Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Wc6gzclPM3CBfMr7JEdFYQ2af5I.roa
File: Wc6gzclPM3CBfMr7JEdFYQ2af5I.roa (raw, json)
Hash identifier: jNeSE0MXM6/pz7WKRhVZQgJPkyu/fcpw9b2hNTaIt2c=
Subject key identifier: 59:CE:A0:CD:C9:4F:33:70:81:7C:CA:FB:24:47:45:61:0D:9A:7F:92
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CDCBBC0314B5CDBF2B4CBF82DD5D178AF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Wc6gzclPM3CBfMr7JEdFYQ2af5I.roa
Signing time: Wed 11 Mar 2026 11:50:17 +0000
ROA not before: Wed 11 Mar 2026 11:50:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 31.58.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:bb:c0:31:4b:5c:db:f2:b4:cb:f8:2d:d5:d1:78:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 11 11:50:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59cea0cdc94f3370817ccafb244745610d9a7f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:82:94:74:94:e0:56:af:3e:23:13:cc:d1:
4f:cd:0d:a9:18:cc:dc:5e:85:84:15:aa:5c:f6:d3:
53:31:5d:c9:bb:d5:53:30:19:5f:4c:26:52:7a:27:
43:e5:b6:20:c4:87:01:7f:24:2e:96:9c:a0:4e:f2:
af:69:57:ab:be:83:b2:1f:f8:70:54:48:d9:54:75:
db:04:c9:6a:32:96:78:18:fb:eb:20:5f:85:52:75:
0c:fc:df:4b:dc:79:2d:a6:27:fa:b2:aa:02:86:67:
9d:71:0f:7e:f4:2d:f0:97:84:c4:55:ff:2d:2d:a9:
a4:93:1a:8d:20:63:07:f7:50:9c:76:75:a6:85:4d:
ae:8c:e3:6e:55:b5:c1:6e:39:e0:34:a4:14:7c:43:
c1:59:28:d2:06:72:fb:18:a0:61:e4:80:d3:2b:80:
e4:5d:8d:0a:f5:ba:61:e3:68:21:7b:39:cd:8e:8b:
d0:43:43:c4:d9:d0:f3:59:4f:cc:0f:2f:53:5a:7d:
0f:07:68:28:a6:4e:bf:a5:ea:e6:bc:23:14:f5:b9:
9a:f7:a3:7d:98:16:e6:7d:1d:7d:06:6c:8a:18:60:
62:4a:b6:69:bd:ad:ee:46:3c:6d:23:10:01:e1:c7:
15:1a:7d:41:de:3d:22:ce:28:ed:f6:69:d8:66:29:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CE:A0:CD:C9:4F:33:70:81:7C:CA:FB:24:47:45:61:0D:9A:7F:92
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Wc6gzclPM3CBfMr7JEdFYQ2af5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.49.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ab:0b:b0:a5:84:91:ef:e5:88:ef:6b:dd:5a:36:9b:ce:8c:
f1:59:3f:15:14:06:65:84:71:e7:9b:e8:28:33:9a:41:c6:7b:
d6:05:10:2f:a7:22:4a:50:06:ff:ea:f1:8b:c6:d2:b5:76:39:
09:4c:1e:8a:16:ab:3c:b9:6a:89:aa:26:bb:ba:2d:f4:c5:5d:
bc:ff:fc:6e:d5:3f:75:53:4b:51:5e:57:41:bc:93:43:ae:50:
57:b4:37:5d:69:02:13:3a:8d:6c:2c:15:23:d0:48:a1:4c:da:
77:c0:13:9a:79:66:d1:48:e2:a0:3c:0f:05:20:12:43:da:5b:
20:c5:32:2a:d0:ff:87:e6:6d:25:7d:94:97:e1:b0:59:38:4d:
5d:87:ac:db:49:f0:8a:ff:21:7a:89:4b:b4:62:4a:5f:af:72:
68:53:11:46:42:fe:1a:2f:fa:72:55:78:2b:76:fd:90:2b:23:
97:f4:d8:bc:c9:15:ae:c3:0c:1e:07:ef:6f:db:10:d3:5d:46:
34:f8:14:46:c7:b5:2e:06:14:1a:04:de:c7:9f:79:33:97:bc:
fd:d7:48:64:c6:92:a8:d0:cc:2c:73:1b:f6:e8:04:8f:46:01:
2e:13:6c:28:e5:49:22:94:14:6f:02:5e:98:06:6b:36:5a:af:
07:83:29:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:47:23 2026 by rpki-client