Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1QvBXoez41jwL9HPy_AdjrRLduc.roa
File: 1QvBXoez41jwL9HPy_AdjrRLduc.roa (raw, json)
Hash identifier: +t3lmPQ4XkWuzVHjF/8PKmHTfd9fsC+g+3mct2JzfMo=
Subject key identifier: D5:0B:C1:5E:87:B3:E3:58:F0:2F:D1:CF:CB:F0:1D:8E:B4:4B:76:E7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A01FE09D78FFCCA1F705F8F6E267CFC825
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1QvBXoez41jwL9HPy_AdjrRLduc.roa
Signing time: Thu 20 Aug 2026 15:53:29 +0000
ROA not before: Thu 20 Aug 2026 15:53:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47172
IP address blocks: 31.56.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:e0:9d:78:ff:cc:a1:f7:05:f8:f6:e2:67:cf:c8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 20 15:53:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d50bc15e87b3e358f02fd1cfcbf01d8eb44b76e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ca:0f:e2:12:58:2f:09:ca:63:5b:df:29:a1:
a3:b6:3e:34:77:95:14:ec:e9:e1:69:48:71:12:ea:
4c:4c:ea:40:90:0c:7d:13:be:56:20:0b:25:74:fd:
f3:db:7d:f7:21:14:14:17:65:c7:38:69:9c:a9:40:
0b:c1:85:b1:65:ac:3b:39:6f:70:c0:ef:ff:d6:6b:
e5:3b:18:5b:b9:04:a8:dd:7c:9a:9d:be:ac:eb:6c:
f1:84:56:46:31:34:ef:d3:c3:d3:69:fb:5d:d2:67:
ae:41:1a:d7:f8:ad:6c:3d:fd:9c:f5:db:8a:e9:df:
ef:fb:15:0d:38:a2:0d:3a:ee:8f:b1:68:97:f0:09:
53:54:54:c7:4b:92:34:36:06:5a:1c:62:a4:a7:3b:
21:e0:4c:23:7c:2c:57:10:48:89:fb:41:ff:bb:ed:
13:4d:88:40:5c:84:16:66:39:62:86:b7:f2:61:84:
e4:8f:94:fa:d7:86:fa:84:23:86:ec:4e:7b:fa:66:
b5:bd:75:50:1a:22:fc:b0:d3:9a:3a:a9:55:76:c8:
00:a9:6b:95:6c:fd:ac:49:82:6c:44:05:68:ee:62:
c4:23:49:c7:af:fb:c5:8c:38:94:1f:24:1a:b7:9a:
1c:41:4d:ae:0b:c7:d4:9c:d3:ce:73:02:37:dc:77:
eb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0B:C1:5E:87:B3:E3:58:F0:2F:D1:CF:CB:F0:1D:8E:B4:4B:76:E7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1QvBXoez41jwL9HPy_AdjrRLduc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.77.0/24
Signature Algorithm: sha256WithRSAEncryption
55:70:b1:d6:de:a5:ab:67:33:fd:ab:15:75:ca:38:f9:47:d0:
b2:c3:6e:55:a1:d0:65:10:45:ed:09:90:f2:08:94:0d:e0:81:
d5:5a:b7:36:89:91:eb:c2:ea:bb:4b:77:e7:96:2f:e7:c3:e4:
63:57:0f:65:eb:1a:9c:73:3d:36:a0:99:1c:15:3c:1b:d8:1b:
97:d4:50:0a:7c:15:e5:43:98:d2:2d:15:9e:f8:c1:8e:f1:8b:
69:0c:a6:bb:96:26:94:1b:02:a3:c0:86:9c:66:a3:a2:af:3d:
3d:bb:4e:24:65:2e:77:75:4d:54:84:eb:f8:ad:73:cd:b1:c7:
03:bc:2a:c2:fd:e2:a7:c2:f7:e1:73:e1:23:49:86:a0:6b:56:
9d:95:d4:a9:09:44:8b:a0:7c:65:60:e0:d3:23:c5:7d:7e:78:
8d:7e:11:8c:ba:66:15:ba:78:05:4b:d9:02:d6:b0:27:3a:7b:
5e:30:a2:71:32:30:ac:4b:3d:82:53:70:54:a7:25:02:f9:73:
02:04:94:c7:de:3c:6d:36:d1:69:11:57:a3:8b:66:6d:cc:06:
70:3c:2d:05:51:c2:f1:c2:41:82:da:df:e9:0f:9b:58:35:08:
d4:db:d9:f3:f7:db:c4:fa:0e:0a:10:17:f0:93:b2:97:27:74:
f5:6b:9f:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAf4J14/8yh9wX49uJnz8glMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODIwMTU1MzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTBiYzE1ZTg3YjNlMzU4ZjAyZmQxY2ZjYmYwMWQ4ZWI0NGI3NmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58oP4hJYLwnKY1vfKaGjtj40d5UU
7OnhaUhxEupMTOpAkAx9E75WIAsldP3z2333IRQUF2XHOGmcqUALwYWxZaw7OW9w
wO//1mvlOxhbuQSo3Xyanb6s62zxhFZGMTTv08PTaftd0meuQRrX+K1sPf2c9duK
6d/v+xUNOKINOu6PsWiX8AlTVFTHS5I0NgZaHGKkpzsh4EwjfCxXEEiJ+0H/u+0T
TYhAXIQWZjlihrfyYYTkj5T614b6hCOG7E57+ma1vXVQGiL8sNOaOqlVdsgAqWuV
bP2sSYJsRAVo7mLEI0nHr/vFjDiUHyQat5ocQU2uC8fUnNPOcwI33Hfr4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNULwV6Hs+NY8C/Rz8vwHY60S3bnMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMVF2QlhvZXo0MWp3TDlIUHlfQWRqclJMZHVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhNMA0G
CSqGSIb3DQEBCwUAA4IBAQBVcLHW3qWrZzP9qxV1yjj5R9Cyw25VodBlEEXtCZDy
CJQN4IHVWrc2iZHrwuq7S3fnli/nw+RjVw9l6xqccz02oJkcFTwb2BuX1FAKfBXl
Q5jSLRWe+MGO8YtpDKa7liaUGwKjwIacZqOirz09u04kZS53dU1UhOv4rXPNsccD
vCrC/eKnwvfhc+EjSYaga1adldSpCUSLoHxlYODTI8V9fniNfhGMumYVungFS9kC
1rAnOnteMKJxMjCsSz2CU3BUpyUC+XMCBJTH3jxtNtFpEVeji2ZtzAZwPC0FUcLx
wkGC2t/pD5tYNQjU29nz99vE+g4KEBfwk7KXJ3T1a58T
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:12 2026 by rpki-client