Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ow7U46jCNtI872OLCqImvuoiU2o.roa
File: ow7U46jCNtI872OLCqImvuoiU2o.roa (raw, json)
Hash identifier: dhLJogi+3kkWxc/AIHgUhcfF2D9ZyI5fHE/FH/uXB5Q=
Subject key identifier: A3:0E:D4:E3:A8:C2:36:D2:3C:EF:63:8B:0A:A2:26:BE:EA:22:53:6A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DA1970611F75EC8C6AEEEDA27330C19B0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ow7U46jCNtI872OLCqImvuoiU2o.roa
Signing time: Sat 18 Apr 2026 17:15:22 +0000
ROA not before: Sat 18 Apr 2026 17:15:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215228
IP address blocks: 31.58.239.0/24 maxlen: 24
94.183.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:97:06:11:f7:5e:c8:c6:ae:ee:da:27:33:0c:19:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 18 17:15:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a30ed4e3a8c236d23cef638b0aa226beea22536a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:93:0c:3f:ba:82:60:ba:5c:2b:d3:43:4e:
9a:37:4b:16:e7:4e:53:c7:3a:d4:45:dc:fc:84:5b:
bb:f0:71:c5:3e:31:3d:af:20:e2:a1:11:e5:b1:f4:
8c:ea:6b:4a:9d:a5:a0:f5:57:3a:97:98:97:a3:2d:
fb:91:22:fe:1c:1a:94:1c:1f:62:c9:ff:51:c5:e4:
3c:a7:ec:f0:ee:dd:94:ff:a5:d0:0e:88:89:49:50:
1a:06:6a:85:a3:d3:5b:e3:28:6c:1f:c3:7c:d0:7a:
7b:d2:d1:30:c1:15:c0:c3:57:cf:d0:bf:3f:fb:fe:
38:52:96:17:0d:3b:ee:0e:9d:79:87:1b:4e:f0:3a:
43:bf:16:07:f5:63:63:84:b0:fa:d5:30:4d:4d:5e:
4e:96:d3:57:dd:80:92:36:5a:4f:1d:eb:4a:02:7f:
99:fb:d6:53:1e:e6:cd:2d:bf:16:c1:a4:a0:57:43:
27:cc:06:5c:9f:cb:61:39:82:3d:56:6e:cb:26:a4:
19:a5:6c:55:ca:3f:a2:a4:4a:9c:94:71:5a:81:90:
bc:7b:fa:7c:46:58:c7:82:09:54:71:94:9e:70:31:
7b:32:3d:77:2a:66:9e:82:7d:5d:b2:69:75:dc:46:
5f:3e:5e:a9:8d:fe:d1:bf:5a:0a:99:60:88:5b:d0:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0E:D4:E3:A8:C2:36:D2:3C:EF:63:8B:0A:A2:26:BE:EA:22:53:6A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ow7U46jCNtI872OLCqImvuoiU2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.239.0/24
94.183.159.0/24
Signature Algorithm: sha256WithRSAEncryption
98:9d:a1:0b:6a:82:3d:f8:d1:0f:0c:e9:64:42:a3:84:11:a4:
d8:73:7e:61:61:fe:bf:01:12:90:f3:1f:4a:de:ed:73:12:aa:
5a:f5:49:85:95:03:17:b9:b8:05:f0:d0:27:32:c2:90:b8:e0:
26:b7:93:50:8a:5a:9f:9c:c1:43:f7:39:b0:74:f4:13:93:2e:
ec:f5:a5:44:64:00:25:a1:c0:7d:3d:d3:ef:35:9f:69:3c:53:
e4:f2:8f:bd:09:0e:0b:f8:22:84:3b:ab:02:70:9a:f4:8d:ff:
8d:80:21:70:a6:34:a9:4b:6d:12:60:eb:82:52:95:6d:a1:0d:
11:f8:84:38:29:a3:3f:e0:33:9b:6f:12:db:51:35:72:ee:95:
28:7b:b7:c2:3c:0d:e1:13:04:98:03:05:3a:0f:79:e2:c7:df:
6a:a0:55:62:e3:10:d6:45:b8:84:ef:a9:3f:19:dc:0e:55:dd:
c6:c2:8f:7f:a5:00:59:ba:a7:0d:eb:2d:de:c3:9d:a1:9d:70:
c6:71:f7:6d:57:a0:c4:d2:b5:b3:96:f1:35:c8:c2:a5:1f:ce:
52:84:65:b6:3d:83:88:55:3d:29:ec:3d:c6:77:fa:d7:15:64:
6b:2b:05:67:04:18:f0:75:ef:90:52:5f:87:b2:48:3c:de:52:
aa:55:33:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:20 2026 by rpki-client