Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b0WaoV1TSav3i0ARc_5fBdh4x9A.roa
File: b0WaoV1TSav3i0ARc_5fBdh4x9A.roa (raw, json)
Hash identifier: qKMxJflIqJwFgP9D86WCxW8erbbbRlo29c8FRD2W3uo=
Subject key identifier: 6F:45:9A:A1:5D:53:49:AB:F7:8B:40:11:73:FE:5F:05:D8:78:C7:D0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1B20DC621995179CAE15CEA0B9B4F2134
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b0WaoV1TSav3i0ARc_5fBdh4x9A.roa
Signing time: Fri 06 Nov 2026 18:10:09 +0000
ROA not before: Fri 06 Nov 2026 18:10:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141968
IP address blocks: 31.59.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b2:0d:c6:21:99:51:79:ca:e1:5c:ea:0b:9b:4f:21:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 6 18:10:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f459aa15d5349abf78b401173fe5f05d878c7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b6:57:d5:78:fc:9c:89:d3:ed:bb:6d:23:8e:
a0:e2:7a:42:4c:03:e3:72:05:b0:15:d3:9d:bb:5b:
6f:08:80:72:28:90:e6:a7:d6:62:4e:c4:34:c5:eb:
d8:7a:12:74:d8:08:d3:98:c2:e1:06:f3:de:49:87:
2c:6a:7a:ea:8e:10:8e:f4:a9:6b:02:7e:70:bb:70:
55:54:65:c5:4a:4e:48:f6:1a:3d:b2:3e:28:e5:09:
5b:d6:7d:69:63:86:94:d8:6a:5e:d9:27:42:68:0c:
1e:94:89:74:95:a3:f4:ae:4a:22:3a:74:f9:a0:45:
bf:34:42:ba:3a:13:d0:b3:0f:08:f6:c1:cd:c4:e8:
45:02:12:f1:cd:1a:6a:75:86:bf:51:35:8e:cf:5e:
dd:17:d3:69:32:64:3e:15:22:02:a3:c7:d2:57:ed:
e4:76:d1:c4:15:32:f5:16:29:91:dc:36:ca:fc:2c:
cc:ae:36:70:84:9c:73:76:fb:bc:47:b6:4b:8b:0a:
ce:2f:bc:60:5a:90:94:b6:97:b0:6d:6a:ce:ef:72:
d1:71:0c:09:cf:39:58:69:da:f7:3b:b0:0c:cb:bf:
66:7e:91:2c:96:75:24:08:98:3f:9c:53:63:7c:7c:
26:f0:91:9a:ac:8d:7d:71:91:13:a2:b6:3e:9b:d4:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:45:9A:A1:5D:53:49:AB:F7:8B:40:11:73:FE:5F:05:D8:78:C7:D0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b0WaoV1TSav3i0ARc_5fBdh4x9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:30:8d:df:50:41:83:14:67:be:a6:1f:74:46:06:a9:3a:24:
74:64:8f:8d:d2:a5:1d:89:38:a9:ca:19:47:fc:a9:28:de:71:
aa:cc:b2:ab:58:b2:2e:7a:3e:97:35:a2:83:4f:dd:57:4d:5f:
a2:b2:b2:9b:9e:ba:26:7d:95:6e:36:44:a3:07:0f:ec:73:14:
00:c6:16:7b:a6:a8:56:a9:39:44:bf:5c:e3:8e:55:54:08:15:
fe:8f:19:31:8d:95:74:20:15:34:34:e8:4b:29:4b:e5:fe:1b:
80:34:f8:04:b0:96:17:f6:96:08:f0:fa:5c:4b:c9:56:17:8a:
bf:43:f8:97:ae:f2:f3:97:05:cd:5a:ca:c6:e8:1a:9d:55:ef:
ab:c2:a0:1d:04:63:77:21:33:16:67:08:7c:32:8d:10:24:b8:
04:ab:39:e4:e2:d5:de:8a:2a:da:6c:5a:7a:c8:30:2a:1e:13:
cd:67:83:48:36:11:ee:9f:cf:5e:f1:e2:04:fc:51:22:58:c2:
fc:ac:ba:53:95:7e:a8:51:48:08:b1:1d:24:66:6f:bc:3e:a6:
f5:ea:ad:7f:40:6b:bf:97:f7:8e:96:8b:c2:e1:d4:52:25:0e:
b2:dd:72:59:26:72:01:b1:9e:02:47:a5:01:fc:2d:ee:c5:00:
55:5c:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:28:45 2026 by rpki-client