6a:14:9b:52:d6:6b:68:
b1:43:46:08:4c:9e:0d:6e:48:7f:09:8c:fb:e8:e6:
78:37:79:95:61:4e:b0:b3:8d:20:18:61:16:8e:44:
44:13:5e:4f:dc:69:74:51:96:e8:b1:27:40:f7:eb:
0d:8e:21:43:fc:ff:60:a4:6b:c7:9e:01:90:a4:12:
a1:6b:cd:d5:a4:a5:f5:ff:cc:7d:da:98:41:83:7a:
5f:05:4d:8d:75:6f:73:ca:46:79:7d:7c:3a:64:6b:
42:c1:c0:9f:c7:85:36:40:6a:64:18:c0:1d:30:f7:
05:b8:b7:fb:4b:95:18:11:58:3c:df:74:8b:1c:33:
f6:40:b0:5f:19:9a:6d:ee:59:42:68:db:95:34:33:
b5:b3:b2:91:6e:44:00:e4:99:2b:9e:15:86:d5:d4:
24:7a:61:6a:15:f1:df:12:d4:45:b6:47:c9:ea:2b:
aa:ac:b1:a6:79:f3:98:74:cf:36:02:fe:05:da:38:
ab:ca:62:fd:c9:63:03:f7:04:d3:af:e6:f8:9a:2e:
c6:1f:11:14:3c:2e:08:56:58:0f:db:3c:fb:bc:cc:
93:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5A:1A:E4:DB:DD:27:EC:66:22:7B:0A:F5:DE:B6:12:DB:36:B2:BE
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/F1oa5NvdJ-xmInsK9d62Ets2sr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.1.0/24
Signature Algorithm: sha256WithRSAEncryption
32:2f:6a:8c:bc:d6:26:00:97:b8:80:11:ac:17:09:41:0f:af:
f2:50:e7:fe:c4:ff:28:f4:75:6d:48:30:33:79:7d:60:44:88:
c0:55:48:ab:cf:df:5c:68:b9:ed:c8:75:50:86:14:d4:4e:05:
83:a1:a0:d0:d7:ac:b8:94:1a:df:9a:40:2f:5e:d7:35:bf:d4:
2b:79:f5:80:80:8a:5a:f0:c0:a8:0b:09:d2:f3:85:1b:eb:52:
66:e1:97:28:e9:76:eb:c4:f5:a6:ab:b6:27:96:0c:88:92:52:
90:2d:bc:3a:8f:26:91:06:67:6b:c7:e4:d4:50:55:c4:56:15:
6c:6c:c6:a7:d8:87:a1:f3:2d:75:71:68:29:32:9d:0a:16:1a:
5a:98:61:64:7c:52:cb:ed:8d:2d:73:03:c4:6c:7d:02:85:c3:
0d:20:94:bd:21:e4:b7:b2:9b:94:df:1b:bb:f1:f8:8c:ba:43:
e5:e9:b6:7b:47:19:83:da:37:c8:29:27:a4:53:71:e7:9c:e0:
df:67:09:34:f6:f1:07:b6:af:4a:85:70:75:55:3c:36:e1:b3:
49:27:0e:c7:22:01:1f:48:e8:2a:c8:dc:2f:74:6a:f8:a3:b7:
fb:e9:3f:93:a5:60:c3:ae:66:14:b5:fb:10:40:b1:16:27:f6:
9c:fc:a8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:19 2026 by rpki-client