Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cPnhCkXeShkg_a6SL1xFn2krpmI.roa
File: cPnhCkXeShkg_a6SL1xFn2krpmI.roa (raw, json)
Hash identifier: uLWroZ6pbwt6dMPvQAboR9AqjnheIrh+H2flhZkxTIM=
Subject key identifier: 70:F9:E1:0A:45:DE:4A:19:20:FD:AE:92:2F:5C:45:9F:69:2B:A6:62
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1921AB51F7420BBBF47234B07EDDA58EA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cPnhCkXeShkg_a6SL1xFn2krpmI.roa
Signing time: Sat 31 Oct 2026 13:16:26 +0000
ROA not before: Sat 31 Oct 2026 13:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219521
IP address blocks: 31.58.246.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
217.60.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:1a:b5:1f:74:20:bb:bf:47:23:4b:07:ed:da:58:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 31 13:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70f9e10a45de4a1920fdae922f5c459f692ba662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:de:7d:af:15:55:d9:0d:e1:5c:3b:98:0a:
e0:e8:62:7b:16:77:de:8e:23:4e:ba:4e:f8:2a:25:
a3:8d:6b:5c:bd:ff:1c:4e:21:e5:c4:8e:67:ad:e7:
e4:3e:b4:86:ca:28:1f:ba:7f:88:41:1b:97:f4:ee:
93:9e:9b:88:cf:67:0f:8a:30:62:f4:b8:9b:3d:99:
1f:5e:56:a0:6f:88:4c:75:8d:64:80:0f:c2:72:7b:
67:12:0a:e9:59:c7:3c:d3:40:b8:4b:ea:9b:5d:3d:
3f:e5:74:d2:5a:83:56:32:0e:b4:db:54:3a:1e:5e:
73:ed:73:ea:66:bd:3b:47:49:bd:91:7d:b5:c6:8c:
3a:d2:13:1d:4d:f9:f5:0a:6b:8e:4a:85:3c:95:6d:
25:d8:09:9a:ed:5e:4b:72:6a:b1:c1:9e:a9:60:b3:
0a:91:a1:09:3e:42:ad:f0:33:45:8a:ee:02:d7:4b:
ef:67:3a:52:35:10:49:7c:2b:34:d7:d4:81:a6:91:
4b:1a:f7:00:f1:21:b9:01:a9:9a:88:02:96:16:13:
bc:f5:4c:9d:12:19:67:3a:ce:56:ac:f2:c0:38:ec:
ab:89:2b:b9:09:03:53:72:43:46:c8:64:cb:5c:9d:
ea:ae:0f:60:2e:18:14:9b:98:16:0b:a1:3b:26:d7:
f0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F9:E1:0A:45:DE:4A:19:20:FD:AE:92:2F:5C:45:9F:69:2B:A6:62
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cPnhCkXeShkg_a6SL1xFn2krpmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.246.0/23
31.58.250.0/23
217.60.187.0/24
Signature Algorithm: sha256WithRSAEncryption
78:3d:f1:d6:6e:1e:52:84:2d:b0:74:7f:62:67:12:0e:1a:72:
ce:5c:64:7f:3d:9a:33:02:ad:f4:f4:d0:d7:43:36:1b:a1:2f:
d4:6e:56:1e:d9:6d:48:a1:89:a3:3f:4e:12:01:26:a5:b7:7a:
f8:ce:cc:41:da:a2:46:0a:b5:e2:73:4c:ae:28:84:c6:91:42:
00:52:08:dc:6a:f6:23:59:47:15:cf:ba:44:d9:88:55:1d:6e:
2e:89:bd:37:ed:86:e7:98:c3:63:1d:49:7e:45:50:fd:07:bc:
d9:5c:4b:bc:37:41:92:d7:d0:a9:aa:81:e3:de:7d:8a:71:c5:
da:12:d8:fc:cf:2e:f1:e6:d2:83:04:0e:ae:f2:ed:66:40:66:
55:5e:0e:ff:a8:71:f3:e5:58:a4:e0:4c:58:4a:54:6c:9d:69:
5a:42:be:1b:2c:4c:c0:53:c5:ee:95:54:f5:ec:0e:76:f7:95:
80:1b:ba:36:d1:64:c2:b0:2c:ca:d6:e0:d1:29:c3:5f:6c:b7:
76:39:e3:b2:8a:e2:73:5f:80:ea:da:ff:bc:43:05:f2:01:da:
55:51:51:1a:63:e1:d5:52:6a:f5:44:fe:f6:c6:33:18:df:2e:
25:e0:a8:78:eb:7f:0a:b4:0a:8e:02:ae:0e:3b:d0:61:f7:34:
c3:02:d4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:26:03 2026 by rpki-client