Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AIup6JlUz3T3_H74zai70bQT1Io.roa
File: AIup6JlUz3T3_H74zai70bQT1Io.roa (raw, json)
Hash identifier: AaQ/vLLEIJwLw7BC58IYCbLxPOdsjLaTn9DgtG2nLIY=
Subject key identifier: 00:8B:A9:E8:99:54:CF:74:F7:FC:7E:F8:CD:A8:BB:D1:B4:13:D4:8A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EBCB1DA3F63A89C935183BE04E60C2C30
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AIup6JlUz3T3_H74zai70bQT1Io.roa
Signing time: Fri 12 Jun 2026 16:37:12 +0000
ROA not before: Fri 12 Jun 2026 16:37:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207343
IP address blocks: 31.59.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:b1:da:3f:63:a8:9c:93:51:83:be:04:e6:0c:2c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 12 16:37:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=008ba9e89954cf74f7fc7ef8cda8bbd1b413d48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:e5:58:81:07:4c:84:36:d6:e7:54:17:02:
7e:7d:33:54:32:4c:b6:95:4a:8f:df:c4:81:33:a7:
0d:76:a1:48:c9:c3:4c:a3:de:5e:d2:f1:98:b5:11:
ce:07:25:a6:00:fa:71:84:4b:4b:0b:45:56:e2:24:
0c:a0:45:4c:f9:94:9a:06:0b:9b:60:0e:8e:ad:2a:
4d:cb:66:88:8b:d1:54:58:0c:73:f4:f4:68:72:f2:
15:27:fc:46:ca:a7:c0:1e:27:bd:f7:dc:1b:56:da:
ec:7a:fd:28:b0:e4:e8:51:16:3e:96:32:5f:86:8e:
83:19:9e:d6:f7:c0:d7:10:02:47:7a:d7:16:9a:0f:
59:cd:43:34:04:d2:97:ce:e0:d2:45:42:2c:f3:1b:
95:3e:07:66:5b:22:72:c8:a7:94:9b:a0:10:78:70:
8d:12:c9:41:a8:27:10:d3:26:0d:81:6c:fc:68:b1:
56:02:74:2d:da:7d:95:da:40:05:5c:d7:7a:16:94:
be:44:ad:75:3d:37:bc:69:49:dd:a9:19:0d:d5:0a:
da:5a:10:eb:32:a8:a3:ff:6d:47:a7:29:2f:ad:6c:
a7:cc:bf:7f:18:45:1a:f2:08:84:ea:3c:82:63:97:
d4:e9:dd:55:eb:da:a9:69:15:8d:99:c3:65:9e:1b:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8B:A9:E8:99:54:CF:74:F7:FC:7E:F8:CD:A8:BB:D1:B4:13:D4:8A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AIup6JlUz3T3_H74zai70bQT1Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.53.0/24
Signature Algorithm: sha256WithRSAEncryption
42:8f:14:14:de:b1:68:84:42:1a:67:9b:cf:fb:75:55:34:16:
6d:36:5f:91:77:cf:da:9c:7d:5a:b6:8b:a5:3d:89:8e:a5:e1:
2a:c6:e7:89:48:3c:16:63:11:91:90:00:df:b3:c6:a5:04:1b:
2f:17:4b:19:63:c2:4a:4d:75:33:e0:23:57:ed:f4:c8:93:61:
d5:7b:51:ad:38:0b:c3:72:39:8e:4e:fe:e9:fa:fd:a0:3c:50:
dd:f8:e6:c2:8b:70:93:ee:dd:84:41:ba:2e:c5:5a:a8:86:f3:
86:b5:0d:a1:1f:43:0b:37:fc:d4:ae:b3:66:4c:5c:d0:6b:28:
94:ab:75:51:93:f5:97:a7:43:e4:b3:9e:f4:8e:3b:6f:de:09:
05:98:f0:95:6d:ba:fd:36:47:9c:1e:03:7f:2d:99:86:97:0a:
ec:fd:a4:5a:2d:71:41:f8:df:ee:12:b4:29:97:eb:c1:87:10:
55:1f:1e:5a:cb:e7:4e:74:13:3d:9e:c4:f3:c7:fa:c4:91:6c:
0b:59:54:7c:df:b2:f8:cc:6e:9f:fc:ed:25:a1:00:53:44:10:
37:17:98:5e:1a:90:dd:2e:8a:36:a3:00:4c:dc:bc:a7:19:11:
54:4e:2f:fd:a7:45:df:1e:83:f7:ad:ca:7f:78:9c:5f:ca:3d:
37:48:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:32 2026 by rpki-client