Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EdwMpxEShWEVMZ_8wCXATCJqdTU.roa
File: EdwMpxEShWEVMZ_8wCXATCJqdTU.roa (raw, json)
Hash identifier: 1TT9j31ltDfFZYA3yA68XJ028FgZc9Th5d4OhJETelc=
Subject key identifier: 11:DC:0C:A7:11:12:85:61:15:31:9F:FC:C0:25:C0:4C:22:6A:75:35
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D592ABF3F71211F913ED66994F0CEB9E4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EdwMpxEShWEVMZ_8wCXATCJqdTU.roa
Signing time: Sat 04 Apr 2026 15:44:26 +0000
ROA not before: Sat 04 Apr 2026 15:44:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402268
IP address blocks: 31.57.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:59:2a:bf:3f:71:21:1f:91:3e:d6:69:94:f0:ce:b9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 4 15:44:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11dc0ca71112856115319ffcc025c04c226a7535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:7c:ce:7a:df:d6:79:e7:30:a9:9e:68:78:
42:93:7b:48:a6:72:4a:5e:cc:80:69:7e:a8:6c:7f:
60:63:75:cc:6e:23:c6:c1:4c:10:4a:25:0e:ff:e3:
77:20:8d:d7:54:68:29:c3:34:53:07:20:b0:c6:a4:
14:01:6e:84:ce:53:ae:78:c8:8b:0f:3b:2c:68:04:
d2:43:11:b8:04:65:28:22:f9:39:a5:b8:73:81:c6:
fe:da:fc:2d:bc:e9:33:41:bd:56:61:d0:bd:2f:76:
8e:fc:04:95:e4:ad:04:a7:4d:1b:ca:a3:52:d8:1e:
b7:4e:2e:6a:e0:6f:ee:94:84:7d:9b:c1:02:3f:08:
fe:c7:43:a4:aa:f0:03:98:b1:e7:f2:4c:c7:ef:2f:
ff:3b:28:64:66:48:19:2a:aa:2e:8f:49:d4:63:df:
b2:66:0a:b5:d1:b5:17:bf:72:22:cc:4d:09:59:c3:
72:e1:c3:e4:6e:59:92:e9:68:75:a9:39:d3:0c:22:
70:f4:10:70:4c:9a:a5:30:7d:d2:6b:dc:be:03:46:
93:60:47:1e:c3:33:5e:81:fe:c1:a1:4b:19:27:6c:
16:59:29:e4:b1:3b:25:7c:33:9c:96:38:42:ea:93:
11:71:5d:bb:e1:26:19:2c:fd:56:82:90:61:81:ac:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DC:0C:A7:11:12:85:61:15:31:9F:FC:C0:25:C0:4C:22:6A:75:35
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EdwMpxEShWEVMZ_8wCXATCJqdTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.238.0/24
Signature Algorithm: sha256WithRSAEncryption
74:2f:c6:91:7c:a0:89:61:33:87:d5:f4:e1:23:0c:ea:97:ba:
6f:59:93:c5:32:b8:7c:b7:bb:89:41:b3:d8:11:fe:04:4f:e9:
a7:41:51:88:8c:c8:ef:f0:b3:b3:cc:2b:5d:25:84:dc:f9:b1:
75:83:3f:5d:bb:8f:86:8e:c1:db:81:20:56:76:42:10:0b:0c:
17:8d:05:a0:be:63:35:8f:73:bb:ca:10:d2:48:01:30:8f:0f:
6e:68:df:99:4b:42:1f:a3:57:01:5e:65:fb:62:16:58:30:6d:
99:f2:81:ff:2d:59:93:a6:16:11:d9:7d:11:90:04:1b:fc:33:
23:bf:b8:82:e8:a0:80:60:6a:9a:ef:d2:69:82:95:24:97:4d:
9b:84:ec:5e:bb:f2:ac:83:1b:19:6d:4e:77:6b:89:b0:c6:86:
63:4a:53:cd:03:08:09:f7:ba:94:b5:21:be:f3:ae:be:ac:de:
77:44:d4:26:1c:6f:75:01:33:6b:34:cd:5a:e8:cf:9b:bd:5c:
6a:13:80:62:77:9a:bb:ce:e4:07:d5:75:60:94:78:4c:be:b5:
63:17:55:2a:d0:55:88:e9:64:b6:fb:fa:bb:f6:5d:91:c6:1d:
03:d5:1a:f6:1c:b9:2c:6f:b1:da:29:1f:3b:3b:d5:6b:7c:41:
81:0b:42:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:35:40 2026 by rpki-client