Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mIg8cfU0-lTVkjbuwVngzrFuExg.roa
File: mIg8cfU0-lTVkjbuwVngzrFuExg.roa (raw, json)
Hash identifier: SJJTV1IgH3RH4H00THczxt3kNmJMrPphgKr0lgSpo5s=
Subject key identifier: 98:88:3C:71:F5:34:FA:54:D5:92:36:EE:C1:59:E0:CE:B1:6E:13:18
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F5535027022F5FAAE59E87F076E3048D7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mIg8cfU0-lTVkjbuwVngzrFuExg.roa
Signing time: Sun 12 Jul 2026 07:22:45 +0000
ROA not before: Sun 12 Jul 2026 07:22:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36530
IP address blocks: 31.56.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:35:02:70:22:f5:fa:ae:59:e8:7f:07:6e:30:48:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 12 07:22:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98883c71f534fa54d59236eec159e0ceb16e1318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:a4:b7:a4:ce:76:c9:03:3e:1b:0f:26:96:
a2:8a:5a:44:b8:9b:cb:4d:92:16:61:74:6e:b9:92:
da:2f:3b:81:eb:06:ee:cf:45:fb:65:84:86:86:c2:
4a:49:76:8e:67:71:b2:89:71:27:d3:30:d2:19:45:
17:ac:2d:c6:69:d5:81:f4:08:cd:7d:26:d2:9a:ba:
0b:92:b3:61:99:65:8e:de:60:75:c8:ce:1e:da:6c:
83:4a:61:5d:84:7f:54:af:d7:12:22:fa:eb:41:84:
36:a0:f9:81:59:99:7c:7e:46:30:3b:19:bf:76:73:
00:67:24:38:e4:25:62:fa:f3:99:2a:bf:49:77:02:
15:dd:c9:f2:eb:2e:86:9e:71:43:6b:78:f9:f2:b5:
8a:bd:11:60:8d:76:4f:5f:29:73:95:0f:5f:fc:20:
3d:35:7d:00:3e:48:05:bd:cc:42:cd:b2:62:6d:8d:
c8:d9:80:1f:21:c9:6f:60:23:3e:55:3a:dd:8c:12:
bc:b5:7c:ef:e3:45:ae:9f:31:83:1d:f3:aa:8e:1c:
4f:83:bd:77:64:87:cd:db:1f:66:df:00:26:3b:97:
db:7f:d4:37:35:73:27:d7:70:a5:22:08:cd:98:fe:
70:6b:ce:f1:f2:c0:3d:10:d6:fc:d1:77:57:38:5a:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:88:3C:71:F5:34:FA:54:D5:92:36:EE:C1:59:E0:CE:B1:6E:13:18
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mIg8cfU0-lTVkjbuwVngzrFuExg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.84.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:e8:f2:c7:62:80:a7:6c:58:29:9d:d3:65:6a:d6:01:74:08:
47:71:a8:4c:d7:18:30:2c:7e:af:97:5a:4e:b7:27:29:c7:46:
d4:c8:e7:96:58:88:a1:0f:8d:3c:93:9e:fb:03:77:c7:3a:4c:
95:ff:d8:b7:2f:57:b9:73:d2:96:88:44:50:98:90:7e:92:43:
d1:0d:c0:04:da:58:3e:52:09:00:66:1a:df:37:b2:6e:f4:f1:
3d:45:f0:8a:ca:12:b7:ed:49:a9:54:9c:3a:6a:ff:df:e8:46:
07:1d:71:fc:8d:45:db:44:5a:15:bb:27:aa:5e:cc:ee:39:12:
19:e8:17:af:91:4a:75:02:75:20:74:60:55:0e:3b:10:fe:c5:
c4:9d:b7:57:7f:a6:4d:af:93:a3:08:04:e2:e9:51:62:8e:80:
d2:97:9b:4b:5c:26:1d:5d:b1:2d:34:59:ee:c2:b1:99:a3:c7:
60:af:8c:30:a0:dc:62:97:47:dd:5c:5e:d6:2b:9f:7f:db:c2:
f7:e4:62:28:a0:0e:bd:b5:4a:f2:c9:85:55:7d:fc:35:d8:30:
e4:08:51:4d:19:f4:53:38:81:a7:e1:65:ba:60:e5:cb:b1:49:
07:5c:42:ec:71:d5:63:d3:ad:8a:c8:bb:b4:9a:72:fb:0a:c1:
ae:89:c3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:22 2026 by rpki-client