Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Kbuvo8y9TvUMMzXSMX7mg-ax1xw.roa
File: Kbuvo8y9TvUMMzXSMX7mg-ax1xw.roa (raw, json)
Hash identifier: FQoAGNpefkrLapluPuF6ww+jEZ5Qs23hYy+LOrkx57Y=
Subject key identifier: 29:BB:AF:A3:CC:BD:4E:F5:0C:33:35:D2:31:7E:E6:83:E6:B1:D7:1C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0E1B20802489FE81E060532062229CCFA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Kbuvo8y9TvUMMzXSMX7mg-ax1xw.roa
Signing time: Sun 27 Sep 2026 07:08:55 +0000
ROA not before: Sun 27 Sep 2026 07:08:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53055
IP address blocks: 31.57.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:b2:08:02:48:9f:e8:1e:06:05:32:06:22:29:cc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 27 07:08:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29bbafa3ccbd4ef50c3335d2317ee683e6b1d71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:01:dc:48:a4:9d:40:33:64:03:d3:b8:b6:
ef:34:c9:28:d9:5f:dc:35:59:8b:b6:2a:65:fd:15:
dd:8e:0e:eb:a2:09:9e:f6:41:b3:4d:11:22:82:0f:
e3:c4:f9:7c:09:20:e7:2f:b2:bf:e9:7d:96:d3:01:
7a:bd:73:a9:15:6a:9e:88:3c:62:52:10:c3:82:8f:
6a:49:57:dc:0e:58:fe:db:10:5c:7b:e8:73:ae:b8:
28:80:02:a0:a5:e5:36:d7:58:1c:55:42:0c:d0:90:
5a:20:1d:97:27:b8:fc:c1:2b:1a:fd:50:21:d7:d6:
d8:a8:92:ac:db:1e:f5:39:d3:d3:31:b4:d7:2f:78:
74:cc:e7:17:5f:93:ef:86:a6:eb:ac:21:03:6a:88:
88:4f:92:53:b7:3b:f6:5c:01:9d:13:40:5d:94:9e:
8c:03:40:c5:20:b5:bb:1e:8c:98:78:b3:91:e5:64:
a0:3e:e7:32:f1:89:13:10:91:1e:ce:68:81:41:0a:
36:11:9e:21:02:5f:63:ff:10:74:08:c8:39:05:58:
8b:e3:1d:6f:97:73:69:f0:44:21:4a:4b:a8:02:f8:
57:b1:3f:7c:b8:91:53:da:8f:dd:24:97:4e:28:6a:
b9:b6:c6:3f:04:ec:b4:e9:68:67:23:5b:29:26:77:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BB:AF:A3:CC:BD:4E:F5:0C:33:35:D2:31:7E:E6:83:E6:B1:D7:1C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Kbuvo8y9TvUMMzXSMX7mg-ax1xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.3.0/24
Signature Algorithm: sha256WithRSAEncryption
79:41:ee:50:96:83:0a:cf:34:b4:18:ed:ca:ee:67:31:7e:33:
db:b2:b7:2b:31:d3:d9:21:cc:4c:0a:ae:bd:02:eb:8c:c2:6b:
97:ee:5b:63:26:eb:c0:51:a2:55:47:32:8e:70:38:15:ef:9f:
01:90:a8:39:c4:17:39:0a:7a:f7:04:6e:94:81:04:35:d4:3d:
fa:5f:96:73:a2:c5:d3:02:77:bf:21:c2:24:e4:0a:47:93:ba:
95:eb:3b:8f:39:d4:25:21:af:0f:ea:47:bb:86:e5:52:e0:d0:
d9:2e:62:63:e3:f5:72:ea:f6:32:ce:91:a2:8d:90:93:2c:dd:
53:4e:59:42:3d:85:f2:ac:89:1c:d2:9b:d4:b8:ac:5d:9f:f9:
33:f3:57:a7:62:b6:3b:7a:e6:4b:d6:ac:a6:f2:df:59:d3:80:
89:30:f9:1b:78:68:c0:f9:b8:8b:5b:b6:cb:0f:c1:be:6e:0c:
d3:82:49:fa:e4:a2:40:bb:63:cf:d5:e1:60:cb:3e:6c:94:20:
b7:12:c4:6c:7a:99:cb:d7:21:bb:fa:59:75:68:68:e7:28:a6:
50:ae:1b:a4:ae:07:c5:d8:a6:9c:9f:a0:08:02:81:c8:5d:7c:
12:a7:0d:ce:0d:ea:b9:4f:60:19:68:e4:c8:fb:06:5f:0a:fe:
cd:de:17:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:47:45 2026 by rpki-client