Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lS1BLYgca4i2H0xOLnGBfJRojIM.roa
File: lS1BLYgca4i2H0xOLnGBfJRojIM.roa (raw, json)
Hash identifier: OtBFLMHVe8I0yQrfux2GJIRZbmrg5mDYtCxYiyhsm/k=
Subject key identifier: 95:2D:41:2D:88:1C:6B:88:B6:1F:4C:4E:2E:71:81:7C:94:68:8C:83
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F617FAAF71A4BB1B96EAD3E21B70EC6E3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lS1BLYgca4i2H0xOLnGBfJRojIM.roa
Signing time: Tue 14 Jul 2026 16:39:44 +0000
ROA not before: Tue 14 Jul 2026 16:39:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139552
IP address blocks: 31.56.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:7f:aa:f7:1a:4b:b1:b9:6e:ad:3e:21:b7:0e:c6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 14 16:39:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=952d412d881c6b88b61f4c4e2e71817c94688c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:d2:31:48:e7:73:b6:7c:86:97:d1:10:03:
33:28:35:90:e7:a5:29:43:b4:97:b9:a6:c1:a7:c8:
a9:9f:c4:f9:06:80:39:f5:0c:a9:fb:8c:79:c4:79:
0b:c4:09:da:ad:ae:5e:1d:25:c2:65:ec:9c:60:26:
38:b8:6b:1f:20:96:04:b6:5a:ab:e7:df:e0:25:ac:
d4:50:38:4a:7e:9f:a6:09:12:88:70:8d:1d:e2:89:
b1:70:92:5f:33:42:00:58:db:f8:73:43:28:50:1c:
9d:4a:ab:88:84:f9:58:7a:0a:69:25:28:26:0c:2c:
df:b0:02:a5:9b:9e:8a:f7:ff:f3:85:ee:19:15:77:
39:94:e2:51:c6:d1:fc:86:04:3b:0d:bc:f1:d5:25:
dd:ad:c2:75:a9:e7:1e:61:9e:cc:14:d1:6a:3c:ed:
b5:ae:ba:8a:32:04:94:5b:6e:b4:23:c9:83:21:9d:
3b:1f:a6:fe:c8:39:51:b8:3b:e5:e3:1b:98:91:8a:
3d:a6:1c:09:ed:4d:da:d5:a6:66:25:10:2a:ca:33:
8a:5d:91:3d:42:17:35:e1:1d:0a:0b:e7:18:95:d8:
58:3a:df:c6:11:b8:6f:d8:44:9a:ba:ae:56:aa:cf:
b8:65:b6:f1:49:bc:f3:40:3e:89:f0:2d:4b:50:3f:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2D:41:2D:88:1C:6B:88:B6:1F:4C:4E:2E:71:81:7C:94:68:8C:83
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lS1BLYgca4i2H0xOLnGBfJRojIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.6.0/24
Signature Algorithm: sha256WithRSAEncryption
39:21:3d:c1:9a:cd:30:7a:53:d7:85:73:d7:14:05:a5:9b:3c:
a1:4e:06:4f:27:ec:58:43:c4:b0:01:12:9d:5a:27:a5:9f:2f:
2e:1b:31:6d:78:61:15:a8:1c:70:9b:fe:35:c9:51:6b:c7:f5:
27:11:96:ef:6f:d2:c7:53:aa:0f:08:80:a3:0b:b2:3a:64:b6:
25:63:34:94:30:c9:37:0f:75:74:03:7c:11:73:db:13:c9:99:
d2:bf:4e:68:8e:58:2b:2a:ec:c6:be:27:b5:3f:a3:2f:c7:38:
f7:0b:b6:f6:52:63:f3:16:e6:b0:a5:ab:57:2a:fc:ca:a0:c9:
dc:6b:3a:5d:a8:55:b5:73:b5:3b:a6:ce:91:4d:fb:9c:1f:60:
9d:e4:2d:11:13:fd:41:d5:64:98:ab:5d:98:b6:32:a4:80:ac:
a4:49:f9:b2:08:73:60:1f:90:5f:2e:87:0b:c4:e5:a2:63:ff:
13:07:d0:27:ff:53:b1:a4:bf:2e:49:a8:f2:48:23:9a:65:7d:
f5:41:49:7f:ae:0e:a4:b6:83:4c:41:a3:9f:bb:fe:a0:1b:ac:
49:e4:4c:1f:34:ad:20:30:ce:bb:5f:9c:c0:48:c4:ba:9c:97:
70:2c:da:88:61:dd:5c:d9:56:9a:f5:2d:b1:9e:12:b2:20:fc:
20:3c:aa:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9hf6r3GkuxuW6tPiG3DsbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzE0MTYzOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTJkNDEyZDg4MWM2Yjg4YjYxZjRjNGUyZTcxODE3Yzk0Njg4YzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDvSMUjnc7Z8hpfREAMzKDWQ56Up
Q7SXuabBp8ipn8T5BoA59Qyp+4x5xHkLxAnara5eHSXCZeycYCY4uGsfIJYEtlqr
59/gJazUUDhKfp+mCRKIcI0d4omxcJJfM0IAWNv4c0MoUBydSquIhPlYegppJSgm
DCzfsAKlm56K9//zhe4ZFXc5lOJRxtH8hgQ7Dbzx1SXdrcJ1qeceYZ7MFNFqPO21
rrqKMgSUW260I8mDIZ07H6b+yDlRuDvl4xuYkYo9phwJ7U3a1aZmJRAqyjOKXZE9
Qhc14R0KC+cYldhYOt/GEbhv2ESauq5Wqs+4ZbbxSbzzQD6J8C1LUD872QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJUtQS2IHGuIth9MTi5xgXyUaIyDMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbFMxQkxZZ2NhNGkySDB4T0xuR0JmSlJvaklNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgGMA0G
CSqGSIb3DQEBCwUAA4IBAQA5IT3Bms0welPXhXPXFAWlmzyhTgZPJ+xYQ8SwARKd
Wielny8uGzFteGEVqBxwm/41yVFrx/UnEZbvb9LHU6oPCICjC7I6ZLYlYzSUMMk3
D3V0A3wRc9sTyZnSv05ojlgrKuzGvie1P6Mvxzj3C7b2UmPzFuawpatXKvzKoMnc
azpdqFW1c7U7ps6RTfucH2Cd5C0RE/1B1WSYq12YtjKkgKykSfmyCHNgH5BfLocL
xOWiY/8TB9An/1OxpL8uSajySCOaZX31QUl/rg6ktoNMQaOfu/6gG6xJ5EwfNK0g
MM67X5zASMS6nJdwLNqIYd1c2Vaa9S2xnhKyIPwgPKpO
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:46:15 2026 by rpki-client