Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wKHxoj11eCkiFKZwXAxzXhaYNds.roa
File: wKHxoj11eCkiFKZwXAxzXhaYNds.roa (raw, json)
Hash identifier: lPutUL0pd37AcpQf8MoIrQ/aim9cL4K17zM2X4Ousdo=
Subject key identifier: C0:A1:F1:A2:3D:75:78:29:22:14:A6:70:5C:0C:73:5E:16:98:35:DB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A19D1F6DB8291A7853CE76DE6891DB3EAA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wKHxoj11eCkiFKZwXAxzXhaYNds.roa
Signing time: Mon 02 Nov 2026 16:37:24 +0000
ROA not before: Mon 02 Nov 2026 16:37:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 31.59.96.0/24 maxlen: 24
31.59.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:1f:6d:b8:29:1a:78:53:ce:76:de:68:91:db:3e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 2 16:37:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0a1f1a23d7578292214a6705c0c735e169835db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:45:41:8a:b1:30:d1:d1:77:da:19:eb:aa:
3e:0d:3c:75:90:e5:0f:4b:ad:42:9b:f9:ae:76:67:
8d:45:c6:ab:cc:24:41:2b:7f:2d:70:75:fe:68:f6:
e2:19:60:df:5d:fd:50:ea:af:83:56:1a:77:65:b5:
5a:d6:e7:4d:18:89:38:a5:ff:22:9e:bf:c7:0e:16:
5d:01:5d:13:f9:14:7e:1d:5d:fb:b0:08:8e:f2:c5:
fd:6d:9a:af:96:df:d6:77:4a:26:f5:b2:e3:13:7c:
72:ef:80:2d:d1:6a:aa:0c:df:a8:95:5f:96:20:a6:
77:69:33:88:7a:30:c9:8b:ef:0b:33:1a:18:8c:33:
81:54:46:d4:4a:bd:91:5c:71:19:79:f4:35:47:67:
ca:ee:1f:60:50:cd:37:de:29:d9:56:d0:09:c5:3c:
bd:1e:f5:f5:2e:ee:ea:6d:89:b0:48:a1:0e:4b:0e:
0f:67:0e:bc:46:14:f4:cb:20:2b:65:61:6e:36:a0:
d5:de:d3:18:31:31:38:52:5e:d3:10:74:6a:cd:a0:
3e:6a:27:5d:8b:6f:9a:55:a9:4d:79:f4:43:28:4b:
85:25:65:10:49:79:48:b8:06:73:86:e5:3d:e6:59:
ab:45:58:20:80:06:92:9f:ec:6b:5f:53:be:fd:f0:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:F1:A2:3D:75:78:29:22:14:A6:70:5C:0C:73:5E:16:98:35:DB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wKHxoj11eCkiFKZwXAxzXhaYNds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.96.0/24
31.59.200.0/24
Signature Algorithm: sha256WithRSAEncryption
11:24:12:54:31:79:87:a8:57:aa:13:80:e8:32:37:2f:8a:e3:
c1:43:b7:eb:d8:8d:76:42:c2:72:bc:5f:17:7a:73:05:54:bd:
44:23:e9:81:f3:97:71:99:71:e8:29:b5:25:61:50:f6:b4:90:
23:f2:8c:e6:d2:5d:16:9a:f5:4d:05:3a:c0:38:30:a1:88:15:
f0:56:93:47:2c:88:7f:09:84:b9:bd:6e:91:41:06:5b:84:fe:
b2:99:c3:28:b8:d2:01:36:5e:42:48:43:a1:ef:8a:55:2c:6d:
ad:14:2f:15:fb:e1:41:2d:f2:7b:f6:d0:5e:a0:66:73:08:bf:
17:89:d2:45:f7:2f:35:f3:61:13:2a:c9:9c:a2:79:d4:45:9a:
6e:32:2a:c5:6e:32:e9:97:5a:fa:c2:32:2c:de:72:b3:dc:38:
29:f4:bc:12:a1:e1:eb:bf:a6:ed:0d:c9:f0:d7:02:88:65:99:
1b:6d:52:7a:83:ac:3f:56:f5:c6:33:18:cd:7c:b0:ba:c5:4d:
0b:26:0a:b0:a0:56:7e:04:30:3c:be:9c:b5:ba:9e:7e:48:a7:
bb:c1:85:20:47:bb:b7:6c:60:74:10:99:58:bd:c2:46:2d:a5:
fa:54:e7:90:cc:e1:2e:76:d6:61:98:4a:e6:d6:b5:14:34:8e:
79:6a:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:46:01 2026 by rpki-client