Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cqmIEvTrLHt7ManGw2MUUtEXyRM.roa
File: cqmIEvTrLHt7ManGw2MUUtEXyRM.roa (raw, json)
Hash identifier: mn2SJKbVLzgzbYSqWq7+FLluUN6hWls5rHcJOEYKrqE=
Subject key identifier: 72:A9:88:12:F4:EB:2C:7B:7B:31:A9:C6:C3:63:14:52:D1:17:C9:13
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1DE32CFFBC44BBF2F51CD70BA291061A2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cqmIEvTrLHt7ManGw2MUUtEXyRM.roa
Signing time: Sun 15 Nov 2026 07:53:54 +0000
ROA not before: Sun 15 Nov 2026 07:53:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 31.59.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:32:cf:fb:c4:4b:bf:2f:51:cd:70:ba:29:10:61:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 15 07:53:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72a98812f4eb2c7b7b31a9c6c3631452d117c913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:13:35:60:22:29:e1:3d:64:bd:48:49:9d:
76:50:51:ed:dd:54:1f:58:00:95:35:ad:99:f5:dc:
7b:8d:6f:83:7e:2d:5f:39:9c:9e:71:66:a1:dd:ea:
e9:35:84:e3:68:47:15:e6:64:6e:e5:39:bf:b7:32:
39:60:a0:a3:c6:83:f8:ef:85:c7:17:df:05:6e:72:
80:cd:4f:f6:f6:cd:a9:7a:0b:90:bc:fc:49:af:9a:
fb:6e:47:2e:5d:7c:80:91:2e:18:53:1a:d1:8d:f2:
64:2b:ca:6b:a4:5a:d7:fc:77:2c:23:ae:c2:10:50:
81:ea:17:76:c6:17:69:9f:66:a8:f7:9d:f4:00:fa:
6f:a8:a9:55:14:8b:74:e3:50:e8:a8:16:a9:1b:42:
3b:b2:15:7c:0f:b3:54:70:d6:f8:5f:71:38:84:ff:
5d:1e:61:55:11:84:3f:8a:9e:e3:90:cd:30:7d:be:
99:8a:fc:6b:be:fe:33:fb:01:a7:7b:84:7f:33:ab:
c6:58:e8:08:23:34:aa:b3:d2:e0:df:91:b0:b9:63:
06:a8:7e:4e:8d:c4:1b:97:87:fa:57:e2:a0:a2:10:
24:ba:f3:36:02:26:8e:55:f0:f9:c4:4c:fa:5e:8b:
f5:13:91:83:1e:c8:3f:b0:50:64:18:56:dd:52:34:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A9:88:12:F4:EB:2C:7B:7B:31:A9:C6:C3:63:14:52:D1:17:C9:13
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cqmIEvTrLHt7ManGw2MUUtEXyRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.200.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f9:e3:b0:f4:4d:05:f1:88:97:2f:3b:4a:3b:01:66:9d:c6:
e7:de:e1:9e:58:ff:4a:8d:6e:8c:8a:e2:0a:31:d5:94:c0:6b:
6a:c9:e9:b9:68:a8:3e:1b:91:d2:a8:b9:2f:cb:40:bf:c7:c5:
3c:e3:e1:fc:91:f8:57:a3:8e:00:c9:4b:4e:e5:ed:45:93:50:
bc:25:9a:f0:8a:f2:1e:a4:5a:16:7d:c0:72:3d:78:a4:18:51:
b5:2a:e8:8b:e0:f2:bf:4c:94:41:26:d8:72:d8:19:90:ff:4c:
40:85:b9:4a:84:43:c4:c6:e2:ba:45:cd:54:a8:ed:8a:79:a9:
f1:ed:86:f3:b7:90:4f:c4:69:d2:df:95:8c:71:8f:48:9a:87:
4e:f7:37:d3:8c:18:ae:d8:b1:d4:db:2f:92:ae:d4:ce:96:dc:
2e:d4:cf:46:7f:d4:5f:c4:69:97:24:26:67:cb:9f:8a:63:80:
58:49:c2:20:17:08:b7:f9:3d:3c:27:0f:88:6e:d1:bc:93:ae:
99:3f:62:34:86:b6:5d:76:c8:96:0b:99:e1:29:c0:1d:ab:0d:
22:08:1f:f6:3a:01:a5:53:fd:2d:18:c9:59:a3:fb:fb:64:38:
7d:22:07:cb:93:38:e9:9b:48:4b:f2:98:52:79:53:d6:4c:95:
8c:fd:45:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:27:48 2026 by rpki-client