Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/31YEXd79pT_u9teQumoscwXmMHM.roa
File: 31YEXd79pT_u9teQumoscwXmMHM.roa (raw, json)
Hash identifier: x1jnGE7dG6yUMzip2qi4OQgQGWmJcWIXsJOaEJ8PFrc=
Subject key identifier: DF:56:04:5D:DE:FD:A5:3F:EE:F6:D7:90:BA:6A:2C:73:05:E6:30:73
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2369128A87656D9E62DE62BDB821FAF7
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/31YEXd79pT_u9teQumoscwXmMHM.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215931
IP address blocks: 82.153.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:12:8a:87:65:6d:9e:62:de:62:bd:b8:21:fa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df56045ddefda53feef6d790ba6a2c7305e63073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:1b:f0:1f:06:0f:88:93:52:15:a2:d8:21:
3a:00:1b:5e:e6:89:d7:dc:df:20:03:90:33:d6:5a:
e6:e9:06:a5:10:1f:28:3a:a4:68:50:97:7f:1d:87:
9f:03:c6:06:8c:a0:ee:0f:80:96:bd:b3:b7:44:d5:
36:0b:44:83:d9:b3:1a:c7:ec:4b:a5:06:36:94:0d:
ce:06:e3:9f:c3:0a:db:96:b7:3d:64:b4:ca:76:06:
04:ba:90:84:78:70:c4:11:d8:7e:c0:1a:0a:5a:47:
49:61:a9:1a:fd:a0:7c:ee:7c:72:70:8c:d3:1d:6b:
c6:04:c4:52:3e:50:e9:19:30:8b:2a:2c:b4:46:7e:
fe:c6:b2:9c:b7:a2:f6:dc:e4:33:57:75:4a:07:46:
15:07:5e:57:f4:b2:15:8e:37:74:f0:b8:2c:68:1e:
32:b3:98:1f:5d:73:47:70:f6:ea:73:0f:43:a7:3a:
47:d1:27:9a:10:27:29:a5:c0:6a:bc:74:8e:04:44:
bf:8a:e4:5f:e3:00:dc:d4:50:69:9d:4c:d1:b4:af:
e1:67:98:62:ec:7e:0f:a9:b6:95:68:b7:ac:d9:d2:
ba:36:7c:95:e2:bf:f5:ed:74:9b:2c:e0:95:af:5d:
c5:a5:16:1d:4d:ca:1c:59:dc:fd:58:fe:9c:b1:fe:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:56:04:5D:DE:FD:A5:3F:EE:F6:D7:90:BA:6A:2C:73:05:E6:30:73
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/31YEXd79pT_u9teQumoscwXmMHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.4.0/24
Signature Algorithm: sha256WithRSAEncryption
57:6a:80:a9:37:84:9d:70:07:42:e0:06:2a:a4:0f:2e:2d:64:
5e:d0:35:dc:44:de:d6:ea:f9:41:e3:99:9e:b6:61:56:b9:e0:
c4:32:fb:dd:6a:54:28:0f:82:71:85:51:49:cc:41:45:28:e7:
9e:e0:0d:4f:26:e8:17:87:c7:97:4a:21:1c:fb:01:b2:8d:3b:
41:85:db:f7:56:89:7a:ec:cd:5f:06:fb:45:ff:ef:f3:dd:18:
1f:24:4e:c1:60:a8:0b:42:a9:3d:32:a2:d5:2f:02:89:ab:c3:
1b:53:d9:b1:df:37:b4:8d:8d:f9:d4:31:01:7a:d9:38:f7:3b:
0b:cb:48:81:c7:8c:cc:d8:21:77:2e:18:18:aa:b6:e2:03:c3:
ba:63:83:e9:34:90:bd:cb:cb:fc:7c:56:c9:30:13:14:1e:d0:
da:0c:fa:89:c1:d7:99:53:dc:53:02:53:c2:28:fa:f3:c0:a6:
db:e2:28:f8:0d:8b:5b:8b:a8:6b:cf:d5:6b:b8:b6:ac:aa:1d:
13:a2:97:21:a0:ba:6f:0c:87:cf:02:21:cf:a6:61:84:1b:04:
f3:ab:2d:15:a2:aa:d6:25:08:14:8c:91:7f:0b:32:9e:be:4b:
9b:e1:db:5c:3d:14:af:98:c3:0c:51:1d:8f:a1:66:63:61:01:
f3:67:06:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:19 2026 by rpki-client