Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ishqkUREqkywAP_tINdCp5Zi7c0.roa
File: ishqkUREqkywAP_tINdCp5Zi7c0.roa (raw, json)
Hash identifier: ZSrFKsjxfy3SVhKn17IZ2w7AP+BDhEK+cAlLMLsGcgo=
Subject key identifier: 8A:C8:6A:91:44:44:AA:4C:B0:00:FF:ED:20:D7:42:A7:96:62:ED:CD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E79FCC145A5FD20C1E3AE8EF13F3515A9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ishqkUREqkywAP_tINdCp5Zi7c0.roa
Signing time: Sat 30 May 2026 17:44:28 +0000
ROA not before: Sat 30 May 2026 17:44:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214159
IP address blocks: 31.57.204.0/24 maxlen: 24
31.58.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:79:fc:c1:45:a5:fd:20:c1:e3:ae:8e:f1:3f:35:15:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 30 17:44:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ac86a914444aa4cb000ffed20d742a79662edcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:df:86:40:42:b9:a8:96:cf:f1:b8:9d:5b:
e7:a3:6c:e6:24:90:b6:4d:25:3d:0c:6c:c4:a9:41:
2d:82:ae:f0:00:09:1a:2c:fc:a6:a9:ca:fa:76:aa:
23:f6:14:5a:3a:c3:30:02:3a:28:c6:e3:56:af:8d:
d4:b8:b4:0f:3f:eb:8f:a4:fd:c6:19:db:36:02:60:
2f:ea:31:9b:57:d4:17:46:ec:4f:bb:5d:b2:89:63:
40:cf:06:14:9d:a1:07:74:e1:e7:18:f3:30:6c:4d:
81:8d:25:36:66:fb:0b:df:48:44:90:6d:a1:b5:a4:
26:42:08:51:18:f6:61:ef:e9:cd:a7:d7:59:97:30:
dd:3c:e9:a1:fa:0d:a5:e3:ec:93:3d:f7:23:2c:7f:
ec:d5:a3:ba:ee:20:be:1d:d8:d0:d3:d4:d5:e0:36:
b8:5e:c9:a5:36:13:d3:39:32:63:ab:53:32:a8:d1:
fa:c0:ff:68:67:1d:35:ca:2f:1d:47:d4:a4:ca:e6:
d7:5f:a2:3a:9e:f8:20:24:d3:fd:e2:f1:3d:17:0d:
77:38:24:de:49:da:45:d2:87:c0:53:ae:da:94:5e:
65:5d:da:68:58:f6:22:6e:86:ab:8e:4f:02:53:bb:
4f:e9:8a:04:27:53:8f:3c:d1:6a:be:65:69:f5:dd:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C8:6A:91:44:44:AA:4C:B0:00:FF:ED:20:D7:42:A7:96:62:ED:CD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ishqkUREqkywAP_tINdCp5Zi7c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.204.0/24
31.58.230.0/24
Signature Algorithm: sha256WithRSAEncryption
49:9b:4c:2d:8a:c7:1a:b9:3b:ac:fc:80:03:de:43:e4:ef:39:
12:ae:a2:3f:ed:55:13:f9:2c:e8:22:5c:08:93:60:a3:f6:72:
fa:a7:ee:3c:b1:3f:19:eb:33:38:37:14:a3:af:37:f7:58:2e:
2d:ae:7e:92:78:6f:96:7d:93:af:91:29:0c:36:64:ee:80:b7:
7d:fd:fe:bd:22:c7:1a:ae:ba:a8:4e:95:18:ab:d4:c2:02:8a:
94:62:c8:e1:cd:9a:a3:35:7d:d1:61:7f:ea:f2:d1:4f:f3:f1:
bf:c6:ee:2d:64:f3:8f:31:7f:93:e1:a8:5f:4b:75:91:11:db:
2f:c3:bf:1b:4d:9e:be:15:a6:52:26:25:5e:26:e5:ef:25:a5:
57:07:37:27:9b:04:0b:04:bd:ed:b2:99:1a:9e:aa:84:48:9e:
a0:5c:17:af:da:b5:3b:f0:2d:84:65:1e:57:12:b2:5a:62:af:
fe:3c:14:64:f5:42:6d:1b:9d:1d:c0:4d:a4:75:f0:46:38:7c:
89:c8:55:12:fd:96:e0:3c:d4:81:67:7c:cd:cf:0e:2a:09:84:
94:01:ba:51:e5:83:fa:fe:4a:ba:62:92:00:dc:c2:cc:3b:83:
0a:92:4d:f6:ad:34:8c:2a:77:80:23:12:05:e1:19:1f:5e:75:
10:60:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:53 2026 by rpki-client