Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WX9bLcsNuKICPMrD1rvoM1lTVDU.roa
File: WX9bLcsNuKICPMrD1rvoM1lTVDU.roa (raw, json)
Hash identifier: ZueLhu2AeMlPYKazYkzCp4nX28LwSKu6xG3wl+j47EA=
Subject key identifier: 59:7F:5B:2D:CB:0D:B8:A2:02:3C:CA:C3:D6:BB:E8:33:59:53:54:35
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FA80AED1596F8E5382527BD1F7B0CAFB2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WX9bLcsNuKICPMrD1rvoM1lTVDU.roa
Signing time: Tue 28 Jul 2026 09:25:16 +0000
ROA not before: Tue 28 Jul 2026 09:25:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19793
IP address blocks: 31.56.16.0/22 maxlen: 24
31.57.16.0/21 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:0a:ed:15:96:f8:e5:38:25:27:bd:1f:7b:0c:af:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 28 09:25:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=597f5b2dcb0db8a2023ccac3d6bbe83359535435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:c9:37:06:c5:7f:c7:0f:e2:51:0f:ab:b2:
fb:b7:68:96:0a:cd:ee:ee:06:84:66:27:61:7c:ad:
68:92:72:59:83:3e:ae:46:05:bc:f7:79:e0:44:ed:
f1:bd:e4:4e:49:79:b8:b1:c5:f3:22:d3:6c:89:64:
d8:bf:e8:c8:97:7c:b4:20:cb:b9:0f:41:6c:21:f7:
1c:c4:79:6d:17:aa:7a:0b:dd:15:ce:6e:7e:94:44:
c0:89:00:70:72:62:0d:a2:f7:f2:2d:31:09:79:72:
f7:45:74:eb:68:e8:65:7a:3a:b4:4a:e3:aa:55:04:
58:ac:15:2b:fc:e5:d6:5d:2a:d7:d2:f0:2c:af:55:
e8:ec:27:44:28:42:ce:57:8e:b0:79:bd:de:0b:d7:
cc:68:29:05:db:3f:ef:a3:b5:a3:59:5e:99:d5:02:
64:0c:f6:18:cd:a9:59:60:a9:02:91:2c:ec:a5:29:
42:e1:ca:76:38:f6:99:d9:94:bc:32:69:01:dd:98:
53:1a:ab:16:5c:89:d2:da:94:a6:57:e4:f9:c6:e1:
b1:b1:c1:01:35:af:bc:5a:fa:9e:95:50:ca:63:0d:
4b:a0:d9:81:c3:30:e3:30:8a:a1:64:9b:a7:7d:48:
8b:fc:30:e8:05:c7:4d:d6:b8:95:b3:d2:29:14:e2:
c1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:5B:2D:CB:0D:B8:A2:02:3C:CA:C3:D6:BB:E8:33:59:53:54:35
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WX9bLcsNuKICPMrD1rvoM1lTVDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/22
31.57.16.0/21
31.59.188.0-31.59.195.255
31.59.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:5e:8a:f1:f8:e1:58:7f:d3:81:73:43:ff:1d:0f:2e:d7:94:
28:83:e6:28:fa:b4:89:30:9a:d1:4d:61:3b:89:74:96:5a:be:
31:2a:9a:a4:e4:6b:71:f3:d1:ff:91:2d:6e:dc:5d:10:d5:0a:
55:36:06:53:12:24:d8:c4:f0:46:ee:26:d1:aa:8f:dc:8b:cb:
d7:ae:ef:06:19:62:f6:01:56:68:fa:3a:cf:c2:60:84:91:57:
a9:f5:13:40:48:b6:c6:17:13:89:de:71:20:d5:c5:9d:b2:30:
5b:84:8c:56:66:cb:e5:3b:8b:cb:ae:22:02:60:4c:ab:4f:b3:
ca:c4:4e:da:d0:99:5c:d2:a7:ab:99:ce:6c:d9:c7:11:78:7d:
e8:85:3d:bc:22:5a:aa:64:4d:b0:86:47:57:3b:a9:bd:47:ed:
2b:07:44:57:c3:fa:35:56:2d:d8:00:74:c0:57:5a:2a:6a:b3:
49:5a:cc:31:9f:90:45:94:53:91:a9:85:fa:b0:6d:7f:7a:dc:
41:22:39:47:f8:26:c7:13:2b:cf:3e:53:c6:ee:dc:ec:70:27:
0e:b6:73:90:26:4d:0e:c5:99:a6:de:1e:6b:d9:4c:d2:1b:48:
f7:f2:a4:0c:f6:14:02:0c:e0:fd:a1:93:33:04:9f:17:d4:57:
7c:b7:9a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:43 2026 by rpki-client