Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/O1ce9vN9g6EZnTxoys-LNQh2X64.roa
File: O1ce9vN9g6EZnTxoys-LNQh2X64.roa (raw, json)
Hash identifier: o6fC1CthJUFaf2sBm8J+lO4X5l+74z5sUo7LbZGYjHE=
Subject key identifier: 3B:57:1E:F6:F3:7D:83:A1:19:9D:3C:68:CA:CF:8B:35:08:76:5F:AE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0919A5FAAFA8F5CEBEA2E2169D040F278
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/O1ce9vN9g6EZnTxoys-LNQh2X64.roa
Signing time: Fri 11 Sep 2026 17:53:28 +0000
ROA not before: Fri 11 Sep 2026 17:53:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201861
IP address blocks: 31.59.165.0/24 maxlen: 24
94.183.156.0/24 maxlen: 24
94.183.193.0/24 maxlen: 24
94.183.199.0/24 maxlen: 24
94.183.212.0/24 maxlen: 24
94.183.213.0/24 maxlen: 24
217.60.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:9a:5f:aa:fa:8f:5c:eb:ea:2e:21:69:d0:40:f2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 11 17:53:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b571ef6f37d83a1199d3c68cacf8b3508765fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:49:4c:c2:c9:c8:5b:77:65:05:c8:71:de:
f2:e6:5e:dc:22:9f:dc:b5:e2:60:ae:99:d0:35:ba:
fe:9a:06:63:7e:5c:c0:0a:5a:c0:48:a6:54:fe:63:
bd:fc:1e:19:1c:8c:61:5e:83:b8:27:c6:dc:73:fc:
2b:7c:d1:eb:42:86:30:e1:d2:6e:ab:2f:b3:b5:98:
36:63:b5:a0:4e:78:a0:bb:5e:c3:c2:fd:73:e5:20:
40:37:8d:a5:46:b5:79:da:43:b0:f3:05:d6:c1:ef:
6e:6a:07:5f:de:df:0c:2a:d4:aa:2f:b1:ce:ef:0c:
e7:6a:dd:29:df:34:a2:4e:f4:ef:8d:6f:01:28:48:
59:b7:b4:a3:81:4c:4c:a4:9d:2d:59:3a:82:8e:a2:
13:ef:17:f4:ae:1e:ce:68:a0:f3:9d:32:72:2c:87:
82:3b:00:82:c5:cc:7d:82:3b:6f:ab:c0:f0:55:ba:
5a:55:0e:61:5a:78:1e:79:d7:7c:7b:36:f3:d6:2f:
a3:42:ac:15:f4:19:76:dc:f5:76:15:21:61:e3:19:
95:eb:0d:02:5a:b0:79:f4:88:bd:61:cc:17:88:ec:
05:8f:d8:c1:e8:21:09:5f:90:74:7e:1a:cd:06:60:
0a:9f:73:42:68:0c:f4:4e:88:f4:58:7a:c4:a0:f9:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:57:1E:F6:F3:7D:83:A1:19:9D:3C:68:CA:CF:8B:35:08:76:5F:AE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/O1ce9vN9g6EZnTxoys-LNQh2X64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.165.0/24
94.183.156.0/24
94.183.193.0/24
94.183.199.0/24
94.183.212.0/23
217.60.70.0/24
Signature Algorithm: sha256WithRSAEncryption
65:8a:58:c9:3e:9b:8b:a8:e1:76:26:62:b8:76:71:66:b6:b5:
21:51:e6:fa:e9:10:4b:0a:42:18:99:3f:d2:66:a1:82:12:eb:
ae:65:a8:1b:b5:cf:f8:d4:14:89:63:01:88:96:b2:1a:0b:d5:
46:fd:0a:90:3d:84:ba:04:2c:40:3a:68:9d:1c:3b:55:c0:0b:
76:9b:77:4b:6d:6f:83:d5:d0:6e:69:48:9a:67:2a:ba:f8:9d:
18:a1:47:6e:ab:a6:ee:78:80:cd:ca:7c:0a:63:5f:93:44:a4:
aa:2f:33:24:cd:0d:3e:cf:33:ef:2f:96:5d:ef:84:54:8d:8f:
83:94:6f:87:3d:79:02:94:6d:44:50:99:b4:8c:9c:ec:77:0e:
ca:9d:7b:89:19:2a:5e:94:93:c0:ca:db:e8:f5:b8:1f:0d:b4:
4e:c8:26:39:b9:65:5e:83:f1:2c:0e:c8:03:bc:b0:82:c6:95:
ec:f5:f3:79:55:e9:71:61:13:b8:bf:01:65:82:38:b3:e2:4c:
c5:e9:b7:11:6a:2d:3c:32:7a:66:18:c4:5a:16:ba:5f:63:66:
86:1b:be:96:6d:f5:11:5a:ae:3a:00:1d:87:f6:74:cd:e2:34:
f6:9c:be:90:5e:76:1b:bf:3a:9e:a5:ca:e9:46:cc:32:f6:83:
99:c9:8b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:06:49 2026 by rpki-client