Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Oe5D-YNjs7ItzGZbthbgejWvokI.roa
File: Oe5D-YNjs7ItzGZbthbgejWvokI.roa (raw, json)
Hash identifier: 8/4SKgCAEylEj5KyJ6475J/+BLgsXytOT7GFyYow4wE=
Subject key identifier: 39:EE:43:F9:83:63:B3:B2:2D:CC:66:5B:B6:16:E0:7A:35:AF:A2:42
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D4D3710FFD5F39E45E9AFCF2CE4875AB0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Oe5D-YNjs7ItzGZbthbgejWvokI.roa
Signing time: Thu 02 Apr 2026 08:02:27 +0000
ROA not before: Thu 02 Apr 2026 08:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 31.56.230.0/24 maxlen: 24
31.58.38.0/24 maxlen: 24
31.58.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4d:37:10:ff:d5:f3:9e:45:e9:af:cf:2c:e4:87:5a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 2 08:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39ee43f98363b3b22dcc665bb616e07a35afa242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:54:2d:da:fa:02:c3:44:60:60:84:27:a3:
44:b5:7a:24:cd:37:0b:cd:2e:04:36:66:00:c3:72:
e2:3a:cc:d5:ff:70:75:49:f0:37:75:f8:13:29:5a:
39:5d:2e:77:f8:34:cc:eb:9a:00:bb:7d:70:21:e9:
c3:4a:30:54:db:7e:68:30:3a:20:c6:bf:80:4d:15:
86:37:66:c8:2f:13:c2:4c:22:0f:c9:18:16:56:b7:
fd:a1:a0:76:9f:75:71:94:1a:64:35:5f:83:47:0c:
58:52:54:8d:75:ca:cb:61:24:86:71:59:3a:62:bb:
8d:78:a1:f7:69:db:b5:69:72:ad:6a:ac:77:07:75:
1c:e9:fc:ff:48:3d:57:d4:9d:80:1d:df:db:84:ec:
fe:ec:7d:1e:66:4d:6e:a2:70:b2:4c:3e:02:c2:5b:
99:06:e2:2f:1f:0f:58:ff:b7:da:76:42:e0:30:a4:
49:6c:0a:3d:41:5f:d3:60:ab:4e:d8:66:a2:f5:13:
f7:70:b8:8e:36:19:69:29:b2:9a:a7:4e:5f:35:08:
fc:e4:8f:25:22:56:20:ab:61:3d:fe:9f:e9:23:80:
52:24:63:f2:9d:a8:85:57:1f:14:4f:a7:88:ef:77:
83:8b:2d:69:a5:e0:00:7f:5c:df:f9:e6:05:79:d5:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EE:43:F9:83:63:B3:B2:2D:CC:66:5B:B6:16:E0:7A:35:AF:A2:42
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Oe5D-YNjs7ItzGZbthbgejWvokI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.230.0/24
31.58.38.0/24
31.58.130.0/24
Signature Algorithm: sha256WithRSAEncryption
40:16:8c:bb:29:6e:5d:72:d2:b4:60:17:6f:c5:86:4c:a8:03:
f0:8b:d5:11:7f:d9:e6:fd:2d:24:2c:2e:fe:ed:32:41:12:d3:
14:d0:c8:c4:57:67:71:a1:94:f9:d5:19:24:2d:c3:35:73:68:
16:7f:22:93:79:bf:5c:78:a9:f0:40:d0:4b:d8:32:16:e5:f2:
98:eb:78:02:7b:94:8e:98:45:96:99:09:0d:9c:ec:21:fe:6c:
af:d4:ad:e9:4d:36:cf:a8:88:57:ef:df:6d:ca:e4:61:26:37:
e7:41:7f:76:80:9a:08:6d:12:f9:e0:77:ee:f1:49:85:d6:4e:
e1:e9:9b:af:b9:2f:fb:7e:ae:d6:14:7f:48:29:5c:96:7a:09:
e3:d3:7c:5c:24:03:de:d4:d1:f3:78:7b:da:ac:d0:eb:f9:cb:
8e:1d:ee:50:c9:a8:d6:2b:2d:cc:6d:75:62:3c:b1:d0:85:44:
01:8d:9f:a6:b0:7e:96:0a:8d:6d:79:97:35:28:8d:c5:3d:cb:
76:8a:7c:4b:f5:99:43:39:0f:af:dd:d9:bd:e0:88:1e:c5:95:
7c:d0:72:ce:96:3b:3c:fb:6f:e6:ae:24:c9:7b:19:5d:c9:dd:
77:1d:a3:03:49:8c:f1:20:f6:60:3e:42:07:d0:e9:fe:92:be:
a6:08:c6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:14 2026 by rpki-client