Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Nuf4JpaEJLg9ZPIecXkh8h9d1Uo.roa
File: Nuf4JpaEJLg9ZPIecXkh8h9d1Uo.roa (raw, json)
Hash identifier: OVcCrRQudG751OA9jBhfYkeQ0a3w+YJcaCzmjtVv/M0=
Subject key identifier: 36:E7:F8:26:96:84:24:B8:3D:64:F2:1E:71:79:21:F2:1F:5D:D5:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0420B8FF01D7FBABBED7FC1DE411F5E16
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Nuf4JpaEJLg9ZPIecXkh8h9d1Uo.roa
Signing time: Thu 27 Aug 2026 07:07:29 +0000
ROA not before: Thu 27 Aug 2026 07:07:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211507
IP address blocks: 31.59.148.0/24 maxlen: 24
217.60.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:0b:8f:f0:1d:7f:ba:bb:ed:7f:c1:de:41:1f:5e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 27 07:07:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36e7f826968424b83d64f21e717921f21f5dd54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:63:e9:b4:9f:7e:21:65:a9:53:e1:10:66:
64:78:8b:00:79:ce:b7:2b:9c:70:65:9b:aa:48:78:
31:58:d4:cb:f6:bd:85:f6:08:d8:9a:7a:13:18:dd:
bc:bc:89:bf:0e:d1:70:ff:d1:0a:c1:04:88:cf:9a:
e9:bc:12:4c:b3:96:26:0f:67:47:f9:a1:ab:b8:a9:
3f:bc:16:b0:60:0c:e4:14:1f:4b:fb:bd:94:df:19:
aa:ad:a9:1a:11:31:cf:b1:40:10:b1:24:8a:1e:e7:
04:9d:a7:44:42:ac:d5:77:43:ce:4b:40:ca:ff:52:
8b:15:5b:c5:ad:87:4c:6a:13:6c:25:20:af:f6:98:
86:82:95:e3:68:eb:0b:e4:f3:b7:a1:15:69:1a:19:
eb:ce:ee:8e:81:64:0b:db:f4:e8:54:bc:e7:b6:52:
86:15:ab:89:c1:ae:5f:4a:44:1d:6f:49:6b:9a:fa:
9a:58:07:73:d3:ea:27:f8:48:ef:cf:4d:fb:6a:56:
6d:b4:76:9f:0a:35:33:95:a8:d8:f7:94:51:a1:5b:
65:8f:cf:83:3b:5c:02:c7:31:7c:b7:17:3d:69:c5:
25:71:82:dc:45:84:b9:67:42:bb:84:38:66:26:34:
70:71:b0:50:59:8c:9a:15:ce:1d:95:17:48:7a:10:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E7:F8:26:96:84:24:B8:3D:64:F2:1E:71:79:21:F2:1F:5D:D5:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Nuf4JpaEJLg9ZPIecXkh8h9d1Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.148.0/24
217.60.185.0/24
Signature Algorithm: sha256WithRSAEncryption
22:aa:f8:57:58:8a:65:e9:b6:7b:ed:0f:bb:5b:ec:44:b5:bc:
73:0f:fd:29:00:64:f4:47:91:2a:f9:59:2e:3c:77:19:e6:00:
9d:ac:3d:0f:eb:75:1c:ba:39:c3:d5:10:91:97:76:f6:90:0b:
5a:da:7b:5a:3e:fa:f8:84:68:e2:3e:37:9b:ca:22:20:50:4f:
a2:bf:98:29:2e:27:fb:df:20:af:9e:f6:01:fb:52:d7:be:35:
e1:82:08:80:9f:0f:b9:be:f0:9f:4c:4b:f2:4b:63:2a:c7:52:
39:f3:c6:44:4b:41:48:aa:a6:05:39:86:b2:dd:7f:66:c1:ce:
ad:08:8e:99:d4:6c:c9:31:24:3c:14:8a:e4:c5:75:0f:bc:83:
c9:8c:3b:78:b1:8b:f2:2a:93:c9:e3:d5:d5:d8:ae:0a:a9:25:
5c:24:e2:01:fb:70:7d:a4:4a:a9:00:61:8b:fd:41:b9:e6:5f:
4f:5e:3f:ec:05:42:49:1c:bf:dc:07:b8:50:82:13:6c:c9:66:
b6:0d:f5:39:ed:80:fa:ec:af:7c:d6:3c:94:17:5e:03:b1:14:
9f:1f:5a:4b:32:41:88:7f:a6:fb:0c:c5:0d:08:fb:0c:8f:bd:
79:8d:ee:08:95:b4:ea:c0:66:69:c6:4b:13:c5:88:67:29:a1:
7e:24:52:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:21 2026 by rpki-client