Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qy6ni1R4qx6Xwovm9yr1uxT1W1s.roa
File: Qy6ni1R4qx6Xwovm9yr1uxT1W1s.roa (raw, json)
Hash identifier: +CjU08L/o1Ymmov+xZfzfQUngtHku79t0tl6M39+wuw=
Subject key identifier: 43:2E:A7:8B:54:78:AB:1E:97:C2:8B:E6:F7:2A:F5:BB:14:F5:5B:5B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E1C20E4B30310AB53D01FF44A58636979
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qy6ni1R4qx6Xwovm9yr1uxT1W1s.roa
Signing time: Tue 12 May 2026 12:19:38 +0000
ROA not before: Tue 12 May 2026 12:19:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 31.58.38.0/24 maxlen: 24
31.58.181.0/24 maxlen: 24
31.58.183.0/24 maxlen: 24
94.183.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:20:e4:b3:03:10:ab:53:d0:1f:f4:4a:58:63:69:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 12 12:19:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=432ea78b5478ab1e97c28be6f72af5bb14f55b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:b6:5c:63:98:75:a2:50:9d:7c:54:fe:ef:
a8:2a:c0:e2:9c:2a:b8:ac:b8:e6:02:c0:b4:9a:80:
6d:2c:ea:12:50:4b:89:d0:3c:31:e5:44:d1:ac:a8:
0b:a1:8a:dc:0a:ed:12:e5:2c:b6:e3:9c:ec:ac:ef:
e3:1b:f7:88:c2:ed:21:31:34:70:4f:79:7e:3d:18:
a9:a3:4e:c2:52:0a:be:e0:0a:fd:c8:57:db:44:b0:
90:d0:83:9b:64:23:1d:58:61:4c:df:21:15:07:93:
95:bf:e8:c8:10:ff:50:4d:70:81:64:bf:48:94:54:
5c:b6:7f:55:20:45:da:17:cf:2b:8b:21:97:da:b5:
5b:1b:25:3b:2d:14:d4:62:cf:3f:22:78:36:e2:47:
7d:89:17:d7:9b:b3:57:c2:6b:df:91:0a:bb:d2:19:
1e:e3:2b:43:81:98:23:6d:7f:3a:ce:35:57:6d:5c:
c3:ab:6c:52:9c:bd:f0:5d:2d:4a:79:76:a7:cc:e7:
49:87:9e:2a:8a:77:39:3c:07:fa:ac:5d:fa:f3:da:
12:d8:2a:1b:0f:d6:e0:2f:91:34:32:c1:0a:5a:b5:
8d:a2:5e:c8:c4:52:cf:56:ab:86:a4:5c:f6:4d:e3:
87:9d:ea:0e:c1:a7:58:48:a8:d9:d6:92:24:63:34:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2E:A7:8B:54:78:AB:1E:97:C2:8B:E6:F7:2A:F5:BB:14:F5:5B:5B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qy6ni1R4qx6Xwovm9yr1uxT1W1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.38.0/24
31.58.181.0/24
31.58.183.0/24
94.183.229.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:54:30:0c:80:91:d8:ca:7f:07:5e:fd:1d:20:3e:ff:77:c2:
8c:b8:b3:d0:94:6d:dd:ba:10:19:89:7f:be:7e:cf:ab:17:61:
92:a6:c5:3d:3f:8e:f8:69:bc:b7:4f:67:6d:4e:36:44:fe:f6:
22:e4:2c:be:4e:a0:17:72:26:1d:a7:3b:b4:fc:73:03:9d:8f:
83:8c:9b:6b:77:66:3e:d9:d0:06:41:5b:93:8c:1f:ba:77:f5:
c1:fd:ce:38:f8:85:94:a6:c8:d5:4d:60:8f:a5:a7:09:d1:bd:
2e:6d:47:37:3a:de:9b:ff:77:ce:0f:02:7a:bb:25:03:f7:0b:
f3:c2:62:90:2a:6e:49:0a:ce:b1:56:82:22:c5:2b:d3:11:e6:
7d:c2:1c:d2:53:68:52:62:2b:f8:f1:1e:c2:f4:95:6f:b9:5e:
ae:85:c9:35:6a:22:f9:55:ac:bf:ac:c1:8e:66:a6:b5:48:91:
3a:fb:d8:75:13:67:6a:1b:10:28:f6:4f:ed:04:1e:a9:b5:fc:
63:ef:d5:62:c6:e6:06:8b:31:bb:5c:6d:ad:e0:07:2c:80:84:
51:21:f2:27:5d:dd:b4:65:eb:41:eb:a1:c3:35:ea:aa:7d:72:
07:8d:99:fd:e2:cd:d4:95:65:7c:d0:cf:14:bc:58:f1:30:c2:
0b:65:a7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:12 2026 by rpki-client