Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PkrEQ7pk9twQZgKyukmi9xM1kFc.roa
File: PkrEQ7pk9twQZgKyukmi9xM1kFc.roa (raw, json)
Hash identifier: wwbGZRjYZNtpREKiHqwQqKD7SbxfHxNv04FxsgLh9xI=
Subject key identifier: 3E:4A:C4:43:BA:64:F6:DC:10:66:02:B2:BA:49:A2:F7:13:35:90:57
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D8F8C2C72157544163CA7DCC54ED736E9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PkrEQ7pk9twQZgKyukmi9xM1kFc.roa
Signing time: Wed 15 Apr 2026 05:10:21 +0000
ROA not before: Wed 15 Apr 2026 05:10:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210457
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8f:8c:2c:72:15:75:44:16:3c:a7:dc:c5:4e:d7:36:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 15 05:10:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e4ac443ba64f6dc106602b2ba49a2f713359057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:93:85:14:f0:01:5e:8b:00:e9:d1:2b:ee:
c8:43:9e:53:5a:46:c9:42:36:85:04:a5:2f:08:4b:
60:c2:d3:82:eb:d3:dd:2e:63:d1:6c:9a:7f:a3:17:
7a:12:38:8d:26:18:52:c3:45:ae:72:bf:06:36:b3:
fb:72:b0:85:96:95:8f:c7:8f:56:df:8a:9b:bf:b6:
d7:77:ff:fd:57:7a:ef:3f:9e:23:51:27:b9:ec:a5:
57:82:2c:4a:11:4f:0a:4e:18:44:07:65:c5:c7:7d:
74:15:21:42:08:ea:8f:79:6a:e4:09:05:fb:26:8e:
c9:68:0e:31:63:05:b7:6c:0c:ef:a1:54:5a:c8:49:
e2:2c:b7:65:de:e7:8a:e7:2c:b6:ab:9a:35:3d:be:
26:3a:af:6e:35:ee:18:4b:fa:2c:94:60:21:32:1a:
b2:b0:99:1b:a4:1a:2e:4f:f7:4a:7a:e0:0a:1b:31:
d0:60:ab:63:79:db:53:a3:0e:63:1c:25:59:fa:d2:
ca:df:f6:1d:c0:71:c2:23:ae:6e:c8:ee:0d:26:c8:
fb:ed:a7:21:bc:c3:1b:ec:03:9b:cd:30:28:10:d1:
52:8a:43:ea:ea:71:19:bd:2a:e7:76:0f:31:3e:2e:
da:e0:35:03:6d:32:b1:da:24:17:46:e0:e0:57:54:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4A:C4:43:BA:64:F6:DC:10:66:02:B2:BA:49:A2:F7:13:35:90:57
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PkrEQ7pk9twQZgKyukmi9xM1kFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.36.0/24
31.59.39.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b2:e5:e6:0d:87:ce:53:c4:da:bf:25:e2:95:94:c3:bc:dd:
15:61:c7:e9:f8:ae:76:a7:c2:c3:e8:91:70:d8:a4:a4:05:a9:
5a:91:36:9e:f2:c3:5a:4f:58:09:a9:f5:51:4e:e4:5c:df:4d:
f6:ad:48:25:88:72:7d:37:38:55:25:ab:93:ce:1a:e0:4e:f0:
46:68:b3:27:0a:b3:f9:5c:5a:c7:66:fe:37:30:d4:ce:26:a8:
d9:4f:74:52:ec:78:4e:36:2f:ee:16:21:5e:af:d9:89:e5:f5:
43:a2:33:6f:70:f3:8a:a3:93:fe:78:7e:c1:ac:36:a2:2b:c4:
5f:84:a5:a4:69:cc:e1:42:55:ea:27:dd:79:09:a4:b0:a6:c9:
e0:74:b8:7e:44:b4:29:72:82:42:1c:76:bd:06:50:05:00:b5:
55:5b:4a:9a:d3:45:8d:29:10:51:a2:9f:da:7e:1a:7a:ba:aa:
c1:f0:b7:09:7f:d3:57:d4:91:74:37:b1:a0:a4:db:c0:21:a3:
87:01:a9:8e:b5:36:9d:a3:c8:5f:a2:e9:2c:0e:31:d4:b5:e7:
89:17:ed:5d:f2:18:0c:b4:2a:c7:b2:a8:ae:9a:dc:92:a4:3d:
ec:38:d0:66:70:21:ca:76:0a:f2:5c:a9:18:81:72:ad:f2:8c:
66:f5:83:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:41 2026 by rpki-client