Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2DIFJ7BiMo0TA-P1IphjSlIhOE0.roa
File: 2DIFJ7BiMo0TA-P1IphjSlIhOE0.roa (raw, json)
Hash identifier: yURulQNPVyQc1GJuDHIwMujr52rKc4DQGMDZcnEsiKU=
Subject key identifier: D8:32:05:27:B0:62:32:8D:13:03:E3:F5:22:98:63:4A:52:21:38:4D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1274955416B0914CC0EEB09340D2D6BC2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2DIFJ7BiMo0TA-P1IphjSlIhOE0.roa
Signing time: Sat 10 Oct 2026 19:27:59 +0000
ROA not before: Sat 10 Oct 2026 19:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 31.57.53.0/24 maxlen: 24
31.57.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:49:55:41:6b:09:14:cc:0e:eb:09:34:0d:2d:6b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 10 19:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8320527b062328d1303e3f52298634a5221384d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:59:d9:4e:df:24:8a:3c:9a:5e:6e:c6:40:
35:5f:36:06:70:44:b4:bb:59:bc:76:19:4e:98:8d:
73:66:1a:f8:e0:36:53:89:c4:98:6f:d6:a2:f3:2d:
bc:6c:48:c1:f1:f0:90:1b:30:49:42:8d:f0:5b:9f:
bd:55:7b:e1:b6:9a:cb:eb:88:c9:e2:f5:c2:a0:f9:
90:4d:9f:2e:29:b3:05:7a:12:fb:1e:f2:58:a5:4a:
9a:73:9a:72:04:46:61:63:a3:a1:d5:94:e7:b7:c2:
03:0b:24:e2:34:55:77:48:03:cf:31:f9:78:c6:0c:
c6:b6:21:39:0e:f3:fa:a5:58:29:a5:db:f1:61:19:
23:1c:9d:65:c2:3c:58:89:32:43:ee:5f:f8:f6:2f:
72:85:f6:e7:e3:1e:93:68:ed:f5:0d:64:77:02:63:
5b:9c:de:13:66:64:74:49:10:9a:b6:77:ea:54:a5:
c2:22:b5:22:5a:82:85:c3:91:e3:a9:91:2c:42:eb:
82:e2:16:b8:7b:83:bb:fa:71:c3:ad:1f:96:21:2f:
cf:c6:a6:41:e2:12:21:3b:75:91:d2:ef:46:3b:d1:
ba:47:9a:13:23:20:02:26:5c:72:f5:c2:8d:d7:a2:
71:2d:6c:56:9e:13:9a:f8:9a:42:0c:8c:00:a8:bd:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:32:05:27:B0:62:32:8D:13:03:E3:F5:22:98:63:4A:52:21:38:4D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2DIFJ7BiMo0TA-P1IphjSlIhOE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.53.0/24
31.57.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9d:cb:b6:04:d9:f2:ec:66:74:07:fb:94:1c:d2:09:43:47:
95:ad:b7:6f:a8:49:0e:92:76:07:21:7c:3b:01:16:1c:a2:19:
d0:23:96:6d:f8:75:57:e9:e6:28:78:62:32:29:ad:97:32:55:
cb:f0:87:65:f6:a0:0f:57:bc:e2:37:16:35:58:03:8d:51:60:
df:09:e0:2a:a3:a2:ef:15:30:36:be:99:75:da:2b:03:d7:01:
f8:d1:70:22:28:04:f7:24:83:8b:63:81:f1:d1:6c:3f:94:36:
05:9e:c5:f9:0d:99:61:73:a8:d2:16:29:ad:4e:c6:79:99:a0:
93:68:f9:c3:cf:b8:84:a7:39:13:c0:27:96:ff:63:6e:a6:18:
a0:0e:d0:39:11:e5:c2:5e:d1:11:92:e9:07:28:71:e7:c2:fa:
9a:aa:b4:2c:2a:fb:12:ba:6a:3b:ab:26:e6:42:2d:b1:3f:2d:
ff:60:6d:56:bb:88:ef:de:3c:60:2d:db:c0:36:02:7c:2c:c2:
67:95:da:7b:6f:da:b6:6c:cc:6f:2d:c3:55:ec:9a:5e:d1:45:
a3:a7:59:f1:57:ac:7e:b9:a5:9c:b1:a0:17:3c:30:38:7a:ff:
73:c6:87:b4:ed:7d:a7:fe:35:55:c8:7b:f8:59:6b:b8:9e:56:
3b:3b:00:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:34 2026 by rpki-client