Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0lju48QJVXTqEf89DpQwkNITNGs.roa
File: 0lju48QJVXTqEf89DpQwkNITNGs.roa (raw, json)
Hash identifier: jbv5UNoGawrKge9gNvEeZcS9JK3yMSpjiDPt6E/lkig=
Subject key identifier: D2:58:EE:E3:C4:09:55:74:EA:11:FF:3D:0E:94:30:90:D2:13:34:6B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CFC48BC1ACCDDFE6364D271BE4A98550F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0lju48QJVXTqEf89DpQwkNITNGs.roa
Signing time: Tue 17 Mar 2026 14:52:30 +0000
ROA not before: Tue 17 Mar 2026 14:52:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 31.57.140.0/24 maxlen: 24
31.58.44.0/24 maxlen: 24
94.183.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:48:bc:1a:cc:dd:fe:63:64:d2:71:be:4a:98:55:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 17 14:52:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d258eee3c4095574ea11ff3d0e943090d213346b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e6:aa:92:b7:81:7d:3b:34:6a:2d:8d:e7:69:
34:56:7a:80:62:e6:eb:5c:a7:c7:13:34:43:e5:c9:
b1:24:c6:ce:a6:e8:71:0b:a4:4c:1c:24:a2:26:15:
b2:38:ed:53:78:67:1c:22:a1:5f:08:3b:f4:32:fe:
a8:17:54:4a:ab:4f:c2:84:67:e5:5c:05:90:05:f4:
0b:fe:50:05:4c:61:54:ee:e9:dd:43:9c:14:96:c8:
93:89:b2:a5:ad:d5:52:9c:49:41:b4:bb:ba:68:7c:
da:0c:3e:d6:0d:99:c2:95:e3:f9:ad:9b:a4:62:cc:
3a:5f:f8:71:9f:ec:a9:82:3a:67:c6:69:ec:34:ea:
78:89:38:c9:6d:29:17:3f:25:35:14:20:6b:fb:0a:
34:db:bc:42:e1:b7:c7:01:fe:4f:d4:bd:2f:55:44:
46:1f:ab:3f:04:c4:e3:8f:cb:1f:4e:a8:a9:a4:84:
02:49:f3:63:18:63:82:02:71:b8:41:3b:7a:97:2e:
4d:41:ac:84:15:71:f1:18:75:54:37:c3:b8:86:0d:
26:2e:72:8d:0e:fb:2f:5a:4b:f0:fa:18:54:73:f3:
b8:59:70:f4:01:a1:6c:85:12:a3:08:c3:d5:19:cf:
d7:03:26:5b:45:10:11:bd:46:b9:7c:64:2e:f0:e4:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:58:EE:E3:C4:09:55:74:EA:11:FF:3D:0E:94:30:90:D2:13:34:6B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0lju48QJVXTqEf89DpQwkNITNGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.140.0/24
31.58.44.0/24
94.183.174.0/24
Signature Algorithm: sha256WithRSAEncryption
72:50:be:c8:68:d4:14:4e:6d:a8:9d:3e:14:31:4d:43:e4:cc:
39:d4:42:99:ba:ea:8a:23:57:88:0f:55:b5:7d:ac:44:cb:86:
b1:b5:db:2c:d2:3a:74:2d:d2:a3:a9:f7:28:aa:12:75:32:11:
df:1a:90:08:9b:ab:40:fc:a6:08:16:83:36:ae:44:50:60:c1:
89:f2:c7:eb:84:4b:ba:f4:9f:de:ca:e0:f5:5c:66:29:38:0e:
c0:3d:60:a5:46:5e:32:9f:c0:85:79:3f:58:c8:12:47:94:32:
67:5c:7c:5e:3d:c6:9d:c2:0a:76:40:36:bf:78:38:5f:b3:02:
49:5d:cf:9e:8e:cb:f4:3b:de:32:6d:7a:ab:f8:b5:24:22:39:
f3:dc:8b:b5:e0:aa:a2:8a:ff:fa:9c:11:2e:1c:e0:e7:0d:5d:
f1:dd:7d:b8:b7:a9:54:43:ac:66:a2:bd:10:4f:05:db:0e:41:
c2:93:78:d3:32:ec:15:5b:14:b5:6e:5e:b4:ba:d9:cd:3e:64:
a4:07:f9:b7:a7:72:85:55:c5:68:ec:3d:56:e6:12:f8:84:bc:
fe:7c:eb:f4:d8:c8:7d:03:e2:8c:ce:2a:c0:af:0d:a4:e5:10:
2e:f7:45:c4:29:7b:fb:77:66:42:f2:f0:2e:2f:ca:8c:da:21:
a5:e2:c0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:21 2026 by rpki-client