Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2gbPtztTNB2yxZ9AFDyovoIh4Dg.roa
File: 2gbPtztTNB2yxZ9AFDyovoIh4Dg.roa (raw, json)
Hash identifier: QzR/VwitMVnjIREx691evdpHEZ2yO6JR1GCBajOpqJk=
Subject key identifier: DA:06:CF:B7:3B:53:34:1D:B2:C5:9F:40:14:3C:A8:BE:82:21:E0:38
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0D8A2FF6871333C1151334F1D18268DBC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2gbPtztTNB2yxZ9AFDyovoIh4Dg.roa
Signing time: Fri 25 Sep 2026 12:55:55 +0000
ROA not before: Fri 25 Sep 2026 12:55:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152460
IP address blocks: 31.56.79.0/24 maxlen: 24
31.57.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a2:ff:68:71:33:3c:11:51:33:4f:1d:18:26:8d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 25 12:55:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da06cfb73b53341db2c59f40143ca8be8221e038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:fe:f2:dc:48:64:82:b1:20:d9:eb:49:b7:
b8:fd:a4:cd:90:6d:e1:92:49:d4:15:98:f1:99:7f:
7d:8c:eb:fc:c1:e3:1f:8b:5c:4b:29:99:cd:b8:1d:
2d:de:4f:d0:c4:c3:15:b6:a7:38:a9:6d:6c:15:19:
af:4d:25:6f:a8:5c:7f:d2:6c:ba:b1:1b:a5:98:1c:
67:a0:6d:d7:38:a4:2b:54:29:05:f0:31:35:a8:93:
60:7b:13:0b:9d:c9:a8:e5:3a:89:0d:13:76:de:8c:
21:8b:5b:f7:f0:49:f6:64:cd:ca:a7:93:d6:7c:6d:
a8:6f:db:dd:ca:3b:95:c7:ca:4a:67:cf:f2:80:cc:
58:75:8b:6e:1d:45:e8:06:28:f0:28:2c:41:12:44:
77:bd:41:2c:4b:6c:09:45:b7:a0:68:e0:2e:3d:9c:
05:e1:55:ca:c7:17:84:93:14:e8:2d:9b:94:28:26:
18:4a:b5:79:d7:65:55:e2:7f:52:0c:36:67:da:b3:
b8:fa:e2:7c:df:8e:b5:0d:d5:cf:c3:12:98:d3:6e:
82:08:1d:f1:f2:8a:c1:94:46:37:1d:13:68:38:7f:
2f:72:5a:96:61:c7:02:de:36:ce:e0:6c:c2:47:aa:
a1:ac:2a:ed:1b:c0:bc:22:50:62:74:0f:d3:00:10:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:06:CF:B7:3B:53:34:1D:B2:C5:9F:40:14:3C:A8:BE:82:21:E0:38
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2gbPtztTNB2yxZ9AFDyovoIh4Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.79.0/24
31.57.196.0/24
Signature Algorithm: sha256WithRSAEncryption
77:70:c4:c3:ba:f3:50:22:05:fc:6e:aa:0c:f8:d5:09:c8:2a:
e8:a9:c0:5a:5b:7d:8c:14:f1:de:1a:2f:d2:5e:51:b4:50:4d:
7a:aa:03:72:bd:1a:08:75:66:b5:1a:a9:7e:81:61:1d:81:4d:
b6:9b:1f:12:25:74:90:f5:fe:2f:d9:19:1f:ee:4b:5f:ed:d7:
35:1c:a4:51:d0:c2:e7:9b:40:b3:e2:2a:42:16:02:8b:62:65:
81:68:88:e7:3e:b4:b3:d9:ed:3b:87:74:60:3c:07:0e:c6:6b:
99:bc:70:8b:0b:7c:be:06:68:5a:6f:d0:fa:71:bb:27:3d:f6:
5d:93:cb:b0:e2:eb:ee:52:dc:23:9a:53:af:3c:46:d8:53:db:
e2:8f:9b:55:46:8f:3f:a8:2f:85:dc:66:c3:51:17:08:84:44:
ab:2d:c7:d0:bd:d2:5d:f6:b5:17:03:fd:52:b5:28:3a:3b:67:
15:b1:09:12:1d:39:68:01:20:d9:10:2e:d4:e1:01:6d:a8:16:
93:a2:96:44:7e:6f:e4:ce:ec:db:68:8a:b2:4e:10:61:ec:be:
1c:fd:7e:e8:f1:ee:a9:db:ed:fb:5d:e4:34:96:27:4f:e4:29:
35:80:15:88:b5:ab:ff:78:59:4e:5e:70:af:4b:a0:0d:46:5e:
c6:5f:06:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:00 2026 by rpki-client