Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N_nWJUmXd39koGTMXbKdDTMZawQ.roa
File: N_nWJUmXd39koGTMXbKdDTMZawQ.roa (raw, json)
Hash identifier: ou0RMTzXWODvPCc0Qcx07kTGqkoBZEBgWF5s9cWo77w=
Subject key identifier: 37:F9:D6:25:49:97:77:7F:64:A0:64:CC:5D:B2:9D:0D:33:19:6B:04
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1C6A446955E299EB75CFAC5374E0E984D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N_nWJUmXd39koGTMXbKdDTMZawQ.roa
Signing time: Tue 10 Nov 2026 18:06:56 +0000
ROA not before: Tue 10 Nov 2026 18:06:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138077
IP address blocks: 31.58.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:a4:46:95:5e:29:9e:b7:5c:fa:c5:37:4e:0e:98:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 10 18:06:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37f9d6254997777f64a064cc5db29d0d33196b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:f3:12:1e:a5:e0:02:44:83:5d:26:c0:8a:
55:fa:0e:47:01:51:18:36:54:ac:3b:c0:f0:b0:9a:
15:77:61:50:ab:99:97:8d:49:53:6e:4a:24:04:7f:
0b:83:ee:bb:fc:78:f0:a0:98:a4:5f:ba:ab:c7:f7:
04:e5:18:2a:3a:c0:2d:1b:de:5b:c8:8d:6c:44:7c:
d6:d7:f1:99:47:67:81:8f:7d:45:0f:50:6a:60:ea:
8b:98:8b:8b:09:1f:fc:01:e3:ba:8d:61:62:94:2c:
03:9c:98:8d:dd:e1:db:dc:e6:12:32:cb:8f:40:29:
00:33:82:9c:64:77:46:26:bf:ee:53:b9:30:40:51:
d0:c1:01:5a:2c:c3:33:e6:1e:49:33:42:f7:31:70:
53:fa:99:ce:b3:0c:71:68:1c:9c:07:58:35:ec:e3:
b4:28:23:58:94:de:ab:20:80:bd:a6:c9:c1:67:5d:
e2:0b:22:c9:c0:9b:1e:33:34:40:62:56:d0:20:05:
32:07:f5:46:43:6f:b5:8b:4c:7a:87:a3:97:00:57:
11:7f:c7:20:17:ba:d6:8d:2c:76:93:b7:af:d9:e0:
97:3d:f6:39:c7:62:9d:ed:09:5b:69:da:cb:49:f2:
5a:34:1f:d2:c6:dc:fc:51:4b:05:de:c2:cf:fb:31:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F9:D6:25:49:97:77:7F:64:A0:64:CC:5D:B2:9D:0D:33:19:6B:04
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/N_nWJUmXd39koGTMXbKdDTMZawQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.33.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:99:22:94:09:47:b6:c8:eb:e2:f5:d8:fc:6d:96:75:f8:3c:
12:25:e8:1b:30:0d:a0:38:d5:a6:65:e8:2c:df:05:dd:a9:79:
9f:be:3b:2e:91:f4:7b:0a:59:e0:92:15:bb:e2:83:76:db:07:
5e:b7:28:f2:1d:71:f5:6b:56:cf:b9:f3:58:c9:f2:4c:95:81:
5e:02:ad:ed:4e:6d:b1:fc:21:46:ad:8e:38:8c:b7:bb:bd:3f:
ca:a8:35:d7:b6:fc:0f:12:b3:7b:04:2a:86:21:45:9a:1c:6f:
25:98:10:c7:c2:d7:1d:81:49:1d:3c:ea:4a:9e:50:28:c5:2c:
5f:68:3a:23:a4:f9:ec:02:f9:ca:f8:1a:c1:7c:1e:9b:a8:91:
80:b0:3d:a4:1d:be:bf:58:21:37:70:5d:74:1b:c3:cd:de:f1:
08:cf:48:5b:ed:67:1e:c1:dd:d8:8b:86:10:61:cd:bc:65:58:
41:01:35:54:0a:0e:dc:b3:72:0a:87:99:b9:32:eb:af:1b:77:
4f:b7:24:03:af:5d:e2:a3:cc:f4:70:b6:25:17:ec:32:ea:3f:
9f:17:07:5c:93:47:ad:01:91:56:60:fa:e4:f7:5c:dd:c0:2e:
78:10:43:a5:45:d4:0b:0a:05:61:bc:f1:ef:2c:fa:c1:a2:e6:
c5:f2:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:30:27 2026 by rpki-client