Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ngX9zuUseL9gflbHfExIGd7FOOM.roa
File: ngX9zuUseL9gflbHfExIGd7FOOM.roa (raw, json)
Hash identifier: d+XAYsOBb9G2K/UPt/wd2xIuYfpAOCbhqRJyIYKGqkM=
Subject key identifier: 9E:05:FD:CE:E5:2C:78:BF:60:7E:56:C7:7C:4C:48:19:DE:C5:38:E3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EB280993A276651F9631FA860232F38D4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ngX9zuUseL9gflbHfExIGd7FOOM.roa
Signing time: Wed 10 Jun 2026 17:07:12 +0000
ROA not before: Wed 10 Jun 2026 17:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213930
IP address blocks: 31.57.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b2:80:99:3a:27:66:51:f9:63:1f:a8:60:23:2f:38:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 10 17:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e05fdcee52c78bf607e56c77c4c4819dec538e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:59:58:14:d7:6d:57:6b:b1:f3:c0:1e:df:
0f:d0:16:8e:6d:e3:b8:03:6f:db:f8:ef:62:79:db:
df:e4:3e:5b:cb:2e:24:79:01:8e:f2:f1:2e:e3:2f:
0e:bb:0d:37:9e:56:1a:8b:cb:d9:44:30:72:3e:f1:
27:9b:ee:4d:99:36:bf:41:5b:01:cb:a0:b1:a4:2b:
c8:6f:fe:ff:06:74:38:12:9c:c6:3f:1a:10:6a:3d:
a2:a5:21:03:d9:14:54:ef:4d:9b:54:d6:d6:fd:de:
0f:43:20:c5:24:19:a0:6b:31:db:2b:b2:01:8a:a2:
45:ad:4e:d9:38:04:bf:e9:78:b6:ad:58:fd:34:be:
51:b3:27:be:d1:32:70:8e:73:54:6d:2a:81:31:11:
93:a8:4b:21:4d:3b:ad:fd:b8:97:cb:2b:4f:63:0e:
b3:8e:11:63:34:ba:72:d3:d3:f3:bf:55:0d:f0:72:
94:72:dc:6d:3a:e6:93:d2:75:e6:99:59:ec:43:0e:
d3:fa:3b:42:0a:8f:9f:ea:fd:a1:3b:4a:16:b9:95:
20:e2:38:31:af:d7:9b:b0:43:b2:82:55:f1:e1:5a:
4c:7d:ae:86:96:cd:f0:e8:b1:41:00:36:ce:2b:85:
dc:b5:90:fa:ad:9f:c3:ba:58:93:c5:60:46:92:aa:
21:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:05:FD:CE:E5:2C:78:BF:60:7E:56:C7:7C:4C:48:19:DE:C5:38:E3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ngX9zuUseL9gflbHfExIGd7FOOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.242.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:86:3f:42:69:96:ba:44:a8:1e:8e:a3:fd:ab:b3:44:05:ba:
32:02:ce:22:65:ac:41:7f:eb:01:b3:c1:86:f4:b2:65:75:c6:
de:91:bb:9f:d0:16:a8:01:b0:4f:73:b7:e5:57:03:0b:ad:cf:
21:75:ac:ba:fc:fa:ac:bf:7c:1f:58:80:00:11:3c:a6:7f:d2:
2f:a0:e2:50:18:ce:d2:f8:03:4d:30:00:f3:2d:b6:f7:25:54:
f7:f3:42:f1:80:0a:af:ee:25:fb:b3:82:65:90:2a:c7:4a:78:
19:b3:5d:3a:d3:c8:c6:98:1e:ca:70:78:08:a0:e8:54:b0:76:
62:97:33:3e:72:f5:4e:8f:cb:46:20:c3:7b:3a:f0:ec:54:3f:
a3:7f:eb:19:92:d3:d0:4b:e2:30:62:43:c9:76:2a:ff:09:a8:
bf:99:0e:69:93:04:50:14:ed:18:57:9b:c8:8d:2a:42:ce:6b:
aa:eb:eb:b3:b2:72:77:a2:48:63:c5:c4:bf:a2:69:c0:d1:49:
41:1f:67:38:ac:a9:d9:ee:fe:e2:6f:99:83:ca:1b:79:55:51:
81:b5:c9:07:97:00:ef:00:5d:49:30:94:42:fc:47:e5:0c:01:
83:a6:e6:67:5f:16:55:05:9f:a2:53:10:96:ae:6e:71:1a:c0:
66:61:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:36:57 2026 by rpki-client