Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U8QE87fmu-_4Ndw1_D-J9Sj-E9M.roa
File: U8QE87fmu-_4Ndw1_D-J9Sj-E9M.roa (raw, json)
Hash identifier: wv6iwe3DxqnIgOzoSuRSP/qZNJEO2eYnRTcgqtyYYZc=
Subject key identifier: 53:C4:04:F3:B7:E6:BB:EF:F8:35:DC:35:FC:3F:89:F5:28:FE:13:D3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A17C3588786F558CBD53C6EC603DA5DFB3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U8QE87fmu-_4Ndw1_D-J9Sj-E9M.roa
Signing time: Tue 27 Oct 2026 07:14:05 +0000
ROA not before: Tue 27 Oct 2026 07:14:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210464
IP address blocks: 31.59.141.0/24 maxlen: 24
31.59.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:35:88:78:6f:55:8c:bd:53:c6:ec:60:3d:a5:df:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 27 07:14:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53c404f3b7e6bbeff835dc35fc3f89f528fe13d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a8:1e:e1:c4:4c:2d:e4:9c:09:bf:47:18:ca:
b3:45:c6:74:d4:c0:51:2c:5e:01:59:83:c2:87:f8:
2b:be:54:08:ce:ef:a4:c4:a2:7d:73:fa:da:06:d8:
92:77:9e:fb:9e:80:60:29:81:a3:a7:25:16:f8:f2:
69:ed:0c:26:ae:27:35:c8:97:bb:ab:db:09:ae:38:
46:63:01:28:63:5a:07:8b:01:4d:25:e8:a3:c2:44:
2c:0b:a3:43:90:ff:ba:ea:5d:22:87:30:20:b0:4b:
d4:c9:5d:d9:36:61:f1:40:99:5f:be:ed:82:39:4e:
70:42:f8:7c:ca:7d:d1:92:85:9a:b3:62:07:21:71:
de:30:6d:35:87:72:a0:0d:63:10:a5:54:4f:a5:12:
b9:f6:38:14:92:36:a8:86:e0:c1:2f:a7:34:5f:a7:
94:87:ce:a1:54:e2:1a:ae:68:37:61:60:df:bf:5d:
69:f6:b8:5b:8d:f8:fd:22:6e:b4:85:6d:ef:bf:10:
9c:49:b6:b5:ab:8e:5b:94:5a:06:66:3c:55:d5:06:
d4:69:8f:fd:52:4b:77:da:b1:a2:2e:c2:b1:3d:a4:
7f:1c:c8:d7:de:15:0b:94:80:2f:48:bf:7a:a4:c7:
db:91:83:76:19:6f:a6:f7:fd:b9:e8:f5:b7:a2:ac:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C4:04:F3:B7:E6:BB:EF:F8:35:DC:35:FC:3F:89:F5:28:FE:13:D3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U8QE87fmu-_4Ndw1_D-J9Sj-E9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.141.0/24
31.59.164.0/24
Signature Algorithm: sha256WithRSAEncryption
18:62:10:a5:10:3e:0d:ca:76:57:cd:20:36:74:b7:df:a3:33:
cb:c1:57:81:ee:85:ed:a3:39:77:9c:62:10:ef:59:9c:c7:d3:
2e:6f:31:70:87:37:53:fe:b5:92:15:41:75:62:4b:56:02:4d:
f9:94:7f:0c:0d:31:f7:25:d0:39:13:d0:67:e6:d4:4a:ea:7b:
4a:5f:ce:2b:2b:90:19:a4:61:47:b3:00:65:a5:92:f5:0f:b8:
44:11:40:f8:3a:6c:bf:eb:1b:42:6a:6a:cf:03:1d:6c:51:c5:
ec:56:a0:5b:fc:4a:76:be:9e:2b:0e:0d:28:85:3e:ab:d1:35:
53:bf:c9:db:0d:f1:ce:3c:10:bf:55:e7:34:e0:71:d1:f0:02:
d8:8d:3e:7e:af:06:b0:e0:b4:1d:31:a1:c0:9a:68:db:1c:9c:
43:ae:51:16:4e:98:8f:57:e1:ce:85:48:78:43:c7:f5:42:fd:
b0:9e:80:2d:de:5a:24:78:79:a8:eb:50:90:4d:63:5a:fa:c8:
30:fd:25:4b:ca:63:e4:ef:9d:87:2a:b1:c5:64:d9:0d:03:56:
00:dc:0a:75:26:1b:ba:fb:0a:be:c3:06:f8:94:26:7b:44:aa:
37:71:d3:4e:29:dd:3c:95:98:12:3a:33:0f:17:20:fe:64:ac:
a7:8e:15:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:39:59 2026 by rpki-client