Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cxc3DqrFsTZ-jA7dtXY02nk_fs8.roa
File: cxc3DqrFsTZ-jA7dtXY02nk_fs8.roa (raw, json)
Hash identifier: 2QqA5hbi4icA8JspzTXZjPx/XHFV2y2GlMJ6EkzcQfk=
Subject key identifier: 73:17:37:0E:AA:C5:B1:36:7E:8C:0E:DD:B5:76:34:DA:79:3F:7E:CF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F314E074D590EA211F0222BFD315B5EA7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cxc3DqrFsTZ-jA7dtXY02nk_fs8.roa
Signing time: Sun 05 Jul 2026 08:03:45 +0000
ROA not before: Sun 05 Jul 2026 08:03:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395374
IP address blocks: 31.58.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:4e:07:4d:59:0e:a2:11:f0:22:2b:fd:31:5b:5e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 5 08:03:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7317370eaac5b1367e8c0eddb57634da793f7ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:9a:80:19:f0:af:8c:1e:af:6f:fe:fa:70:
6b:2c:8e:73:aa:ef:77:63:98:13:58:d9:82:db:6d:
97:8d:bb:40:cf:00:12:65:c0:70:61:09:7d:c9:18:
34:04:61:62:3f:4b:85:c9:4a:d9:81:d2:56:40:94:
fb:c5:37:39:ca:e7:c1:e6:29:b3:c8:83:8c:fe:22:
8e:56:b3:8c:cf:2f:f8:5a:53:24:4f:cf:db:6a:47:
b5:ab:c4:b4:4a:a9:4d:cd:31:50:9c:d9:ac:2c:53:
6f:e3:76:71:58:a4:58:dd:f3:08:01:83:b8:b2:5d:
df:c3:31:47:c5:da:9f:28:a3:99:22:f7:cf:b4:4f:
d0:45:e8:ca:8e:40:1e:14:34:4a:cf:3c:80:10:ac:
0d:e2:dd:41:b2:4f:75:74:97:34:d5:a2:36:81:0b:
1d:0f:7a:f9:ea:97:7c:68:4b:53:67:32:e5:2e:b4:
b0:e6:47:16:dc:c8:d3:59:25:be:d5:49:b3:0b:36:
68:2a:d5:75:9a:be:48:d2:41:8b:38:4f:78:46:29:
d0:fa:6b:34:89:22:d5:be:db:39:47:2a:7a:19:d0:
aa:25:97:0f:94:8c:9c:c1:82:3f:f8:43:57:99:86:
73:49:9f:0d:71:2b:e8:50:44:65:be:74:e5:c8:62:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:17:37:0E:AA:C5:B1:36:7E:8C:0E:DD:B5:76:34:DA:79:3F:7E:CF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cxc3DqrFsTZ-jA7dtXY02nk_fs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.65.0/24
Signature Algorithm: sha256WithRSAEncryption
14:fd:bd:45:bd:c6:21:19:42:9f:2b:cb:ee:f9:ed:90:ca:6d:
60:1b:97:3c:db:7e:ea:2a:29:61:5f:41:f2:f4:c5:ec:bc:ef:
1f:d3:be:c8:dd:62:f2:57:b6:80:98:10:1d:e7:44:d2:9f:54:
0d:99:0d:aa:77:6e:a6:20:c4:5b:1f:a6:55:6d:15:d2:9f:dd:
8a:7b:58:6f:b5:68:2f:48:71:c5:99:8f:fe:41:36:dd:54:85:
ac:6a:e4:c6:9a:92:a4:b7:74:bf:f3:2b:ad:9e:b1:18:cb:9f:
a9:1a:db:f5:e5:2f:b7:d7:9b:6f:59:d6:66:b8:98:f1:39:05:
8e:82:46:2c:5f:7d:e2:d5:51:e2:1c:62:67:cb:4d:0c:c9:7d:
42:56:71:9c:b4:9b:93:45:db:4c:c0:35:37:72:51:6e:d8:96:
bf:8a:12:62:3a:4f:95:95:84:f3:59:82:be:52:e2:6b:d0:f8:
3e:6e:e9:fa:de:22:99:e8:07:72:a1:0d:b5:64:80:14:91:6d:
09:1b:2f:bf:75:93:23:3e:69:a1:6a:8e:9c:34:3e:42:3a:b7:
c9:10:ef:4b:dc:95:80:a9:ce:71:91:78:e0:72:f2:34:61:5f:
05:f2:0a:77:9a:bd:6b:37:37:de:4e:b9:e9:9c:c2:a4:6e:fe:
87:64:c6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:05 2026 by rpki-client