Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y4tnLBB5-p4M8rBo5rfLGDT0ZqM.roa
File: Y4tnLBB5-p4M8rBo5rfLGDT0ZqM.roa (raw, json)
Hash identifier: Gjg7jkB9WzVErd19eZZv2J/Q0/jJIi/v6CHH5edtzsc=
Subject key identifier: 63:8B:67:2C:10:79:FA:9E:0C:F2:B0:68:E6:B7:CB:18:34:F4:66:A3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0FCAADD0EC768D57B188D8468CA05F560
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y4tnLBB5-p4M8rBo5rfLGDT0ZqM.roa
Signing time: Fri 02 Oct 2026 12:50:51 +0000
ROA not before: Fri 02 Oct 2026 12:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218522
IP address blocks: 31.58.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:aa:dd:0e:c7:68:d5:7b:18:8d:84:68:ca:05:f5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 2 12:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=638b672c1079fa9e0cf2b068e6b7cb1834f466a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:3d:8f:26:6d:48:73:2d:d9:a5:0e:8e:d4:
9a:27:11:21:34:f5:da:c5:ff:7a:09:2a:a1:a6:51:
8c:a7:db:86:ff:c3:5e:a6:60:e6:27:0c:44:74:5c:
5d:66:3a:04:34:11:3d:9a:64:81:73:12:1b:55:87:
d3:4a:4a:0f:b4:7a:fc:1a:54:3b:bf:e0:42:60:31:
aa:fe:45:fe:5d:af:cd:d7:5a:b6:07:ff:d6:75:42:
f7:6f:4a:5f:6e:a7:05:4e:61:8c:a2:b6:e9:68:af:
a7:a1:63:30:e0:8d:03:64:41:45:37:1d:9f:b6:b7:
f6:da:81:34:84:22:43:7b:ac:66:07:05:d4:b4:bc:
6e:87:db:1f:cc:db:bd:01:f9:61:e0:75:c8:42:e0:
ea:5b:75:ef:ae:03:15:38:e8:c8:e6:77:5b:67:e5:
52:04:80:a9:e7:fc:69:f4:43:11:b8:71:e7:cd:a9:
93:83:52:95:18:a8:b5:bb:98:25:15:cc:72:70:57:
e3:17:1e:db:4c:6d:5b:d2:11:98:47:38:c8:53:95:
b5:df:88:bb:d9:63:5f:44:d1:cd:07:be:4a:ab:f0:
af:31:0e:f7:ba:64:6e:bb:54:b2:e2:22:b7:eb:e4:
cd:1e:47:76:4a:85:62:25:fe:99:41:0e:b7:00:0f:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8B:67:2C:10:79:FA:9E:0C:F2:B0:68:E6:B7:CB:18:34:F4:66:A3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y4tnLBB5-p4M8rBo5rfLGDT0ZqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.95.0/24
Signature Algorithm: sha256WithRSAEncryption
72:0e:e4:f6:d5:90:af:0f:2d:d7:2b:03:c7:52:e2:17:1e:95:
db:9d:54:37:1e:6c:c1:df:54:ed:55:13:c8:3b:d2:b0:b6:be:
b5:8e:c9:23:bb:a2:9a:90:2a:59:bc:24:e8:52:d7:79:0e:9b:
32:ee:93:9b:41:06:ea:ec:eb:51:f2:49:23:93:be:93:94:2b:
8b:5b:80:b4:93:fe:61:50:b1:1d:59:bb:2d:6b:61:da:a7:bb:
be:2d:fd:52:63:4b:fd:a6:1f:18:21:4e:29:90:f1:27:7c:7a:
f4:b4:e5:19:1a:76:78:54:ea:b2:11:53:fa:b4:d7:b7:9e:14:
eb:9c:13:8d:ff:6a:73:50:ea:86:c4:34:1a:b3:3a:89:08:61:
8b:a6:fc:20:c4:da:44:16:7e:43:3d:3c:14:84:12:c3:59:ea:
5d:c0:c0:03:c1:c3:a9:8f:6d:06:49:8c:e8:94:88:75:0f:00:
a4:44:50:20:0a:41:ac:55:3c:9a:3e:11:a4:4c:38:50:08:87:
12:20:d9:fb:aa:4e:2e:60:cc:2a:52:3f:96:2f:23:a9:75:f5:
ca:fd:88:68:81:6c:32:a1:af:03:74:90:80:28:e6:d5:77:3b:
5c:ea:25:12:e0:43:c2:fb:ba:35:66:33:4e:20:a5:5e:08:35:
2a:50:25:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:56:47 2026 by rpki-client