Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k9SUhgr_9ijypdEnKEOAxR0UtMA.roa
File: k9SUhgr_9ijypdEnKEOAxR0UtMA.roa (raw, json)
Hash identifier: c+Wo4NDIxcef5D2wnnKM6pgznIroeTRGfMWqDGRaiFU=
Subject key identifier: 93:D4:94:86:0A:FF:F6:28:F2:A5:D1:27:28:43:80:C5:1D:14:B4:C0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D433D0B7D301C29DB66C070E29F4DA91A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k9SUhgr_9ijypdEnKEOAxR0UtMA.roa
Signing time: Tue 31 Mar 2026 09:32:47 +0000
ROA not before: Tue 31 Mar 2026 09:32:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402187
IP address blocks: 31.59.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:3d:0b:7d:30:1c:29:db:66:c0:70:e2:9f:4d:a9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 31 09:32:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93d494860afff628f2a5d127284380c51d14b4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:d6:5d:2c:09:04:ea:de:5b:5e:59:da:d0:
c5:cc:d7:32:e6:68:51:49:fb:be:7a:ba:7e:87:02:
b0:a9:e3:cb:1c:e9:b2:89:96:1e:44:68:b0:f1:eb:
35:a3:af:10:bc:fc:7c:67:26:97:73:d6:3d:c8:5d:
7c:a7:dd:1e:1e:84:a9:2b:87:24:5c:91:2a:77:55:
91:04:49:f2:f9:6c:62:cd:fd:4b:16:78:a5:7d:ad:
50:5c:98:4e:17:d7:e4:4c:0d:d2:b7:c5:b7:7e:8d:
f8:99:29:e5:20:da:81:42:f6:5f:b4:8c:55:cd:ff:
d9:d6:f9:8b:b9:0a:09:aa:df:a9:49:8b:75:97:6e:
80:1b:1b:79:2e:a3:98:8b:19:59:e1:b8:dc:c3:96:
a5:b0:39:d8:66:73:0a:70:69:2b:37:1e:01:bc:d5:
41:5a:91:c6:d7:60:e4:e6:d4:79:2b:5b:58:8b:33:
18:11:6d:2a:46:05:e0:aa:42:99:ba:4e:8a:04:ec:
e3:19:5b:e6:8a:4a:a2:5c:45:1a:b8:36:69:6b:bd:
69:c0:8a:0f:32:e5:92:68:6e:b9:4d:fb:c3:76:be:
ae:68:34:ac:b7:cd:f7:53:de:1b:c7:75:9a:65:c3:
92:18:cb:47:a6:42:e3:21:a9:2b:27:b9:4c:5f:71:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D4:94:86:0A:FF:F6:28:F2:A5:D1:27:28:43:80:C5:1D:14:B4:C0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k9SUhgr_9ijypdEnKEOAxR0UtMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.119.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:74:e8:ad:70:7e:13:41:cf:55:c6:34:45:e2:18:9b:53:b0:
50:3d:75:56:70:ee:e9:22:da:cb:be:d2:67:5e:d4:83:d5:c2:
54:22:bd:28:80:83:62:f1:5b:ce:02:21:9a:d5:7a:d5:67:02:
c6:0c:95:6a:42:fb:2f:48:2c:7a:7f:62:5d:48:ee:02:8f:83:
b0:87:dc:f4:99:78:2b:b4:84:14:3e:84:7d:64:c8:72:6f:9c:
d4:04:1a:9c:ff:ec:ec:57:63:59:2b:e7:75:28:81:7b:6e:d7:
a9:98:3b:4d:40:1f:17:02:60:99:20:bb:3c:c0:58:fd:77:82:
47:39:65:f6:6b:cf:b5:3f:35:64:08:7e:8e:59:3e:30:c8:91:
5e:4a:ba:fb:ea:57:88:99:fe:d0:4c:72:9d:50:75:6d:0f:a0:
00:f8:70:9d:18:42:91:60:02:ce:5f:96:3b:1e:40:8e:ea:23:
fd:01:77:55:82:ec:d5:fd:8e:4f:4d:bd:0c:ff:e7:8d:e9:64:
4c:0f:21:1b:b5:1c:0b:e8:fb:2d:3a:1f:e3:b1:5e:a3:6f:04:
e7:47:48:8f:62:b3:eb:a1:54:1d:1e:14:8c:33:b5:bf:5f:8f:
9f:bb:6b:41:eb:c4:ae:6f:4d:cc:15:33:2a:bf:04:66:9a:de:
f9:f3:89:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:22:21 2026 by rpki-client