Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5r3NvSSkbqQsOa4HAcRyV7bRQfg.roa
File: 5r3NvSSkbqQsOa4HAcRyV7bRQfg.roa (raw, json)
Hash identifier: bcM2t7v91tJi2gjttlrUFhqrNpuqz8x3Xb/ymc+meps=
Subject key identifier: E6:BD:CD:BD:24:A4:6E:A4:2C:39:AE:07:01:C4:72:57:B6:D1:41:F8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F15034C86C9092B60895D0B652E927353
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5r3NvSSkbqQsOa4HAcRyV7bRQfg.roa
Signing time: Mon 29 Jun 2026 20:12:45 +0000
ROA not before: Mon 29 Jun 2026 20:12:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137564
IP address blocks: 31.58.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:03:4c:86:c9:09:2b:60:89:5d:0b:65:2e:92:73:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 29 20:12:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6bdcdbd24a46ea42c39ae0701c47257b6d141f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:72:78:47:16:0a:f3:b5:31:51:af:70:5a:
4b:40:aa:0f:11:9c:d0:b4:6c:6d:c7:d2:51:43:29:
a6:55:fd:8e:ba:ea:6e:81:e2:d1:3d:43:07:2c:d5:
16:83:a2:44:1c:dd:33:b2:5c:76:6c:18:49:45:b7:
f1:f6:25:af:7a:b7:84:2a:44:1c:a5:44:2b:87:c6:
1b:fa:3c:45:61:ba:03:4f:c6:da:83:39:6a:fd:82:
eb:70:e5:2e:d4:c8:26:5d:cb:7c:04:83:04:e0:18:
77:48:24:4e:cc:49:4b:a5:8f:79:7a:95:96:0a:82:
4f:8b:7f:3c:12:91:77:63:ae:4c:ac:52:3a:58:5c:
a4:4c:ba:7d:6f:e1:9a:41:b1:3b:62:62:a6:84:72:
e6:cb:82:ad:dd:1c:1f:9b:fd:ab:10:d3:2f:5d:be:
14:36:ea:99:eb:4c:7a:a9:f5:d7:07:af:34:09:ad:
36:ef:c9:6f:7b:ac:dc:4f:44:47:7c:c3:2f:7a:d6:
ab:94:f6:29:9c:03:61:56:43:b2:db:c5:4f:9d:18:
a7:61:37:76:98:86:15:e3:6d:8b:9c:18:8d:7f:a0:
b3:4a:ae:90:f8:fd:e9:fb:73:48:d4:6d:98:d0:b7:
81:44:54:ca:1c:48:cf:f8:35:0b:a5:5d:83:84:37:
f1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BD:CD:BD:24:A4:6E:A4:2C:39:AE:07:01:C4:72:57:B6:D1:41:F8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5r3NvSSkbqQsOa4HAcRyV7bRQfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.66.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:0a:d0:41:26:bf:ab:35:32:48:55:78:36:93:09:22:a9:a4:
b9:f3:0c:03:f4:8c:fe:90:66:95:d0:29:fd:e1:e2:d6:0e:28:
e9:bd:71:b9:13:28:1c:77:1e:75:ce:8b:fc:f3:c6:18:b5:a0:
6e:93:53:9d:a7:5b:3c:37:50:4b:89:c0:7f:d9:3c:ff:e4:3d:
0c:ec:4a:32:32:d9:3b:5c:6b:69:cc:fa:7f:18:1c:b8:46:43:
33:c3:23:a9:5a:15:e7:71:6c:f2:b9:39:c7:5c:48:21:e5:8b:
10:26:3e:51:b0:65:4f:46:8e:42:08:89:40:4f:a5:0f:6c:4b:
02:e9:b0:90:d9:2e:df:73:26:1b:32:f0:be:bd:fa:d5:16:4d:
1a:fb:5a:54:9f:a1:59:4e:ba:6c:82:c3:dd:b6:94:e4:43:f5:
b7:83:65:be:f9:ba:09:9a:f3:d1:10:b3:e2:e2:20:44:91:e6:
28:77:b0:b5:6a:95:47:67:bc:32:37:ce:5e:94:59:e4:76:d6:
98:6e:b1:b9:97:14:99:5b:b6:c7:4d:8a:35:3c:9a:6f:f6:46:
a7:fb:63:d7:f9:bc:21:93:d5:39:6d:2a:81:72:39:11:49:7a:
bb:5a:42:02:62:59:46:ce:e2:91:97:22:8f:f2:40:50:61:7d:
88:88:63:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:49 2026 by rpki-client