Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aAT88nXpdd9gk-fm4jqRsCyknaE.roa
File: aAT88nXpdd9gk-fm4jqRsCyknaE.roa (raw, json)
Hash identifier: kHwcieiW0mAV7w76E5tLSBgBE3Nwmpfz5nCOlP9xvZY=
Subject key identifier: 68:04:FC:F2:75:E9:75:DF:60:93:E7:E6:E2:3A:91:B0:2C:A4:9D:A1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0A9AFF506A8750CA3E20D117138ADC81E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aAT88nXpdd9gk-fm4jqRsCyknaE.roa
Signing time: Wed 16 Sep 2026 10:07:55 +0000
ROA not before: Wed 16 Sep 2026 10:07:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218700
IP address blocks: 31.58.184.0/24 maxlen: 24
31.58.185.0/24 maxlen: 24
31.58.186.0/24 maxlen: 24
31.58.187.0/24 maxlen: 24
31.58.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:af:f5:06:a8:75:0c:a3:e2:0d:11:71:38:ad:c8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 16 10:07:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6804fcf275e975df6093e7e6e23a91b02ca49da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:eb:00:78:d5:20:ae:a5:30:ab:22:11:68:
04:82:5c:fe:87:11:02:1f:73:73:2d:e6:bf:fd:8e:
53:d1:12:ab:6f:b7:e6:59:9b:61:33:79:eb:32:71:
47:12:0e:53:9b:c4:43:78:6e:22:c6:cf:c7:d2:c1:
51:45:17:a4:d3:8f:84:ea:31:0e:92:78:64:82:82:
37:94:c9:92:64:6c:af:0e:6b:d3:0f:7f:7c:9d:fc:
34:6f:32:c2:f7:48:c4:0f:10:7f:76:05:19:a4:c4:
3e:e8:79:89:79:ce:cb:12:ba:02:ac:59:65:d6:0b:
e8:e0:9b:17:33:10:b9:cd:2d:07:fa:49:10:fd:43:
c8:32:25:e4:7d:28:64:d8:b6:b8:68:b5:22:83:56:
af:6f:21:4f:18:e9:4d:ac:8b:88:ef:b7:24:d3:df:
33:4c:bb:33:5c:9f:e9:54:5c:6c:04:eb:80:0a:4b:
2e:aa:df:0d:93:42:2b:7e:97:63:11:b7:c2:e8:04:
e0:6f:4f:ba:20:8d:3f:f2:c3:cc:f6:68:72:96:ee:
1b:21:01:36:b0:5a:1a:8f:0c:05:c7:89:3d:5c:e9:
fd:f3:75:0d:f2:a7:ee:a3:6a:2e:c9:10:6d:2a:b6:
1d:72:b4:ac:ad:9c:40:68:70:3b:c5:d0:79:68:44:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:04:FC:F2:75:E9:75:DF:60:93:E7:E6:E2:3A:91:B0:2C:A4:9D:A1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aAT88nXpdd9gk-fm4jqRsCyknaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.184.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:e5:fd:7c:75:04:46:33:b0:09:6c:2d:15:04:93:70:48:3b:
26:33:f5:50:6f:fd:a3:9b:fe:0a:51:b4:b9:77:2a:82:11:3e:
38:a5:c4:e0:cf:04:d6:ad:dc:94:08:bb:42:aa:6a:46:3a:69:
33:61:ca:a4:2e:a6:e4:10:ea:1e:15:79:01:2f:78:e5:09:6b:
b9:7f:ad:75:5c:8c:15:e8:8f:0f:b5:24:bd:98:e5:d5:ca:56:
89:89:35:b9:66:f7:d9:2e:87:d7:5e:cb:e0:67:2b:fa:88:3f:
d4:c1:73:07:77:2c:b2:b6:de:e8:72:03:3b:0d:d4:04:eb:8c:
cf:52:da:a3:c5:b0:bd:56:92:b1:1c:72:c8:10:0e:4d:2e:d1:
50:19:e6:1a:50:a3:aa:ff:f4:c2:e7:e6:01:41:ee:ed:87:48:
1c:2a:2d:00:cd:f9:a6:0c:d6:04:6d:2b:9f:46:83:3d:de:03:
4e:df:a9:20:49:02:93:d2:13:15:33:1c:1a:51:e1:5a:02:11:
e1:4b:0d:83:c1:e5:af:48:30:21:f8:64:da:5c:c0:12:1d:1a:
32:84:b4:0c:63:45:78:cc:37:cf:85:2e:d7:1a:bc:77:16:17:
fe:33:2a:61:4c:55:bf:2c:03:0b:96:bd:a5:7e:e1:82:75:d6:
b5:c6:8a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:13 2026 by rpki-client