Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mwStp2Tma3nbLY-XDHuuiRAsXnY.roa
File: mwStp2Tma3nbLY-XDHuuiRAsXnY.roa (raw, json)
Hash identifier: ZizSmvtVPBfahzXxizh2QIW0xA7N0wazdyyYCG6GUZk=
Subject key identifier: 9B:04:AD:A7:64:E6:6B:79:DB:2D:8F:97:0C:7B:AE:89:10:2C:5E:76
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D298E8919B9C7AB11D5ADB5E95250A4AA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mwStp2Tma3nbLY-XDHuuiRAsXnY.roa
Signing time: Thu 26 Mar 2026 09:51:40 +0000
ROA not before: Thu 26 Mar 2026 09:51:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214578
IP address blocks: 31.57.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:8e:89:19:b9:c7:ab:11:d5:ad:b5:e9:52:50:a4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 26 09:51:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b04ada764e66b79db2d8f970c7bae89102c5e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:3a:e8:a5:4a:bd:e9:3f:1b:16:86:4a:9f:
4c:2b:aa:91:74:e3:b4:bf:cc:3c:3b:90:c2:79:93:
f8:12:52:b0:25:dd:f1:e1:c6:fd:0e:98:3a:4a:5f:
b6:55:00:40:84:56:a5:31:be:ab:65:37:85:a9:0a:
b7:46:33:55:af:1d:0a:0e:6e:c2:06:68:d7:3e:97:
fb:52:9a:1e:6b:70:95:62:7f:60:36:6f:25:76:62:
ef:89:2c:43:d3:35:66:68:ea:96:ee:36:c1:d5:6f:
a9:0e:2a:84:81:3b:55:54:eb:8f:d6:75:4d:6a:6e:
bd:55:70:19:65:bb:ef:b0:fd:5e:e2:e6:f6:1f:6d:
7d:12:fc:ac:6e:b6:27:cd:a1:41:18:90:3c:7b:69:
b5:d2:31:d4:b2:eb:57:5e:80:20:9c:37:31:ba:17:
9c:e1:0f:49:4e:93:73:8d:c7:ac:45:08:23:f7:b6:
81:51:94:5f:7b:fc:d9:18:ff:4d:cb:a1:22:df:0d:
b9:58:7c:66:bd:7b:21:e5:13:09:5f:14:18:5b:d6:
18:b2:b3:06:f7:c8:2b:bc:1a:26:da:41:9d:4f:6f:
71:7d:3f:a9:1d:4d:5d:3c:c5:c5:5d:fc:44:ba:60:
03:8d:7f:e1:78:1a:54:f4:78:26:d8:c7:62:1a:e0:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:04:AD:A7:64:E6:6B:79:DB:2D:8F:97:0C:7B:AE:89:10:2C:5E:76
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mwStp2Tma3nbLY-XDHuuiRAsXnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.166.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e3:e2:fa:c7:83:95:31:10:bc:5b:17:e9:1d:6e:56:fd:65:
ad:63:90:33:f7:9b:ea:fc:19:05:5c:02:ba:9b:82:8e:0c:07:
71:87:51:d4:eb:23:f1:32:42:c2:d1:2c:64:d5:96:88:82:09:
8e:88:d2:26:16:c7:57:1b:88:0d:11:72:8b:a2:8d:35:66:a6:
7e:76:ee:91:a0:e9:23:b5:14:46:6d:d9:c4:71:b7:41:56:59:
d0:59:f6:84:b6:bb:2f:16:26:f2:dd:97:f2:61:96:6a:27:ee:
4e:5d:47:9d:01:ec:4a:cb:b8:e9:c4:d2:6b:3d:13:a0:c6:1b:
49:3e:ba:d1:28:53:9b:4b:7a:3b:98:d7:40:16:6f:10:57:66:
46:6b:17:c6:04:b8:44:d6:47:83:09:de:af:fe:4c:bb:f1:7a:
a0:7e:13:7b:58:52:48:98:25:0c:95:e4:c4:25:85:4b:44:4d:
75:71:4f:9f:19:ed:c1:0f:bb:1a:f5:90:1e:c5:d9:00:b8:60:
57:0f:b2:f4:01:50:dd:cf:72:f5:0d:fd:1c:26:c4:38:46:59:
98:26:a0:c7:c0:81:1b:e0:e2:24:33:6a:6b:dd:78:a1:24:32:
d4:3b:f9:07:8e:fb:2d:d0:82:2c:2b:a9:d5:22:c1:5f:16:9a:
cc:80:41:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:20 2026 by rpki-client