Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pKHfDrrTMYr6SlVfivcYTj-9xjY.roa
File: pKHfDrrTMYr6SlVfivcYTj-9xjY.roa (raw, json)
Hash identifier: 929XdHnqX3JLENFTLLH9FqP3GykElCjBWDlpqMlB+cs=
Subject key identifier: A4:A1:DF:0E:BA:D3:31:8A:FA:4A:55:5F:8A:F7:18:4E:3F:BD:C6:36
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E127E747630E4FDFF2328EFCFA98D68F3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pKHfDrrTMYr6SlVfivcYTj-9xjY.roa
Signing time: Sun 10 May 2026 15:25:37 +0000
ROA not before: Sun 10 May 2026 15:25:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146996
IP address blocks: 31.58.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:12:7e:74:76:30:e4:fd:ff:23:28:ef:cf:a9:8d:68:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 10 15:25:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4a1df0ebad3318afa4a555f8af7184e3fbdc636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:6e:5d:57:92:3a:59:65:3e:c2:4e:de:33:
76:d4:14:83:38:71:2a:ea:04:0f:94:e3:bb:c3:f7:
88:94:95:cd:d3:96:f1:4d:e8:51:90:f0:19:69:37:
a6:c7:15:57:8b:c3:57:37:20:21:c5:88:36:af:cd:
fe:f5:df:5b:82:18:09:e0:a6:6b:1d:ca:e0:ac:ef:
90:bf:30:b3:60:b7:6b:c0:a8:66:89:39:2e:97:86:
3f:fa:ca:45:95:c7:8e:09:5d:6f:7c:8f:97:09:09:
2e:42:95:9a:d1:49:43:af:dd:ec:df:4b:7d:d2:1f:
45:fc:84:ef:6f:37:0a:87:7b:b8:c4:06:35:65:c4:
0a:5a:9e:47:e7:15:e0:7b:0d:f8:82:4e:b1:04:c6:
5d:39:ff:69:03:46:b0:8a:ee:84:8c:33:b4:53:2c:
c7:2c:37:73:3c:50:5b:b4:59:c9:75:93:be:5d:f2:
ca:b9:73:60:f4:8d:7c:a4:f4:6b:f1:62:ba:2a:e9:
76:ff:c2:e9:10:97:85:2e:27:75:35:77:ba:86:d0:
3e:6d:0f:a7:d8:ea:99:e7:a6:6f:94:43:74:81:06:
53:20:9d:ee:be:47:c1:33:19:4a:bc:56:72:ce:a3:
d7:28:44:87:db:61:22:0b:bb:71:cd:24:ae:2b:fb:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A1:DF:0E:BA:D3:31:8A:FA:4A:55:5F:8A:F7:18:4E:3F:BD:C6:36
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pKHfDrrTMYr6SlVfivcYTj-9xjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.99.0/24
Signature Algorithm: sha256WithRSAEncryption
af:6c:88:75:cf:e4:4e:31:7d:9b:c5:39:d6:e8:4c:23:0e:01:
f8:14:39:e0:22:67:f1:22:b4:c3:81:f8:41:29:a9:f5:5c:9c:
11:93:db:d9:be:7c:c7:a4:90:95:ca:83:32:c9:00:2d:38:a9:
0b:73:c7:1e:0d:88:6b:41:97:4e:97:89:2f:43:00:11:46:8e:
2f:71:b7:37:9f:87:00:f0:ac:b3:a0:b9:7e:6c:71:f9:68:e2:
1b:f4:1a:7d:1f:53:75:05:d4:c0:1f:fc:4a:72:7e:f6:d6:9c:
76:f8:e0:ac:3f:1b:d6:71:ea:6e:a1:69:82:81:45:75:6b:5a:
43:3a:de:f5:51:10:2e:73:39:90:7f:93:21:4b:70:94:34:16:
29:d4:13:3b:cc:98:e2:ac:6b:23:f6:9b:fa:02:e4:12:9d:ee:
c2:96:4a:4c:2d:fe:3c:81:45:ba:a1:11:7b:e0:2d:8b:cd:8f:
c6:35:ef:c9:3e:15:6a:4e:18:09:7b:6f:5a:75:ed:51:a1:53:
cf:aa:0f:bb:53:54:72:6e:0f:1b:41:f5:4b:c1:fc:fe:ae:66:
69:7d:4f:cd:af:44:58:06:8f:6c:f9:c7:a1:53:9d:40:9e:ab:
8a:a2:12:50:0b:94:2b:88:a5:24:10:7f:0c:c0:fc:cd:a8:7e:
15:ea:4f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:31 2026 by rpki-client