Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1MJipNtZKAs4yZubfWzg6dQuJWY.roa
File: 1MJipNtZKAs4yZubfWzg6dQuJWY.roa (raw, json)
Hash identifier: Eo+azvSda+1hrn9FssXy/Ub/QMv1pkAFmu7tU412a5w=
Subject key identifier: D4:C2:62:A4:DB:59:28:0B:38:C9:9B:9B:7D:6C:E0:E9:D4:2E:25:66
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A01A0B642DD399DEF52C7582859AFBA0C2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1MJipNtZKAs4yZubfWzg6dQuJWY.roa
Signing time: Wed 19 Aug 2026 12:42:29 +0000
ROA not before: Wed 19 Aug 2026 12:42:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218945
IP address blocks: 31.57.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:0b:64:2d:d3:99:de:f5:2c:75:82:85:9a:fb:a0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 19 12:42:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4c262a4db59280b38c99b9b7d6ce0e9d42e2566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:ba:3c:53:60:0e:cd:8f:c6:50:4b:5e:d5:
24:78:0b:ae:2f:3f:ac:23:0a:c5:34:65:d8:a9:2e:
64:16:2d:47:e6:ce:96:50:e2:75:25:7c:2c:e7:45:
21:09:f6:a2:2d:69:6c:2b:fd:ed:e7:1f:31:74:5b:
50:92:80:80:0b:df:af:13:fb:1e:47:65:1e:64:ce:
81:d3:04:1d:5b:39:73:88:e0:51:6a:49:f3:55:e4:
45:84:5b:91:37:0a:ce:f3:cd:7a:03:10:1d:c9:ce:
07:6f:d1:a9:01:b8:35:ab:cb:77:63:59:b0:1a:d7:
f5:27:b8:1a:2c:f9:79:ee:2e:13:f3:3c:5a:5b:64:
cc:9d:1f:29:10:82:e6:0c:3e:5f:ef:05:e8:67:fa:
97:31:f6:e4:42:c0:b4:59:a7:19:a6:f2:fc:9e:8d:
e7:14:2c:7e:cf:4a:c8:3b:a7:98:37:72:63:e2:ae:
54:c0:9e:44:74:75:ec:43:79:6e:b0:44:cb:39:43:
76:5f:98:f9:d7:b7:d4:c2:23:17:e2:2f:6c:9f:ef:
ed:d9:83:15:a0:e2:2b:01:74:c8:cd:b3:5f:75:73:
0a:44:d5:25:88:5d:2c:c4:76:9c:6a:86:ec:00:23:
6b:eb:ea:32:34:40:cb:2c:d1:42:bc:74:49:6e:e4:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C2:62:A4:DB:59:28:0B:38:C9:9B:9B:7D:6C:E0:E9:D4:2E:25:66
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1MJipNtZKAs4yZubfWzg6dQuJWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.31.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a6:5a:72:75:ac:61:8c:29:bf:d3:9e:b9:80:38:4c:5d:ec:
5f:a6:e2:9f:12:c4:94:2d:87:84:ca:59:c3:3c:3d:96:00:5b:
a4:b1:5c:8a:d6:4c:9f:44:73:b8:94:a4:9f:4c:a6:45:7d:a3:
44:54:39:9b:ff:d3:2f:e4:7f:03:72:96:0b:33:04:ac:6a:f7:
17:4a:51:2d:88:77:5b:9a:7f:0f:4a:1d:09:57:3c:c2:b7:7a:
48:f4:0f:07:72:fe:ee:30:d2:92:4b:67:27:03:90:0f:23:4d:
3b:aa:a2:f4:17:fe:fc:cb:ab:75:cb:4b:17:fd:8d:c0:a4:52:
b9:73:53:44:31:33:4b:3e:f4:71:ac:1f:88:97:0e:8c:0d:b0:
c2:ce:d7:dc:5f:55:30:68:c2:bf:1e:28:bf:38:7a:30:99:dd:
a8:08:4c:d1:9a:91:bb:46:00:0c:bf:c8:07:6d:b3:ec:ff:73:
ee:8b:e2:12:fe:61:a1:21:2f:c2:c2:b0:a6:3e:fd:1a:e3:59:
52:21:4c:24:35:3d:b3:3b:28:c1:55:7f:77:0c:4d:6c:0e:a5:
dd:21:cf:56:b2:ed:80:11:c0:03:20:bc:53:03:69:12:53:f1:
f9:95:4a:2d:8d:da:cc:c7:72:0a:f1:e6:9f:67:38:fc:4d:96:
99:01:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:18:54 2026 by rpki-client