Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OTy6KiwM4heaoSWJOAapiFu9qrc.roa
File: OTy6KiwM4heaoSWJOAapiFu9qrc.roa (raw, json)
Hash identifier: VL5oM42dyIPs4c3qDN9GfKET9f7f3jvveds7aSX75gI=
Subject key identifier: 39:3C:BA:2A:2C:0C:E2:17:9A:A1:25:89:38:06:A9:88:5B:BD:AA:B7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E780B6E2C2003CC3316110239B0B3B8C7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OTy6KiwM4heaoSWJOAapiFu9qrc.roa
Signing time: Sat 30 May 2026 08:41:15 +0000
ROA not before: Sat 30 May 2026 08:41:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 31.58.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:78:0b:6e:2c:20:03:cc:33:16:11:02:39:b0:b3:b8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 30 08:41:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=393cba2a2c0ce2179aa125893806a9885bbdaab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:4f:de:a8:7b:85:54:4d:00:ce:ce:25:3a:
62:60:fb:d5:58:45:f7:af:a1:8b:4f:8c:25:54:ed:
56:e1:f8:c6:38:c2:02:eb:c7:a1:db:10:f8:73:43:
89:a3:86:ba:23:4d:a2:75:d4:62:67:5d:8d:69:00:
ad:54:9f:c3:4c:93:92:b7:bc:5f:63:0b:73:ac:ae:
ac:21:99:4f:78:7e:8e:ab:55:d5:21:e9:83:af:05:
f3:80:31:c0:c2:85:f6:56:39:e2:17:df:1e:58:86:
9d:3d:47:ce:19:6c:c1:8f:b7:7a:19:a3:f3:b1:45:
85:55:4d:57:e4:d4:e4:cd:48:c6:df:72:5d:fb:48:
8f:41:dc:31:e9:c8:8a:b2:ea:18:3e:b9:f5:87:13:
70:00:0c:45:cb:60:cf:c3:be:66:74:94:b2:66:2f:
22:ac:54:f2:f3:b9:6c:a0:81:ba:b0:40:47:d7:73:
a2:41:59:3f:87:b2:4d:6a:17:59:e2:db:2a:ee:ff:
c2:37:ed:ee:5b:10:18:8a:a4:60:dc:4f:5c:af:e8:
7a:0d:81:19:e3:7d:f8:ae:0c:77:ba:b8:1c:f4:28:
34:78:3e:df:98:e4:07:1c:99:3c:03:56:1d:b3:e3:
9b:6c:0d:2e:c4:e2:8d:b9:9d:1f:9d:12:9e:b2:96:
16:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3C:BA:2A:2C:0C:E2:17:9A:A1:25:89:38:06:A9:88:5B:BD:AA:B7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OTy6KiwM4heaoSWJOAapiFu9qrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.144.0/24
Signature Algorithm: sha256WithRSAEncryption
00:3d:94:b2:8d:b2:1f:09:46:b1:42:4e:01:f2:aa:bd:1b:ce:
e3:74:20:1a:db:22:66:12:62:98:ea:c4:d6:fc:97:63:b5:e9:
07:3b:99:89:81:44:bc:5e:e8:f8:51:2f:9a:4f:17:83:46:dc:
76:68:d0:19:ea:54:b5:fb:36:c2:fd:56:2e:19:95:48:75:ec:
ff:63:2d:36:b7:44:59:07:f9:f9:14:d3:92:fe:93:ce:d7:68:
76:3c:31:27:e8:dc:6d:d2:9a:05:ef:a8:c6:a2:d3:67:f0:db:
b8:21:07:73:7e:e4:55:78:30:d2:c1:c1:7b:45:81:a4:c9:c5:
b4:ae:a0:82:6e:57:12:72:80:60:d0:24:23:86:55:78:82:7e:
da:d9:10:f5:7e:43:52:12:11:41:5a:3b:05:da:3c:4c:b3:76:
27:79:9a:d6:92:58:52:ae:f0:68:64:8c:5c:14:8f:01:7d:32:
ff:31:7d:4a:10:fc:bf:f8:d1:b0:f3:f5:cc:7d:36:72:6b:00:
a2:fd:74:b9:f9:bb:de:59:2e:76:bc:62:8a:06:31:aa:fa:21:
a9:0c:3d:76:b8:12:b8:28:88:d5:8c:5e:b5:ff:b7:de:c4:d4:
91:e4:0f:0c:89:7d:53:e8:96:15:08:bb:39:48:f3:7a:89:4f:
53:57:5f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:15 2026 by rpki-client