Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hQ1hV5w75UTjx0uhreDMEfa0guQ.roa
File: hQ1hV5w75UTjx0uhreDMEfa0guQ.roa (raw, json)
Hash identifier: mMAY7HuytwW1zk1uCW/b9zNr94ep6jkoQkcv/2n5DJk=
Subject key identifier: 85:0D:61:57:9C:3B:E5:44:E3:C7:4B:A1:AD:E0:CC:11:F6:B4:82:E4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A09A24A9D11D71B23A7CAD1DA3A1157CDB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hQ1hV5w75UTjx0uhreDMEfa0guQ.roa
Signing time: Sun 13 Sep 2026 09:41:28 +0000
ROA not before: Sun 13 Sep 2026 09:41:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48266
IP address blocks: 31.59.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:24:a9:d1:1d:71:b2:3a:7c:ad:1d:a3:a1:15:7c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 13 09:41:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=850d61579c3be544e3c74ba1ade0cc11f6b482e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2d:66:57:8d:8e:ed:0f:f7:a7:62:9a:c5:48:
3d:02:bf:91:cd:d4:1a:c6:28:1f:a2:45:ad:cf:cf:
13:f9:76:e8:f7:f7:9f:8a:c9:0d:3e:2d:0c:9a:59:
6e:b9:3d:a7:4a:25:d3:c9:23:b4:5a:45:a3:55:0f:
28:fd:c9:e5:e7:29:2e:5e:19:b7:9a:45:b3:4d:60:
46:4f:ba:7f:70:c7:56:55:32:44:d5:6d:83:46:f8:
c6:f6:70:cc:15:d8:e1:59:21:46:90:ff:13:ac:06:
f9:a6:e4:e8:76:af:21:b6:17:e6:41:4d:de:33:4d:
8a:4f:91:6e:03:ce:45:b8:6d:a8:6b:f0:09:55:20:
f0:df:80:ef:e0:84:f2:ca:a6:bd:0e:84:48:a9:24:
a5:47:b4:7f:42:50:d7:f0:fe:87:f2:93:df:43:88:
d2:c5:a6:c0:4a:b6:7c:b0:b5:3b:99:4d:91:5e:89:
a8:2c:31:23:db:a8:94:cd:7a:52:52:c5:9b:c3:ba:
91:43:65:61:8b:f2:dd:81:19:fe:2f:04:65:3e:39:
db:c2:e2:4c:db:52:3a:f7:46:d1:58:b1:9c:72:1a:
6f:5e:da:39:1f:62:c2:a6:83:be:b6:e0:15:7f:57:
b3:2e:6c:db:51:d1:36:4b:af:af:44:1e:37:f0:03:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0D:61:57:9C:3B:E5:44:E3:C7:4B:A1:AD:E0:CC:11:F6:B4:82:E4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hQ1hV5w75UTjx0uhreDMEfa0guQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.52.0/24
Signature Algorithm: sha256WithRSAEncryption
54:14:95:1f:56:82:05:d1:ca:c1:cd:1c:fb:68:83:45:88:0a:
aa:46:79:dc:86:bf:04:62:4e:2e:e7:e0:d6:9f:c2:ca:6d:7b:
1b:fd:0f:bb:f0:b4:87:71:36:9f:f8:9c:f5:6c:de:c0:8a:ba:
0a:8f:e3:12:27:04:56:36:96:72:a9:1e:78:4d:4a:f5:9d:7c:
e4:13:e3:07:83:0e:50:2d:e3:d6:0b:a8:c2:14:7c:68:aa:59:
e3:f5:af:5b:9c:a4:b0:99:24:a3:df:d3:7b:78:2d:40:f6:7f:
03:d0:83:25:53:c6:10:43:14:44:6d:3b:12:6d:0d:c9:c6:7b:
de:ed:20:b7:0c:78:70:9f:23:29:ff:fe:b3:b5:11:af:6f:6b:
13:f7:6f:49:bf:5f:d8:f0:ff:13:e1:61:2c:1b:0d:8e:c1:b3:
b4:a0:bc:17:bb:66:51:ea:3e:7d:51:2d:03:2f:e4:5e:70:5e:
57:9e:a7:54:c3:7e:f8:b0:c3:a5:ff:db:6e:ad:3d:5d:d0:00:
b3:ff:77:45:3b:e8:6a:a9:61:e9:4c:5f:a8:23:c2:6b:a8:90:
7d:fa:35:9d:19:73:14:db:fe:fd:80:4d:07:a0:39:54:4c:f1:
15:70:97:af:eb:c4:9f:e7:3b:9f:d3:22:7d:92:7d:9a:f0:e1:
ba:17:cc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:39 2026 by rpki-client