Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oC-V7hej_x8hJ97UmAbp6XKYj5Q.roa
File: oC-V7hej_x8hJ97UmAbp6XKYj5Q.roa (raw, json)
Hash identifier: 7q4/lYbu2rnscGcm6e0sd3F+YS/IDHyEzQHRXV+23I0=
Subject key identifier: A0:2F:95:EE:17:A3:FF:1F:21:27:DE:D4:98:06:E9:E9:72:98:8F:94
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0CD0EB59088409CAAF5AF8131A7AF27F3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oC-V7hej_x8hJ97UmAbp6XKYj5Q.roa
Signing time: Wed 23 Sep 2026 06:58:08 +0000
ROA not before: Wed 23 Sep 2026 06:58:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219048
IP address blocks: 31.59.176.0/24 maxlen: 24
31.59.177.0/24 maxlen: 24
31.59.181.0/24 maxlen: 24
31.59.183.0/24 maxlen: 24
217.60.72.0/22 maxlen: 24
217.60.74.0/24 maxlen: 24
217.60.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:46:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:0e:b5:90:88:40:9c:aa:f5:af:81:31:a7:af:27:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 23 06:58:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a02f95ee17a3ff1f2127ded49806e9e972988f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:28:f4:03:6a:63:cd:c3:89:4a:83:92:2f:0d:
40:8e:a2:11:47:fe:25:13:17:85:dc:c7:91:76:fd:
80:cb:f3:36:d0:00:54:74:dc:6e:93:d0:ed:a7:61:
3f:a2:ac:86:d2:84:1e:04:a3:40:09:c9:08:6f:91:
7a:27:74:34:78:46:cd:f1:be:02:87:14:2e:71:11:
43:5d:f1:5b:e0:05:87:bf:69:81:3e:56:f5:3b:b2:
2c:b8:57:9a:76:44:03:42:9d:21:d6:90:a3:2a:0d:
54:02:cd:50:53:60:e9:7b:cb:1e:f9:48:c4:bc:fe:
47:f6:68:f7:04:0b:b6:36:d3:94:19:ba:47:3a:2f:
1e:bb:1f:93:e2:ea:bd:aa:be:ea:6d:e5:09:c9:f1:
7e:52:8f:e9:4a:0c:11:d1:27:4e:d8:1c:19:25:f2:
5d:53:3f:e3:40:0c:62:88:73:0c:f6:e1:bd:37:d1:
0e:13:2a:d1:88:ac:a2:16:d4:2d:50:f4:8a:87:21:
43:d5:ff:a6:cf:2a:06:dd:67:3b:fb:ca:ac:f9:b7:
9a:43:67:68:73:3e:9c:88:96:3f:53:c2:ff:b2:e1:
63:d0:9d:38:6e:49:8a:fd:bc:70:b7:f6:0f:ce:15:
0b:f5:4e:93:e5:85:88:3e:96:c6:74:4f:60:b7:5a:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:95:EE:17:A3:FF:1F:21:27:DE:D4:98:06:E9:E9:72:98:8F:94
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oC-V7hej_x8hJ97UmAbp6XKYj5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.176.0/23
31.59.181.0/24
31.59.183.0/24
217.60.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:7e:80:c6:92:54:0a:3f:97:fb:67:4d:c1:0b:26:e4:82:ae:
89:64:38:94:7d:a0:51:02:a6:3c:d4:48:c7:7f:a8:01:2d:1f:
81:67:f6:42:d5:37:c4:5e:89:25:94:4e:9e:d9:b4:d1:4e:65:
bc:c7:c6:dc:2f:ec:54:fb:cc:d3:bc:2c:4a:75:23:03:79:62:
c8:d6:d0:13:20:60:31:1e:5c:f9:12:1f:88:05:0f:fc:ba:74:
24:11:71:3b:27:f7:8f:85:d7:eb:ba:20:d0:dc:b8:42:75:9b:
ec:00:d1:ff:65:55:ac:be:94:82:ad:aa:aa:b2:32:7b:73:94:
5b:68:fd:38:f7:d9:8e:dc:46:3d:69:d3:fb:5c:a2:94:f9:bc:
23:69:00:7a:d1:28:ad:91:3b:0e:ad:96:5c:2c:d1:89:53:43:
c2:97:13:11:ef:3f:1c:be:09:cf:25:f1:e6:4a:74:6f:62:6a:
bb:aa:cf:7c:11:4d:dd:d5:b6:e6:94:1c:ec:1d:81:a8:be:38:
f3:0b:fc:c4:17:47:72:b1:e1:6f:38:4d:cb:2f:bb:55:a6:de:
73:b2:fb:bb:aa:de:c8:ed:1f:83:9c:10:93:7b:94:b0:1e:88:
45:9b:75:8b:01:23:6e:40:ef:17:db:48:3f:51:01:18:ed:a4:
d0:c6:cd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:03:37 2026 by rpki-client