Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aGBToMvVXdVmVzgIE2W5GzqJF-g.roa
File: aGBToMvVXdVmVzgIE2W5GzqJF-g.roa (raw, json)
Hash identifier: dEn54BfEx/A3xqMCnJzjymTfHqOf/baIVKrTPRpyyzA=
Subject key identifier: 68:60:53:A0:CB:D5:5D:D5:66:57:38:08:13:65:B9:1B:3A:89:17:E8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F458757380116F1C7FD653B080681E67E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aGBToMvVXdVmVzgIE2W5GzqJF-g.roa
Signing time: Thu 09 Jul 2026 06:18:45 +0000
ROA not before: Thu 09 Jul 2026 06:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146943
IP address blocks: 31.59.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:87:57:38:01:16:f1:c7:fd:65:3b:08:06:81:e6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 9 06:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=686053a0cbd55dd5665738081365b91b3a8917e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a1:1b:ff:8c:e3:a5:0d:ae:9a:e4:65:14:2b:
c7:63:09:4a:7c:66:1e:c9:db:da:b0:98:73:6a:46:
c9:8b:73:e2:05:29:aa:63:ac:36:2e:c0:cd:09:0a:
44:16:5b:f4:c7:f5:da:1f:0b:2b:7e:82:06:dc:c4:
57:fa:48:27:c3:07:63:84:00:3e:e6:d7:66:41:e0:
ad:95:70:70:e0:d2:e1:98:d0:02:5b:98:7d:31:1c:
71:9e:81:9d:88:30:0c:48:c2:6c:70:f2:a8:fd:4a:
80:d0:dc:30:e4:74:7a:c1:e9:be:61:25:05:a4:e2:
0e:e5:81:73:8b:75:48:41:13:57:6c:9b:89:a8:db:
b1:3c:73:8f:83:3e:56:9f:49:b5:6a:12:00:2a:7f:
cc:0c:7d:6f:e8:df:fb:65:73:92:53:8e:3d:ef:ac:
56:b0:8d:46:53:2e:58:d8:84:73:03:aa:d9:13:46:
50:f8:e0:83:3b:fa:fa:69:2a:db:dc:a0:59:e2:60:
e9:0b:fc:a3:4d:38:a6:92:e1:57:de:42:6a:93:7f:
35:2c:02:aa:30:2e:91:3a:c9:a8:7f:f9:26:c5:73:
50:d2:e2:52:6a:0e:de:99:66:37:08:62:25:6d:e0:
d2:25:df:35:a9:b5:f9:57:fe:e5:9f:55:2f:ce:48:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:60:53:A0:CB:D5:5D:D5:66:57:38:08:13:65:B9:1B:3A:89:17:E8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aGBToMvVXdVmVzgIE2W5GzqJF-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:9f:6d:59:07:67:4f:44:96:7d:f5:b4:a8:07:18:a4:6b:4e:
2b:a0:c6:68:89:38:c7:cc:80:50:fc:4c:ba:10:79:fd:c2:1c:
5f:5b:a6:72:6e:2f:ce:8b:bd:c1:3d:04:02:df:3b:87:db:1f:
5c:3e:e9:42:e6:56:21:63:45:22:c8:1c:ba:37:a2:47:f4:2f:
d5:44:91:ff:70:3e:35:69:33:31:7f:69:de:9a:98:de:06:f9:
27:de:9a:2e:a2:e9:1c:6e:a4:61:95:b0:79:02:2e:2a:c9:af:
fb:ec:64:8c:9a:f4:bd:d8:00:a5:36:10:58:fd:9c:0e:18:a3:
30:7c:5d:6e:3f:45:73:6e:1b:8d:f7:4b:e8:76:1c:c1:bc:3d:
48:c6:d4:08:72:26:a4:ef:44:70:38:55:70:ec:46:2e:af:0d:
70:8f:0e:76:ce:cc:4e:ad:44:a9:fa:d9:e4:cd:3e:f5:4d:c6:
d9:f3:9c:d1:ff:2f:01:cd:b9:83:c9:f5:7b:f6:04:d3:5f:a2:
b1:01:23:80:a0:4e:e9:4f:e1:08:22:c2:1d:43:1b:36:06:f6:
17:be:b5:a3:a2:9e:da:6a:f0:f9:b0:a2:08:19:ef:20:f8:fe:
9d:fb:7b:3a:fb:98:ed:22:e3:35:1a:72:55:fd:c3:8a:30:ad:
aa:dd:99:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:50 2026 by rpki-client