Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6PETo3HBRYTM4iuNSg6_l3uB-Qw.roa
File: 6PETo3HBRYTM4iuNSg6_l3uB-Qw.roa (raw, json)
Hash identifier: rG5ab8vsXb2Lcv6E6aHvt/sonWCE7bzzQaxP5ucQSQg=
Subject key identifier: E8:F1:13:A3:71:C1:45:84:CC:E2:2B:8D:4A:0E:BF:97:7B:81:F9:0C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1921AB4B455D58A2EB5394AD4B90318ED
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6PETo3HBRYTM4iuNSg6_l3uB-Qw.roa
Signing time: Sat 31 Oct 2026 13:16:26 +0000
ROA not before: Sat 31 Oct 2026 13:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203804
IP address blocks: 31.58.247.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:1a:b4:b4:55:d5:8a:2e:b5:39:4a:d4:b9:03:18:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 31 13:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8f113a371c14584cce22b8d4a0ebf977b81f90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:47:26:3f:76:64:c3:f1:7a:51:14:56:43:
38:17:08:0f:ae:67:30:61:f6:d6:3a:ac:32:82:dd:
3f:a8:1a:a0:31:e4:5f:b5:b9:2d:05:9a:a3:2f:e4:
e6:52:81:37:c3:5e:f6:50:31:d9:4e:0b:c5:f9:04:
e3:8b:86:4c:4f:59:a8:40:1c:a0:d9:7e:ee:80:46:
da:ef:10:3d:53:e8:6a:1c:28:97:df:9e:55:aa:bb:
d0:f5:86:e7:b5:fe:64:4c:31:8b:5c:c7:b4:d9:f2:
36:44:f0:17:d3:37:8e:fd:55:75:b8:86:d7:60:73:
00:53:bc:5b:5b:ea:19:e0:51:5a:d7:0e:37:92:35:
a1:71:89:10:b8:bc:40:77:34:c9:fc:f5:21:b9:83:
84:4d:d0:d2:0a:87:e7:ef:c0:9d:ba:ff:a3:c7:e2:
e1:0a:9f:e5:7c:18:df:9c:8c:bb:0a:24:82:6a:58:
65:96:2a:d6:f6:9b:ee:ec:ae:73:10:04:1a:29:4e:
a7:df:7c:9d:95:da:c0:25:11:25:c8:92:9e:fe:55:
3e:8b:24:5f:8f:b8:52:2c:88:14:05:27:f0:6b:e1:
ba:2e:9c:4c:85:13:c8:89:1d:ad:59:d2:38:7e:24:
57:16:53:b5:b7:76:b8:8e:cb:a5:cb:d1:6b:3e:12:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F1:13:A3:71:C1:45:84:CC:E2:2B:8D:4A:0E:BF:97:7B:81:F9:0C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6PETo3HBRYTM4iuNSg6_l3uB-Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.247.0/24
31.58.250.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:3e:32:3d:5b:fe:14:50:27:7a:1d:27:b7:1c:fe:a8:7f:90:
ed:48:08:17:f6:f7:cc:ef:79:ea:13:ca:d8:e9:78:75:f7:d8:
85:2b:e8:e3:f1:6c:ee:3d:95:d6:08:a0:1f:98:61:03:86:9b:
a8:33:b2:e9:4f:c1:3a:7e:60:7c:ad:5b:85:b3:20:7f:0b:ec:
dd:ba:16:ab:8e:d7:16:ea:fb:db:5d:06:bf:e0:a6:b8:db:c1:
09:a6:c0:14:9a:e5:b9:f9:da:12:8c:c4:bc:f9:96:6c:6e:56:
07:cc:e9:69:8f:3b:ae:ba:cd:14:a6:45:d4:2e:6f:69:93:b3:
62:4d:95:0a:88:7a:04:9c:3c:20:21:59:2c:87:3f:6b:e3:09:
ca:50:fe:49:22:d6:82:3c:15:d1:97:6a:51:ca:5a:57:8f:47:
23:e4:f1:0a:e4:ef:cd:67:24:e2:ba:ff:de:73:d2:6d:f9:17:
99:04:6e:26:43:72:46:6b:17:31:5b:6f:43:ac:a8:3d:d3:3d:
b2:4c:15:aa:10:ae:62:20:28:8f:9e:cf:2f:cb:f6:23:c7:03:
95:82:81:83:48:dc:70:34:22:1a:a1:34:0f:7d:df:b4:55:63:
2f:c6:48:0a:71:9b:cd:90:a6:ce:e6:8b:e0:ef:25:2b:5c:30:
c2:48:ac:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:05 2026 by rpki-client