Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3o9-kE0LdpVGk07q4HT2EGWcvaE.roa
File: 3o9-kE0LdpVGk07q4HT2EGWcvaE.roa (raw, json)
Hash identifier: Ctzwx1KUU1TB/jgtznVhs9qHcXR3AKPNUpbp1vzGEYM=
Subject key identifier: DE:8F:7E:90:4D:0B:76:95:46:93:4E:EA:E0:74:F6:10:65:9C:BD:A1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D245B5AE5CC2B6D1A1A692AB997FD6AE7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3o9-kE0LdpVGk07q4HT2EGWcvaE.roa
Signing time: Wed 25 Mar 2026 09:37:39 +0000
ROA not before: Wed 25 Mar 2026 09:37:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 31.57.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:5b:5a:e5:cc:2b:6d:1a:1a:69:2a:b9:97:fd:6a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 25 09:37:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de8f7e904d0b769546934eeae074f610659cbda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:b4:56:87:ec:a6:a6:1c:45:20:87:56:aa:
fa:2b:80:19:97:cf:28:20:fb:1a:f9:69:66:66:bf:
41:c5:9e:19:9a:b3:93:25:17:fa:59:73:fe:ba:9f:
d3:84:a6:76:85:79:85:c4:d3:e7:b6:7f:17:4c:7b:
7d:8b:8b:01:24:3f:2d:17:d7:86:25:c5:f5:0c:92:
a8:74:10:ee:e5:18:77:4e:23:ee:bb:b0:5c:43:1c:
f8:fe:22:8a:9e:dc:41:cc:7c:67:dd:10:fe:72:84:
1e:4c:fc:3c:3f:3b:0f:a2:77:87:ae:02:42:e6:de:
0b:c0:1d:52:37:f4:7e:45:d2:91:09:10:6c:f3:6e:
50:b7:b3:6a:75:3d:e9:e8:8e:bc:9f:d9:57:7f:14:
65:b0:22:25:c1:3a:26:61:74:72:14:ae:40:f0:5c:
77:fb:7a:7f:3a:42:b1:08:8c:d9:7e:ed:f7:9c:4e:
d0:a2:6d:72:4a:ea:6a:7d:c9:9a:90:f5:c2:41:f8:
d4:f1:f6:0c:e8:d0:10:56:c4:08:70:be:6a:16:2a:
5d:49:19:b1:04:99:50:5a:12:f6:b5:84:06:96:fa:
a8:4f:5a:51:ce:48:3c:35:15:95:a8:5b:7d:86:f4:
d6:82:5d:82:d3:4f:50:cf:4f:d6:3b:bb:83:6b:98:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8F:7E:90:4D:0B:76:95:46:93:4E:EA:E0:74:F6:10:65:9C:BD:A1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3o9-kE0LdpVGk07q4HT2EGWcvaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.132.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ed:91:3d:7c:30:9b:8c:1e:c3:7a:22:62:08:0e:7e:65:db:
c5:59:65:44:7d:a8:1d:cb:3f:12:59:05:b7:d3:28:fb:71:ce:
93:e2:1c:49:4a:9d:44:d8:e4:40:ca:a3:30:76:8d:ed:70:f7:
b2:57:0f:84:ae:aa:e8:c5:22:59:a9:2a:7d:11:f5:22:8c:82:
15:53:75:e1:cb:64:5b:7c:62:a0:46:84:d9:5c:a5:63:04:1b:
e1:48:6c:24:2e:17:2b:db:5e:e2:85:4b:8d:a9:b2:3d:c7:97:
56:5d:6e:5f:61:1d:c6:a5:fb:0c:8b:56:02:a3:a0:4a:cd:5f:
dc:fe:dc:2e:37:df:c8:9e:b2:c8:40:3d:8a:ca:9d:b3:a9:7d:
b6:2e:25:3e:88:25:c9:04:63:e5:a9:a4:77:8e:63:ac:17:48:
0b:20:01:42:ce:ea:8a:94:68:cb:01:c4:84:15:50:d2:5f:31:
71:68:79:e5:bd:e5:90:33:7e:90:6c:90:e9:71:29:48:35:9d:
2f:54:de:f1:43:da:42:01:c6:dc:f4:80:b4:d7:17:93:09:3f:
47:b8:91:ec:dc:2f:8f:04:4d:87:8a:1b:8a:3f:60:bf:52:ce:
f0:a7:10:2b:47:cf:34:a4:bf:6c:78:86:60:f3:c8:87:5b:25:
d7:69:4b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:47:21 2026 by rpki-client