Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/04i4RlCQqiRbvAUx2GNNI8RQB1c.roa
File: 04i4RlCQqiRbvAUx2GNNI8RQB1c.roa (raw, json)
Hash identifier: gjmqCSRRm26+LQC67DwZCp8ymNpEw4LmTuFLtnMDdHg=
Subject key identifier: D3:88:B8:46:50:90:AA:24:5B:BC:05:31:D8:63:4D:23:C4:50:07:57
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0E8DF7D8BC9AC3DE7F45BCB3F086F79A7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/04i4RlCQqiRbvAUx2GNNI8RQB1c.roa
Signing time: Mon 28 Sep 2026 16:35:55 +0000
ROA not before: Mon 28 Sep 2026 16:35:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218582
IP address blocks: 31.57.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:df:7d:8b:c9:ac:3d:e7:f4:5b:cb:3f:08:6f:79:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 28 16:35:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d388b8465090aa245bbc0531d8634d23c4500757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:f7:a5:b6:e5:fd:e3:33:a8:0c:da:87:65:
09:cd:4e:b9:ce:4f:30:d3:29:bc:8f:ad:73:ac:53:
c3:23:44:fd:2f:10:66:ce:03:c2:20:80:a5:ad:b7:
8e:95:d4:6a:59:ba:1d:62:cc:a2:52:e0:ce:7d:a7:
37:bf:ac:bb:56:67:0d:1c:93:c7:5c:d1:d3:5c:02:
de:a4:bf:a6:b0:cc:5b:2c:47:78:3f:eb:56:7c:14:
5c:ba:c5:07:13:6e:00:73:bf:83:75:d0:ad:4a:4e:
96:8f:de:b9:fe:7b:e6:d7:e7:d6:5d:f4:66:7f:2e:
8e:1e:82:48:68:fb:b7:8f:af:7d:2b:fa:8c:94:62:
33:5f:ed:90:5c:a0:4f:f0:77:58:df:44:df:2a:bb:
d6:85:f4:b3:e2:46:ae:25:09:f2:b2:76:bd:c6:5e:
98:b4:75:bc:d3:54:fe:e7:27:76:f0:f6:b8:77:cf:
cb:8d:c9:87:1b:c2:8d:2a:ba:74:85:57:f3:e2:22:
17:71:ee:de:99:d1:32:08:7a:03:9e:6e:2a:4b:b7:
e4:b5:6f:b6:0b:6e:df:6f:40:5a:7c:cf:eb:5b:28:
e2:fa:0b:1e:ae:f9:b7:4b:2d:53:92:96:69:12:74:
82:10:21:2c:44:ac:fa:e1:13:10:4f:5b:c3:64:fc:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:88:B8:46:50:90:AA:24:5B:BC:05:31:D8:63:4D:23:C4:50:07:57
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/04i4RlCQqiRbvAUx2GNNI8RQB1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.2.0/24
Signature Algorithm: sha256WithRSAEncryption
67:cf:8a:c6:88:ed:fb:79:ad:33:92:77:79:76:15:c4:6f:42:
48:fc:3c:c1:e9:37:68:1a:40:94:dd:e8:98:bb:7d:5b:af:68:
61:00:95:ee:a1:22:92:7c:4f:ae:dd:b1:3f:38:4e:5d:36:5f:
fd:2b:93:ed:92:b2:a6:33:ef:b9:8e:37:80:d4:b9:0e:35:c9:
41:10:db:43:6c:30:11:2a:b1:96:b6:22:66:fc:73:bb:08:9d:
03:55:1e:ec:a2:e1:19:ff:e9:17:d5:5d:7c:8d:c2:d0:46:51:
59:97:64:a1:4f:3a:e2:b8:c8:88:de:a2:82:08:39:e4:68:e5:
cf:4e:02:78:6d:fe:8f:40:c2:78:c5:f0:be:30:a3:34:a8:2b:
9e:2d:03:30:e9:c1:2a:4d:db:50:12:0b:47:48:a9:f1:66:c9:
da:7e:57:c6:a6:90:6e:f9:8c:b0:4b:cb:1e:4b:c9:81:33:00:
7b:9a:33:60:13:04:a9:71:a9:5f:3f:17:b4:db:f7:8b:8f:88:
06:c9:3e:5f:20:f2:e8:52:41:10:3d:23:56:c9:ff:38:c4:24:
e6:79:87:80:03:d2:5f:8f:e7:2b:17:59:04:9c:9c:7c:48:72:
e3:ed:2f:f2:79:72:76:04:52:03:a5:e7:37:50:5f:dd:62:9e:
3d:c6:59:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:26:15 2026 by rpki-client