Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ww6RUousvc_W9_zkRAa1UaSXmU0.roa
File: ww6RUousvc_W9_zkRAa1UaSXmU0.roa (raw, json)
Hash identifier: OVnadfx3lTtlCvgo6Uf5ATp+zGFfG4yzYxFqWqku2TY=
Subject key identifier: C3:0E:91:52:8B:AC:BD:CF:D6:F7:FC:E4:44:06:B5:51:A4:97:99:4D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DAAC1F1754810066DC2E60F40302F3D01
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ww6RUousvc_W9_zkRAa1UaSXmU0.roa
Signing time: Mon 20 Apr 2026 11:58:50 +0000
ROA not before: Mon 20 Apr 2026 11:58:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 31.57.35.0/24 maxlen: 24
31.57.100.0/24 maxlen: 24
31.57.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:c1:f1:75:48:10:06:6d:c2:e6:0f:40:30:2f:3d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 20 11:58:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c30e91528bacbdcfd6f7fce44406b551a497994d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:0a:7f:0c:4e:2e:1b:78:fb:63:f3:24:e5:
1d:37:fe:06:c4:17:80:26:2c:ba:df:e8:ff:89:a7:
a5:83:09:b0:7c:9d:dc:3b:75:ad:83:e3:dc:c2:95:
11:9c:d2:c7:ec:92:28:fc:f7:aa:38:ae:11:b9:47:
8e:15:c8:b3:26:e9:04:db:a4:48:c2:41:f3:c3:63:
02:e7:d1:cc:51:6c:bd:ef:f7:31:04:f6:94:5b:66:
cc:ea:ee:4c:46:ba:c6:d9:ad:a5:4d:7e:67:97:09:
b8:d3:ba:2e:2a:f5:0b:3c:39:90:cc:81:e4:39:a3:
1e:aa:c9:7f:8e:cb:42:02:5c:f8:07:95:82:98:30:
94:d7:15:8c:6b:64:20:0f:08:ff:4a:1e:bc:17:c5:
4c:69:ab:76:cb:8b:82:44:30:89:e7:3d:2d:9d:d9:
4f:f0:7f:64:0b:50:b8:b4:7d:c7:44:3a:f2:84:99:
82:58:1f:b9:a9:23:56:10:90:bd:ee:fa:d4:b4:00:
79:46:ce:bd:eb:25:e8:e9:00:1c:ee:59:30:b7:75:
a4:be:86:a0:20:c8:83:52:bf:8d:26:00:4f:bd:7e:
a0:cc:c6:16:35:ca:af:41:f7:38:d8:23:b1:f5:eb:
c1:cf:1d:b7:c5:06:49:41:da:e0:84:5c:bf:62:5b:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0E:91:52:8B:AC:BD:CF:D6:F7:FC:E4:44:06:B5:51:A4:97:99:4D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ww6RUousvc_W9_zkRAa1UaSXmU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.35.0/24
31.57.100.0/24
31.57.228.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f7:d9:08:d5:64:c9:39:c1:d4:24:9d:a2:dc:b4:00:11:bb:
00:27:60:b7:2c:23:b1:92:06:f5:91:a3:d2:b4:bd:c3:7b:a2:
ee:07:bb:09:ca:ae:39:ad:7c:f4:c8:f2:ec:17:ee:90:f6:66:
99:b2:58:d0:6c:a8:9a:2f:78:db:ef:f5:64:1f:07:e6:80:2b:
da:ed:2c:02:28:07:21:fe:38:ee:c1:9b:94:e4:c3:66:17:e9:
8b:93:95:d5:b6:9d:e7:31:f1:20:71:54:fe:7b:3d:5d:70:86:
4e:81:00:30:3d:ae:de:35:7a:1e:fa:15:06:19:0c:c4:b7:ca:
da:5b:6e:4d:46:3d:28:c7:25:94:77:d9:12:16:64:55:57:d6:
f9:7a:4e:73:7b:90:a6:46:45:8f:47:36:96:48:62:44:77:5d:
f1:f9:8e:a3:1e:57:e9:ed:28:db:5c:42:e6:f6:fd:ef:82:70:
50:71:85:8f:67:82:7f:a8:55:96:bc:a7:64:63:fc:f9:66:a3:
ba:b9:54:c8:4c:06:d3:67:ad:ed:58:0e:03:85:6d:89:dc:76:
47:99:b8:c3:e4:d8:57:4f:0a:05:1d:46:88:a1:ec:0e:fb:17:
4e:82:e9:ba:f0:23:e0:bf:b8:e1:7a:4e:cc:df:20:c4:f6:3b:
a2:48:00:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:15 2026 by rpki-client