Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1DmIwvkAkOHtX756opKt7LIdnt8.roa
File: 1DmIwvkAkOHtX756opKt7LIdnt8.roa (raw, json)
Hash identifier: FTGQyi7mTwgKpohljQo3iAOIqvZuU+ZsYOd+02gpHlY=
Subject key identifier: D4:39:88:C2:F9:00:90:E1:ED:5F:BE:7A:A2:92:AD:EC:B2:1D:9E:DF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0C2BAABB57115EA1BA912960BFD5DDA91
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1DmIwvkAkOHtX756opKt7LIdnt8.roa
Signing time: Mon 21 Sep 2026 06:50:08 +0000
ROA not before: Mon 21 Sep 2026 06:50:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 31.58.183.0/24 maxlen: 24
94.183.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:ba:ab:b5:71:15:ea:1b:a9:12:96:0b:fd:5d:da:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 21 06:50:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d43988c2f90090e1ed5fbe7aa292adecb21d9edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:4c:e2:f8:81:11:00:b0:23:d9:64:00:b1:
ef:c4:f7:5d:0f:c8:d5:18:ff:a0:8e:6f:d3:e9:11:
66:66:2b:3b:d0:8c:7b:14:ad:8e:6d:f5:5c:30:1d:
54:11:b7:47:f4:4d:61:53:02:07:29:5b:b7:ea:aa:
9e:99:51:0d:d6:1d:66:21:ee:9e:b7:11:23:c8:be:
ff:8e:4a:e3:c0:57:9a:92:f9:d3:74:9a:b3:34:9b:
c8:b9:09:96:bb:12:b3:b7:71:9a:36:ea:3b:74:4f:
f3:0e:49:d9:e7:3f:93:35:37:04:66:34:47:c6:0e:
91:bb:08:da:6a:48:fd:68:c6:59:a4:4b:a2:4e:c9:
d4:44:89:73:82:eb:8d:9a:85:b6:fb:dd:78:77:81:
b0:d3:6d:47:57:06:b8:72:2c:1a:c3:37:4c:5b:7b:
ac:25:60:4e:3f:d2:1e:0b:fe:04:a1:5d:f7:a6:fc:
d1:91:35:03:8c:6a:ea:54:77:4f:4d:39:d6:30:9f:
29:6c:79:56:78:f3:a6:0f:21:c5:c1:f0:7c:96:0f:
e3:54:7f:7b:e8:49:cf:47:14:78:44:7f:23:4c:77:
7a:23:83:07:bd:d4:9c:34:98:a9:49:65:a5:27:0b:
5f:66:a0:4a:eb:ef:15:7a:92:1c:23:9b:cb:f2:04:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:39:88:C2:F9:00:90:E1:ED:5F:BE:7A:A2:92:AD:EC:B2:1D:9E:DF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1DmIwvkAkOHtX756opKt7LIdnt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.183.0/24
94.183.229.0/24
Signature Algorithm: sha256WithRSAEncryption
32:bc:a6:b3:d4:60:20:02:71:6d:60:70:58:ae:1d:e6:54:df:
fc:38:ac:af:03:f9:ae:9d:e1:1b:4d:86:1a:b0:b6:e5:63:25:
b8:1c:5a:92:86:71:9d:e3:df:af:fb:17:d5:2e:b1:f4:ec:10:
5d:9c:fb:77:0d:39:4c:2f:24:47:ef:d0:0d:ec:26:53:94:26:
62:89:47:e8:f8:80:4c:d8:92:9d:cf:ec:9c:95:7e:9b:d5:86:
ac:aa:8a:33:a1:38:46:dc:23:4f:4b:d4:ca:81:36:3d:be:0d:
54:62:52:a4:a3:4a:17:18:67:77:b1:93:bb:65:59:a3:ba:1c:
a2:1d:ea:95:4d:2b:32:b0:57:09:83:7f:9d:99:3c:1a:31:14:
5f:56:c5:51:24:bd:4c:85:e6:3c:54:43:98:80:de:31:89:3e:
63:af:b5:0e:d7:f5:50:4f:73:80:ab:de:7b:14:12:9e:8b:8e:
42:a8:d6:8b:ac:cf:cd:1f:47:4f:2d:ff:ad:54:8e:33:d2:af:
60:d9:ee:db:e5:c7:10:a6:87:c1:25:b9:67:79:39:8e:9d:bb:
f1:c6:47:73:84:a3:69:6f:5d:46:0b:2c:8f:6b:c6:17:ca:ab:
80:c3:5c:54:d0:e1:e3:22:c4:d5:cf:c2:f6:a1:13:2f:3e:29:
aa:36:42:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:07:33 2026 by rpki-client