Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8weBL9sd0aEYkTnyQy2Mp6hR1Bo.roa
File: 8weBL9sd0aEYkTnyQy2Mp6hR1Bo.roa (raw, json)
Hash identifier: eut0vKXQV0tMDo1NtH3Lti1Rvmhu79L/fADprcgSd0Y=
Subject key identifier: F3:07:81:2F:DB:1D:D1:A1:18:91:39:F2:43:2D:8C:A7:A8:51:D4:1A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A186CC72F60F3E6E17384F3E05AABC951D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8weBL9sd0aEYkTnyQy2Mp6hR1Bo.roa
Signing time: Thu 29 Oct 2026 08:35:07 +0000
ROA not before: Thu 29 Oct 2026 08:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 31.58.208.0/24 maxlen: 24
31.59.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:cc:72:f6:0f:3e:6e:17:38:4f:3e:05:aa:bc:95:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 29 08:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f307812fdb1dd1a1189139f2432d8ca7a851d41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d3:9f:ea:f1:69:8f:29:1c:5b:18:b6:de:e0:
25:b8:93:80:ea:6c:90:b2:8d:16:53:e4:64:e0:83:
95:99:21:66:ed:66:d9:a2:24:0a:79:bb:fe:a1:c1:
f8:9c:6e:63:20:7f:0b:9c:3c:4f:a5:9c:c9:f6:73:
dc:f9:73:25:c4:4a:ff:e3:24:c4:ac:2f:bd:8d:a9:
6e:59:90:7a:a9:97:8b:f1:ff:55:44:f8:75:71:3a:
6f:72:4a:58:1a:83:62:8b:6c:ab:70:5a:7b:a5:d6:
75:71:d5:4a:43:0a:3d:5c:de:3d:37:31:30:0e:24:
ff:af:fc:b2:50:bd:34:93:5e:cf:bc:b3:cc:85:ce:
11:73:85:4f:3b:8a:a1:a7:a3:24:65:fa:03:9f:6a:
bb:1b:05:82:45:9c:b8:3a:b3:72:d9:91:44:1c:c5:
5a:df:0e:7a:90:97:a4:8e:a4:2f:b7:0b:37:45:7c:
5a:d5:6a:88:f4:a4:44:8b:30:5f:d5:db:a3:a2:38:
10:b6:5f:e8:19:b0:7b:43:fb:c1:29:bf:03:95:df:
66:9b:63:33:54:6f:31:a3:7c:7c:93:cc:cd:68:a8:
55:e3:ba:99:5b:e2:39:d7:3e:81:34:58:29:fa:aa:
bc:f6:6a:f6:f0:51:d8:49:50:e9:5b:51:2e:3f:93:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:07:81:2F:DB:1D:D1:A1:18:91:39:F2:43:2D:8C:A7:A8:51:D4:1A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8weBL9sd0aEYkTnyQy2Mp6hR1Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.208.0/24
31.59.219.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e1:a3:9b:bc:e0:e2:33:98:cf:6b:b3:b2:a5:7a:3b:25:51:
04:aa:53:f5:5a:7c:fb:ca:09:24:7b:e3:01:9c:ca:1c:ec:44:
60:df:33:b6:3e:2d:c0:87:ea:aa:a0:46:a0:76:fb:af:2d:ff:
4a:07:41:e7:e6:67:f3:4e:2f:ae:00:da:3e:48:5c:da:65:94:
a7:30:80:10:a0:c3:19:bf:b0:3a:43:94:f5:15:df:f4:51:f0:
b2:41:e1:55:bb:b9:38:e4:c3:87:9a:e6:34:3a:5c:41:2b:1e:
c4:2d:5f:fb:5c:85:85:72:2d:ac:b1:b5:14:7b:09:f0:56:31:
d3:44:d6:50:e5:33:f1:52:f3:ef:19:dd:ae:f5:83:dd:a7:c5:
69:8c:c9:bb:a3:09:71:47:78:be:63:8f:76:0b:72:6c:1b:5e:
c0:d2:63:98:b7:ab:cd:22:0e:00:69:7a:2f:a7:36:ad:f0:53:
f8:5f:c3:9a:44:12:14:cf:ff:0f:90:92:5e:cb:91:30:b9:4a:
32:56:19:a3:14:d9:2b:39:cc:0c:90:76:cb:38:3a:87:8c:94:
ba:f6:1f:3f:79:cd:8c:24:b0:aa:d8:3f:bb:c2:1e:74:9b:98:
f9:a9:b4:91:58:e0:b4:c7:00:6c:bc:96:08:f3:d7:a4:1e:f0:
4f:50:29:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:33:03 2026 by rpki-client