Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2uuYFGgqFPRokGFj7l97Yx8i1aw.roa
File: 2uuYFGgqFPRokGFj7l97Yx8i1aw.roa (raw, json)
Hash identifier: 5XZyOOLEvvBp+vAARm7Mdaoi+2dGiuirFcDKr05alUI=
Subject key identifier: DA:EB:98:14:68:2A:14:F4:68:90:61:63:EE:5F:7B:63:1F:22:D5:AC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A047189F29AF54CB08F692A889D11ED8C9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2uuYFGgqFPRokGFj7l97Yx8i1aw.roa
Signing time: Fri 28 Aug 2026 06:39:50 +0000
ROA not before: Fri 28 Aug 2026 06:39:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218885
IP address blocks: 31.56.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:18:9f:29:af:54:cb:08:f6:92:a8:89:d1:1e:d8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 28 06:39:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=daeb9814682a14f468906163ee5f7b631f22d5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:ef:aa:0c:c8:c6:73:ce:70:1a:88:22:52:
cd:64:2b:07:4b:f8:94:fd:de:01:93:83:98:81:4d:
d4:3c:64:64:6c:af:6e:d3:83:4f:4b:ac:49:99:11:
3d:54:a3:5f:8f:97:66:06:79:73:ba:a8:e7:35:b2:
f9:89:cf:6c:3d:c3:71:22:bd:c5:47:fc:a3:a6:d5:
28:69:93:6f:44:39:3b:dd:4b:e8:d7:78:25:b1:b0:
5c:b7:13:da:e8:87:a3:01:bb:e7:4a:a2:d8:06:c0:
57:91:fc:52:49:5d:79:35:a0:dd:86:e1:aa:33:78:
98:6a:15:e4:66:a3:c7:4b:75:3e:63:3f:36:da:d4:
c4:84:ef:5f:b2:a6:ea:fd:d2:a5:6f:84:52:93:af:
6c:49:cb:39:c0:30:2d:ae:64:a4:c6:2f:98:76:e4:
da:3b:df:c7:99:73:37:10:df:e3:38:5e:8e:35:b4:
62:9a:c6:25:8b:58:f7:6d:d5:8c:e5:63:a9:13:ac:
aa:19:1b:62:67:14:f9:bd:58:6e:aa:9f:fa:04:64:
37:30:96:b7:97:68:43:b6:9b:29:b7:2e:41:8a:5f:
82:ed:c5:2b:4d:03:f4:8d:7f:d5:27:59:c5:06:46:
6f:cd:eb:46:01:13:31:87:78:bd:88:43:a7:4c:ea:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EB:98:14:68:2A:14:F4:68:90:61:63:EE:5F:7B:63:1F:22:D5:AC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2uuYFGgqFPRokGFj7l97Yx8i1aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.34.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:11:c5:fd:00:8e:0a:64:d8:a1:6b:1e:1a:5e:3a:b8:25:dc:
fc:5f:ea:19:62:6f:d1:a0:09:b3:a4:b9:08:ce:02:64:bc:50:
c6:48:8a:d2:a4:7c:1f:6d:f4:c4:7b:1b:cd:3b:52:7b:b1:ba:
f6:69:8c:36:da:11:9f:b3:d7:f4:d5:12:e9:19:df:2a:a5:16:
0c:dc:d2:ff:ae:b2:f9:f7:9c:02:0a:6e:1f:7b:0f:2d:ef:d7:
71:93:74:b3:a6:56:e2:7f:cd:d3:30:5f:b2:7f:6e:d5:fe:0a:
de:13:6f:09:1b:63:15:60:e7:75:41:54:59:90:ae:51:88:40:
3e:d2:4e:47:e8:ca:79:b4:cc:fb:46:f8:f4:4b:df:03:4e:54:
13:97:6f:97:93:62:f1:e5:3f:7c:49:99:0f:e2:f3:7f:6d:a1:
79:67:34:46:aa:8b:3c:24:93:23:f8:7e:47:d5:01:3c:71:bb:
bc:d6:32:27:d9:0a:6d:f6:e7:57:0f:ee:04:72:9e:63:97:5e:
b1:d4:67:eb:aa:e8:ca:5b:34:b9:ee:80:97:0e:b8:67:c9:99:
fe:a9:78:8e:76:16:42:15:e2:e6:9f:73:03:74:9b:cb:98:0b:
a8:f9:b7:dd:7b:d5:c7:75:47:9a:a7:ed:b0:6f:f4:c3:d4:10:
5e:3d:8a:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBHGJ8pr1TLCPaSqInRHtjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODI4MDYzOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWViOTgxNDY4MmExNGY0Njg5MDYxNjNlZTVmN2I2MzFmMjJkNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPfvqgzIxnPOcBqIIlLNZCsHS/iU
/d4Bk4OYgU3UPGRkbK9u04NPS6xJmRE9VKNfj5dmBnlzuqjnNbL5ic9sPcNxIr3F
R/yjptUoaZNvRDk73Uvo13glsbBctxPa6IejAbvnSqLYBsBXkfxSSV15NaDdhuGq
M3iYahXkZqPHS3U+Yz822tTEhO9fsqbq/dKlb4RSk69sScs5wDAtrmSkxi+YduTa
O9/HmXM3EN/jOF6ONbRimsYli1j3bdWM5WOpE6yqGRtiZxT5vVhuqp/6BGQ3MJa3
l2hDtpspty5Bil+C7cUrTQP0jX/VJ1nFBkZvzetGARMxh3i9iEOnTOqC3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNrrmBRoKhT0aJBhY+5fe2MfItWsMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMnV1WUZHZ3FGUFJva0dGajdsOTdZeDhpMWF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgiMA0G
CSqGSIb3DQEBCwUAA4IBAQAcEcX9AI4KZNihax4aXjq4Jdz8X+oZYm/RoAmzpLkI
zgJkvFDGSIrSpHwfbfTEexvNO1J7sbr2aYw22hGfs9f01RLpGd8qpRYM3NL/rrL5
95wCCm4few8t79dxk3Szplbif83TMF+yf27V/greE28JG2MVYOd1QVRZkK5RiEA+
0k5H6Mp5tMz7Rvj0S98DTlQTl2+Xk2Lx5T98SZkP4vN/baF5ZzRGqos8JJMj+H5H
1QE8cbu81jIn2Qpt9udXD+4Ecp5jl16x1GfrqujKWzS57oCXDrhnyZn+qXiOdhZC
FeLmn3MDdJvLmAuo+bfde9XHdUeap+2wb/TD1BBePYqh
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:40 2026 by rpki-client