Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8CxUGreBNvtY1fLWRp40jdm0hWk.roa
File: 8CxUGreBNvtY1fLWRp40jdm0hWk.roa (raw, json)
Hash identifier: iSwhzEQM3hEhUMHrVBabiPFeFp22ycvzFlFladHAZZs=
Subject key identifier: F0:2C:54:1A:B7:81:36:FB:58:D5:F2:D6:46:9E:34:8D:D9:B4:85:69
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DD54B3C1582BCDCF1AE2F5DB3CF37DDFD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8CxUGreBNvtY1fLWRp40jdm0hWk.roa
Signing time: Tue 28 Apr 2026 18:12:50 +0000
ROA not before: Tue 28 Apr 2026 18:12:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210457
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.39.0/24 maxlen: 24
94.183.170.0/24 maxlen: 24
217.60.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:4b:3c:15:82:bc:dc:f1:ae:2f:5d:b3:cf:37:dd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 28 18:12:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f02c541ab78136fb58d5f2d6469e348dd9b48569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:53:b7:cc:24:2b:2d:d3:19:ca:f8:56:be:
46:a5:6d:14:2f:55:a1:2f:51:6a:e5:dc:f6:34:c8:
14:6d:9c:2d:ca:c9:5c:03:3c:c8:e0:81:4a:37:78:
41:db:72:53:5d:8b:ae:6b:20:1c:ac:82:44:fe:ad:
f1:b1:9c:bd:cf:98:46:92:07:c5:1b:7e:40:4d:25:
f1:cb:b4:f3:4f:5c:aa:ed:13:8f:47:64:d4:d0:9c:
6b:5a:45:df:7e:65:62:af:49:92:9b:fc:79:db:68:
cd:d6:90:cf:54:4a:b1:90:54:7c:e7:e0:9c:0e:d6:
86:44:a1:06:a7:28:b7:01:51:de:d6:4c:61:4d:5b:
29:92:6f:20:af:39:61:ce:10:42:a0:cc:46:25:e2:
97:41:48:50:e8:a1:4e:96:2e:b9:49:90:8a:fb:d0:
e7:01:d3:53:5f:45:14:04:7c:34:b2:3b:24:63:0d:
90:3e:39:85:55:53:e3:cd:5b:4e:b2:56:d7:10:83:
3f:3e:91:94:f6:34:36:c3:63:a7:42:76:71:c1:44:
b5:10:b6:b5:b1:ea:de:80:35:e6:cd:d1:d8:d4:2d:
49:a5:84:35:ff:8f:2b:72:10:d8:6d:15:e7:0c:34:
7b:81:49:42:96:c6:eb:47:ec:80:b7:40:a7:1a:64:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2C:54:1A:B7:81:36:FB:58:D5:F2:D6:46:9E:34:8D:D9:B4:85:69
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8CxUGreBNvtY1fLWRp40jdm0hWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.36.0/24
31.59.39.0/24
94.183.170.0/24
217.60.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:bb:07:66:7b:68:2c:45:aa:09:c1:12:5a:d5:0b:f1:a9:e3:
b3:45:28:83:b8:10:af:e2:e9:f8:75:31:51:ba:31:ec:eb:ad:
ef:ab:cf:51:8e:7d:f9:e1:4b:0a:07:9d:29:30:3b:62:76:98:
f2:b0:60:8a:80:51:1a:6f:f7:a1:23:fb:14:b4:44:86:52:57:
96:cf:2b:a4:80:cd:01:6e:38:07:7f:91:af:40:6a:76:d4:8e:
9e:c0:7e:96:97:c5:7d:d8:da:dd:23:29:d7:ec:a3:88:a2:c7:
9c:db:a2:b2:a3:4b:02:37:31:97:84:09:c3:28:9f:49:a7:06:
5e:8a:84:42:dd:48:3d:b3:b0:3d:24:2a:00:93:fd:94:1e:67:
b6:85:e0:32:4e:ed:74:10:18:fc:3c:e7:0b:56:24:e4:f0:e4:
2c:4e:2d:84:63:65:a4:cd:93:01:29:30:1c:af:49:35:f5:a7:
b4:7a:72:c5:64:3b:94:53:26:34:26:01:8c:58:bd:5c:5c:18:
98:55:1c:a9:cd:0d:db:12:b5:60:22:67:15:c6:3d:a3:f3:e8:
28:cb:44:12:6d:d1:a0:d3:10:15:8f:2c:38:e2:9b:99:15:b6:
4c:54:0e:fd:40:a5:d8:7f:d2:fa:7d:05:bf:20:1a:5b:a8:be:
db:5d:9e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:24 2026 by rpki-client