Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mD-IUnYcGUX6-Q0Q_wD-8E2GkuU.roa
File: mD-IUnYcGUX6-Q0Q_wD-8E2GkuU.roa (raw, json)
Hash identifier: ntZA2qLj8YGKpcEQAvJiDBzWBW2ivuGoGDorooXlvDo=
Subject key identifier: 98:3F:88:52:76:1C:19:45:FA:F9:0D:10:FF:00:FE:F0:4D:86:92:E5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CE5C44AB65D143C17AF4F35A2D759CE41
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mD-IUnYcGUX6-Q0Q_wD-8E2GkuU.roa
Signing time: Fri 13 Mar 2026 05:56:12 +0000
ROA not before: Fri 13 Mar 2026 05:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207155
IP address blocks: 31.59.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c4:4a:b6:5d:14:3c:17:af:4f:35:a2:d7:59:ce:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 13 05:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=983f8852761c1945faf90d10ff00fef04d8692e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:4d:f7:e6:2e:83:ba:9d:45:1a:d1:c8:34:
e6:1a:7a:c3:a1:31:10:3b:ab:97:17:4d:45:d1:a2:
52:4e:ab:e7:7b:91:e7:5a:44:f3:4f:56:a7:fe:00:
7c:17:c8:e2:5a:08:20:ed:a4:22:d3:7c:df:f6:5d:
cc:50:d1:a1:2e:63:de:bb:84:8e:ce:17:4c:9c:cf:
c1:ab:26:fe:bd:2a:43:82:80:67:35:d3:a3:81:15:
76:14:c9:71:c8:3d:28:7e:86:e6:fd:05:13:77:25:
3b:be:07:bb:ce:9e:10:c8:1d:a3:dc:21:d0:27:bd:
c2:68:69:67:26:79:c4:37:66:c2:f5:9a:a9:30:2d:
da:85:bf:bd:cc:52:5a:e3:4b:97:1c:25:a2:49:b7:
65:2a:a1:f9:4d:4e:61:5d:3e:a9:10:fa:95:c8:7d:
6c:35:f8:c6:39:99:89:c5:11:c3:a1:d1:8b:c7:9b:
30:21:74:b1:aa:c0:a8:74:04:31:b5:59:a4:6c:48:
55:2d:9c:67:3e:32:23:b0:2a:a4:a3:3c:a8:87:d8:
9f:db:e5:12:c7:66:c6:c2:e4:86:72:a5:73:be:e1:
48:4c:1f:02:2b:58:b8:da:29:dd:a1:3a:bf:bb:a2:
14:83:af:93:34:c9:0a:8c:9f:00:ff:1a:8f:04:c8:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3F:88:52:76:1C:19:45:FA:F9:0D:10:FF:00:FE:F0:4D:86:92:E5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mD-IUnYcGUX6-Q0Q_wD-8E2GkuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:85:06:9b:47:f1:4d:c1:25:d1:eb:5a:77:e5:e4:b8:b8:64:
3b:38:71:ac:de:fa:e0:e9:87:eb:9a:eb:50:86:13:e8:dd:2c:
d9:15:68:b1:bb:65:a6:af:80:18:26:3d:f3:4e:9c:84:83:e3:
e4:9d:5f:9d:27:f6:3c:10:76:8a:65:ec:e5:39:87:73:77:9e:
27:88:45:94:dc:4c:53:18:b3:1a:e9:33:4d:48:99:f6:87:d5:
d8:11:a3:96:ed:de:05:5c:34:e7:f4:34:e5:86:e4:ee:b1:b6:
bb:37:e1:d7:a5:53:b8:f5:3e:60:61:47:44:73:9d:7e:aa:6a:
77:b6:95:69:40:98:8f:ce:f3:90:4e:c9:79:5c:a4:26:67:59:
62:e8:03:b3:7d:53:d2:17:de:d3:d2:b4:5d:54:6c:b1:d2:eb:
40:67:7a:21:3b:e8:49:63:3d:df:ab:d8:22:9e:20:03:ca:32:
c5:bd:11:a6:84:8a:9d:22:c1:08:f3:94:0a:eb:10:a3:74:90:
fe:28:69:57:46:59:5d:22:c1:15:83:f8:05:4d:e9:15:92:6b:
a1:6f:39:23:25:49:e4:f8:df:fe:c1:df:ee:78:0b:3e:c9:ce:
55:b4:8a:98:4b:ed:ac:2e:ae:27:00:3b:ab:91:5a:f7:de:35:
df:08:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:29:04 2026 by rpki-client