Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/32CbbiRfYB9UwORKlqy0LDoCcsw.roa
File: 32CbbiRfYB9UwORKlqy0LDoCcsw.roa (raw, json)
Hash identifier: 7zjSVjJDJJPVBx2oEqjb9iJyT9elVheM78mcAOONlF8=
Subject key identifier: DF:60:9B:6E:24:5F:60:1F:54:C0:E4:4A:96:AC:B4:2C:3A:02:72:CC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F3DEA3046422EF2C5F7210C1498D09176
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/32CbbiRfYB9UwORKlqy0LDoCcsw.roa
Signing time: Tue 07 Jul 2026 18:49:45 +0000
ROA not before: Tue 07 Jul 2026 18:49:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402257
IP address blocks: 31.58.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:ea:30:46:42:2e:f2:c5:f7:21:0c:14:98:d0:91:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 7 18:49:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df609b6e245f601f54c0e44a96acb42c3a0272cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:2a:ba:a5:9d:e6:30:70:d1:c4:a2:b4:db:
68:c3:62:1a:00:3b:13:15:02:83:3f:10:b4:7d:13:
2e:09:9f:4e:ae:f9:39:56:00:7a:b2:27:32:1c:36:
89:dc:e3:23:82:2a:0c:f9:ea:9e:d3:8b:23:ca:3c:
eb:a5:b3:75:ad:6e:ef:52:3a:eb:8d:2d:76:21:fe:
07:a2:33:03:d9:e7:f1:a5:15:7b:7f:07:62:55:95:
49:f3:84:fb:3d:84:06:98:db:b5:2f:f5:93:b3:19:
bb:cf:a4:b2:c6:ad:e7:9a:59:c7:df:6f:95:8b:82:
b3:a7:72:67:77:c4:27:44:72:5f:80:e3:55:9b:92:
f1:f5:01:e5:28:b2:58:0b:8d:6c:e4:b3:62:b8:9c:
8b:77:f1:85:bf:e0:14:f2:6a:e2:b0:cc:b9:3e:b0:
bb:48:5d:33:3a:31:f5:1f:ab:a5:ac:9a:82:81:27:
45:2e:65:c2:55:32:9b:af:e7:db:5b:f0:71:72:58:
5e:15:7a:1b:1f:bd:2a:25:42:d1:81:95:de:a8:7e:
12:bb:45:83:cc:d0:50:2f:12:3f:69:66:0b:b0:c5:
6c:3d:35:e5:db:e3:65:4b:69:1d:9e:e3:2e:c0:50:
85:c6:61:36:38:8f:d0:f8:8a:c0:c2:d4:24:52:ab:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:60:9B:6E:24:5F:60:1F:54:C0:E4:4A:96:AC:B4:2C:3A:02:72:CC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/32CbbiRfYB9UwORKlqy0LDoCcsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.60.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:41:0e:c3:12:b4:78:6c:11:f5:9b:79:7d:57:50:1f:68:3e:
97:f7:1a:c7:b0:91:b6:be:4b:ae:50:88:fa:d8:4d:a0:dd:96:
59:d2:d0:b3:87:76:3a:37:ae:2e:58:b2:14:f9:11:8e:0e:eb:
9d:70:83:86:f2:f3:23:29:ab:f3:c1:a6:92:82:48:48:3c:04:
91:df:25:f6:70:e1:3c:51:39:f9:c3:0a:0f:21:2d:2a:bd:08:
f9:ed:d8:c5:68:6b:80:26:5e:66:60:fe:79:35:f1:83:5a:fa:
a9:da:2d:47:2f:87:b8:49:3e:36:94:23:61:f8:76:e6:6f:4a:
b0:17:e8:79:1f:60:6a:c9:59:a0:4e:3f:68:8e:f5:3b:b7:c8:
c8:1f:e7:8c:d0:78:61:66:b3:1d:44:8f:4d:8b:2d:f9:ab:ea:
d8:1e:b9:31:3b:19:73:41:71:3f:c6:de:e8:8b:31:e2:d7:f3:
e4:d9:f3:90:2d:85:ec:41:d7:29:62:ef:f3:ef:f1:43:8a:bb:
89:fb:a9:2c:90:a5:5e:27:51:df:04:ab:57:e0:2a:98:be:26:
91:60:45:3a:65:07:26:e9:b0:ad:4b:7c:c4:fd:5b:e0:02:d4:
6f:f7:9e:8d:9e:be:1b:8d:19:02:fa:a9:a3:5f:0a:a5:00:e3:
a5:58:be:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:03 2026 by rpki-client