Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kCE43bVaSVKrDXlSl4u-jbilPNw.roa
File: kCE43bVaSVKrDXlSl4u-jbilPNw.roa (raw, json)
Hash identifier: YYcMzTTYrDeko0dTo2ufSMXorgjP96+XdW9ws1Je1PY=
Subject key identifier: 90:21:38:DD:B5:5A:49:52:AB:0D:79:52:97:8B:BE:8D:B8:A5:3C:DC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1D4DE33A8A70418074144F6B089DAB4A3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kCE43bVaSVKrDXlSl4u-jbilPNw.roa
Signing time: Fri 13 Nov 2026 12:24:54 +0000
ROA not before: Fri 13 Nov 2026 12:24:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 31.57.4.0/24 maxlen: 24
31.57.60.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.59.74.0/24 maxlen: 24
31.59.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:de:33:a8:a7:04:18:07:41:44:f6:b0:89:da:b4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 13 12:24:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=902138ddb55a4952ab0d7952978bbe8db8a53cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:58:41:f9:68:21:f3:5a:6d:7a:e1:cc:3a:
01:63:8a:5b:59:22:46:e0:c6:26:52:2d:2b:93:29:
f2:11:b4:f9:4d:6e:b0:78:5c:fc:e2:0f:90:10:8b:
72:92:92:b5:0a:85:73:29:22:05:db:a3:d5:e4:af:
38:c0:fe:4b:67:10:62:ac:da:5c:bd:9e:e1:17:47:
b5:b2:07:e3:cb:ef:87:89:00:29:08:ed:f6:87:5b:
d2:92:ab:a2:04:02:d0:2b:23:14:50:8e:b2:29:ed:
2b:47:c4:dc:e9:84:70:d2:df:47:c7:2f:68:05:48:
1d:ee:fd:ae:77:f0:8e:7b:b1:67:a9:4e:29:8e:0d:
e6:e3:13:91:73:e8:ba:0b:2e:ea:74:4d:3c:42:64:
2d:1d:44:bb:95:6d:c4:dc:c7:2a:e5:b7:54:d6:aa:
7f:14:97:db:44:30:2e:f2:5e:8a:4b:41:e0:8c:33:
c8:07:c3:d8:25:20:10:a5:93:9c:c8:1f:b2:c1:ec:
fb:fc:fe:92:4b:d2:42:48:51:dd:1a:03:30:0c:55:
3c:f6:3f:3c:87:e0:21:14:86:8a:27:f3:7d:50:60:
0c:90:57:ee:b9:83:3d:89:b0:93:4a:df:8d:83:6c:
ce:14:f9:44:5c:68:5e:3b:9f:34:ce:1a:bb:a1:49:
c7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:21:38:DD:B5:5A:49:52:AB:0D:79:52:97:8B:BE:8D:B8:A5:3C:DC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kCE43bVaSVKrDXlSl4u-jbilPNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.4.0/24
31.57.60.0/24
31.57.140.0/24
31.59.74.0/24
31.59.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:46:b2:5e:57:ac:83:b6:8e:77:09:61:06:96:81:d6:38:cf:
0a:9f:0d:35:15:50:c8:45:6a:f1:ab:4a:91:a8:4e:df:58:ff:
1d:4f:14:97:39:54:9d:ea:e3:57:c8:cb:e9:03:f7:34:89:5e:
b5:b3:a0:13:65:1d:b2:2d:ef:6e:8b:a2:ba:fb:fa:8e:4d:b5:
84:01:f1:a9:99:eb:08:f9:04:fb:1b:a5:b1:cc:ac:36:6a:f1:
94:a9:7c:e8:38:30:e6:ad:6c:e8:ae:bc:4a:79:cc:39:73:b2:
77:99:d9:56:30:bb:0c:2f:68:61:3b:c6:13:67:b6:bb:9b:e3:
b0:86:d5:48:af:2d:d7:36:84:24:fb:f1:63:95:f6:7c:10:25:
6e:41:d6:29:81:b8:1b:3a:e2:6d:08:88:93:50:68:4c:4c:e8:
3e:21:62:03:0c:a0:78:2d:b9:1b:a8:d3:74:80:3f:cf:0a:89:
40:93:04:ae:ad:3f:49:a7:98:56:54:6f:4a:77:73:1f:93:a7:
f9:bf:6d:39:e2:2f:2c:02:83:bf:51:3a:b6:bf:c0:b3:36:72:
77:c9:28:3f:74:d0:99:24:db:fc:49:48:27:73:00:9a:04:00:
30:d2:b9:f0:25:9c:96:76:f6:89:04:cf:e5:b0:ac:80:51:58:
88:c2:02:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:12:40 2026 by rpki-client