Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3US4jyhz9Q45Qnp15-flcf60P-o.roa
File: 3US4jyhz9Q45Qnp15-flcf60P-o.roa (raw, json)
Hash identifier: tlwXILvKVzEIv8fMY/E5eUr63hSokDFtDoLQ8G421YU=
Subject key identifier: DD:44:B8:8F:28:73:F5:0E:39:42:7A:75:E7:E7:E5:71:FE:B4:3F:EA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0C4D8AB5440DA2680346A5A65F7AC818F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3US4jyhz9Q45Qnp15-flcf60P-o.roa
Signing time: Mon 21 Sep 2026 16:42:08 +0000
ROA not before: Mon 21 Sep 2026 16:42:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219048
IP address blocks: 31.59.176.0/24 maxlen: 24
31.59.177.0/24 maxlen: 24
31.59.181.0/24 maxlen: 24
31.59.183.0/24 maxlen: 24
217.60.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:d8:ab:54:40:da:26:80:34:6a:5a:65:f7:ac:81:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 21 16:42:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd44b88f2873f50e39427a75e7e7e571feb43fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:54:e5:6c:48:51:3c:5d:d4:4f:e5:45:c7:
42:92:9b:4a:0e:3d:ce:24:a1:c8:21:26:5a:52:fe:
9d:29:3f:cd:b8:96:f5:d2:e4:60:b5:ef:4f:f6:bf:
bd:b5:be:f9:91:ac:f3:aa:92:91:6f:66:c3:68:04:
51:fa:76:e4:e2:cd:f2:cb:62:9a:cc:86:14:50:6c:
28:49:db:13:b3:e1:0e:83:46:d3:ed:20:5e:73:a3:
cc:a0:e6:86:30:f6:1c:df:22:8d:f9:22:26:e1:a5:
2d:c0:f0:4b:db:55:b0:e2:08:d4:55:0d:d1:62:32:
5f:30:a1:ef:7d:d4:43:e5:3d:0c:ef:f1:4e:93:32:
e8:ca:2b:d4:90:2c:9f:e6:5e:56:ed:46:20:54:b3:
c8:f9:9e:9c:9e:d3:a6:27:fe:eb:89:22:34:6c:8c:
b6:58:ee:bc:ee:00:e1:dc:64:f8:1f:c1:c4:c2:80:
b8:a7:13:bb:b6:da:97:63:02:17:90:27:29:0d:f5:
4a:0d:cd:c3:ea:68:18:f9:55:91:8b:13:7a:7a:e6:
98:cc:85:a9:40:12:18:9d:fa:77:df:82:f5:d5:0e:
d8:60:1c:a6:53:8f:37:5b:3d:5c:2e:4f:b3:c1:0b:
86:b4:9e:26:5d:7b:c7:36:82:d7:a9:e7:9e:16:6f:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:44:B8:8F:28:73:F5:0E:39:42:7A:75:E7:E7:E5:71:FE:B4:3F:EA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3US4jyhz9Q45Qnp15-flcf60P-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.176.0/23
31.59.181.0/24
31.59.183.0/24
217.60.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:a1:be:4d:44:b1:6f:d5:84:b4:da:e0:5a:6e:b3:48:00:e6:
8d:a2:fa:68:51:00:ab:99:8e:46:10:f5:5d:9d:10:26:e0:74:
5b:ca:83:fa:48:4f:12:d7:b2:47:b9:e0:8f:28:c0:39:de:67:
e0:df:00:d8:69:94:9a:73:08:bb:c4:c8:09:6e:80:9d:ef:b0:
81:f7:0c:ba:3d:84:ce:07:df:f6:d2:a5:8a:df:ed:63:da:ca:
81:68:d2:7d:f0:72:e2:c4:9d:5c:b2:e4:f2:87:98:0f:e7:89:
53:d9:5f:e5:b9:25:30:8c:d4:09:6c:9c:87:00:c9:0e:2d:d8:
b5:a5:31:a9:de:7a:e3:12:e4:3d:08:07:56:73:71:a3:15:a2:
f3:f6:b5:95:42:c7:96:f2:1c:78:64:30:e3:da:53:51:5c:42:
dd:a9:77:c1:44:5d:21:89:2a:9d:11:90:34:dc:dc:68:99:a7:
64:65:bc:24:d7:ea:b7:46:d4:7d:03:c5:c5:96:90:f3:d9:78:
b1:5f:fa:52:8b:a2:c4:fc:cd:43:88:be:61:98:bd:dd:d3:3a:
28:b0:18:3d:38:f6:47:2d:ca:be:46:aa:0b:58:55:78:ca:f0:
c3:c3:73:2c:21:e5:d7:99:d5:6c:42:b9:4c:9d:8a:14:7d:0c:
34:86:8c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:47:10 2026 by rpki-client