Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9TACavSkhKajdMFw-yoPgjG2Bdc.roa
File: 9TACavSkhKajdMFw-yoPgjG2Bdc.roa (raw, json)
Hash identifier: ir+Mzr8UJkdAWvbg4wySwAmmGzBUIW95E71wJ95b6cg=
Subject key identifier: F5:30:02:6A:F4:A4:84:A6:A3:74:C1:70:FB:2A:0F:82:31:B6:05:D7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0C4DFFC6C6EBF7473EA7616F167C44E68
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9TACavSkhKajdMFw-yoPgjG2Bdc.roa
Signing time: Mon 21 Sep 2026 16:50:08 +0000
ROA not before: Mon 21 Sep 2026 16:50:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197666
IP address blocks: 31.59.209.0/24 maxlen: 24
31.59.210.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
217.60.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:df:fc:6c:6e:bf:74:73:ea:76:16:f1:67:c4:4e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 21 16:50:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f530026af4a484a6a374c170fb2a0f8231b605d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:77:50:21:69:b8:3b:00:83:7c:c0:64:15:cd:
07:32:af:82:2a:b5:a7:c1:c9:33:33:d5:67:b3:80:
c0:a2:66:14:ea:fd:57:0f:2b:6e:50:a4:2e:72:99:
3b:d0:a8:82:80:12:35:55:c1:e1:2d:8b:8c:6e:d8:
ee:02:ef:ff:d8:13:36:55:13:66:10:04:a4:4c:6d:
ff:b0:da:3b:08:c8:80:da:32:8d:c6:50:24:6c:60:
b2:be:06:bc:94:4c:42:32:53:78:7e:ed:3d:99:82:
6b:c0:2b:47:b5:9d:97:a3:b3:cd:0b:57:7f:6b:ef:
ab:38:46:b8:ff:87:6b:a0:45:2b:66:5f:33:43:0c:
be:44:ca:4e:c6:00:37:af:a8:32:e8:d5:9f:cb:32:
00:13:05:00:60:70:4e:6d:b5:07:f0:b6:ff:ad:35:
ea:27:f7:38:9b:f4:6c:74:df:ca:81:65:61:a3:f3:
b2:21:e9:9e:92:b6:7b:4f:28:bf:61:42:82:b5:67:
4b:c9:01:5b:47:dc:61:04:36:0b:f8:f3:c5:92:f1:
e0:71:93:99:41:1f:66:3d:27:10:38:33:13:f4:16:
3e:9c:42:25:86:13:ac:b7:15:e3:69:0c:47:10:ac:
f2:6a:8a:e8:cf:d5:23:34:29:e2:26:44:09:a2:3a:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:30:02:6A:F4:A4:84:A6:A3:74:C1:70:FB:2A:0F:82:31:B6:05:D7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9TACavSkhKajdMFw-yoPgjG2Bdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.209.0-31.59.210.255
31.59.222.0/24
217.60.100.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fd:24:d0:16:08:e5:e6:4e:6d:ad:77:f8:4f:36:a2:c2:aa:
3c:10:85:3e:c7:e7:4a:e5:60:23:27:e4:71:2a:56:d4:ff:b5:
e5:0f:3b:e2:fc:5e:5e:e9:9c:0e:6a:7f:15:24:c9:d4:70:45:
6e:60:99:16:50:92:86:cc:75:48:6c:1d:37:93:58:6a:9f:ac:
f7:a0:e4:c9:c5:8b:4c:50:5b:d0:e1:22:44:0c:5a:a3:cb:22:
ab:ef:19:43:87:05:9a:ba:98:5b:f0:6f:a6:6d:bf:85:aa:f4:
d1:df:e7:aa:e2:76:ea:a2:01:d4:69:e7:ef:87:d6:ee:51:29:
2f:f5:82:90:38:60:44:54:b1:cf:97:d7:61:b7:5d:f3:b3:03:
1e:b3:7e:da:a7:e2:57:a9:14:88:0e:08:ae:e3:8d:5f:6b:f9:
1e:74:f3:1c:27:27:8c:f0:2b:41:29:69:52:26:a4:98:f0:d4:
78:ce:eb:75:d1:44:7c:cc:e2:22:0d:6e:5c:ef:8b:f6:6c:62:
24:c0:11:61:cf:ad:4f:5b:51:54:dc:f2:01:03:90:44:3d:64:
78:21:4a:19:02:0e:15:18:7a:0b:ea:4b:99:e4:c9:88:e9:e6:
47:ec:0e:f2:82:42:74:9b:49:c5:db:3d:e6:a9:60:bb:0c:31:
68:f5:d0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:35 2026 by rpki-client