Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W4eQEQx08DQf6JMawIhlg79SEKw.roa
File: W4eQEQx08DQf6JMawIhlg79SEKw.roa (raw, json)
Hash identifier: 6m60zHVIvJjHzL4eQFQm7VU4lw/QRUUYXxiKqlbFEXI=
Subject key identifier: 5B:87:90:11:0C:74:F0:34:1F:E8:93:1A:C0:88:65:83:BF:52:10:AC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A07826C50F28D067DB382084C358B150DF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W4eQEQx08DQf6JMawIhlg79SEKw.roa
Signing time: Sun 06 Sep 2026 19:16:41 +0000
ROA not before: Sun 06 Sep 2026 19:16:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 31.58.183.0/24 maxlen: 24
31.59.162.0/24 maxlen: 24
94.183.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:78:26:c5:0f:28:d0:67:db:38:20:84:c3:58:b1:50:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 6 19:16:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b8790110c74f0341fe8931ac0886583bf5210ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:fc:2d:0f:92:01:97:9b:a9:64:5a:10:71:7c:
5d:e0:60:6f:1b:85:3c:a1:18:e2:af:70:78:0f:ba:
d4:68:d1:36:08:bb:88:a4:52:94:e3:75:c0:b4:a8:
45:88:3c:62:f0:b6:e7:fe:5a:da:7d:66:16:b8:23:
6e:f3:6f:6c:b1:10:48:c4:53:ea:8b:b7:8d:cf:66:
b7:cf:e4:57:95:ca:4c:f7:86:6e:e5:19:2f:de:f4:
ad:37:09:97:b6:1d:3d:0a:a5:e3:00:f0:39:de:31:
6e:4d:21:40:d0:10:b4:40:f3:c3:c0:2b:1e:fc:fe:
0d:d1:86:1a:4e:0b:1d:60:94:7f:ba:98:9d:e1:20:
11:a8:4e:94:0c:7b:9b:66:4b:94:64:94:9b:a5:de:
30:12:49:15:f9:d6:32:41:4f:ed:e0:37:ef:d2:fa:
b8:5c:a5:74:97:c4:f6:d5:9e:b8:84:60:ce:ce:17:
b2:43:66:37:c8:80:d6:93:4d:e2:72:a5:8f:43:af:
d1:6e:ea:ae:be:fd:a2:97:55:40:92:32:7c:02:7a:
02:e4:e7:28:68:77:23:4e:f0:3d:d8:0e:81:09:bd:
f0:a7:f4:a9:c2:3a:b6:03:24:d8:e0:f1:c0:27:2e:
0c:09:56:11:1d:77:f7:b6:fc:13:99:33:bf:3e:8a:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:87:90:11:0C:74:F0:34:1F:E8:93:1A:C0:88:65:83:BF:52:10:AC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W4eQEQx08DQf6JMawIhlg79SEKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.183.0/24
31.59.162.0/24
94.183.229.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:58:78:fc:29:77:a8:af:cb:79:c5:83:06:e2:ba:ed:11:89:
0b:39:c4:2c:a3:f3:9d:7f:2d:b8:74:9c:25:0c:64:2c:73:f3:
46:d3:7d:64:56:3c:0f:01:5e:b8:c2:e9:b3:6a:29:f7:97:29:
cc:d3:ef:c4:c1:81:05:bd:a7:33:e5:ed:c3:9b:f6:96:17:e1:
55:47:cd:5b:bd:5f:b8:23:cb:01:56:05:32:4c:71:9b:7f:c2:
18:ae:8e:b8:27:4a:2e:78:32:b6:ef:12:7f:e2:cd:80:e5:69:
e5:88:19:ca:60:c5:9c:0f:42:90:26:9d:93:c0:ee:63:03:fc:
ce:5a:7c:be:09:a9:a1:91:f2:1f:a3:da:7d:0f:3f:70:0d:8d:
7f:09:e5:b5:32:6b:1b:88:d0:f9:77:62:64:54:2a:80:00:16:
be:eb:a8:27:0e:b0:7d:25:59:a8:fc:a6:07:08:db:f1:87:4c:
51:5b:ea:1d:9a:2b:3a:13:e8:15:c7:31:e2:89:fa:1e:f2:f4:
f4:61:e2:31:25:64:ab:d6:81:f3:f9:10:3f:35:36:9f:dd:df:
17:72:d1:00:94:cf:43:b9:df:bd:17:08:7f:60:ae:e6:ea:49:
53:da:77:b5:05:62:fc:96:11:57:17:9b:c4:20:56:74:04:a4:
e5:51:b4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:36 2026 by rpki-client