Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/34a955Ix5iM0FDYndbPSmUQzxG8.roa
File: 34a955Ix5iM0FDYndbPSmUQzxG8.roa (raw, json)
Hash identifier: oclA5LsV0E2+VfL81fKyIHeGN4ohaAAPzToQJ9olNVE=
Subject key identifier: DF:86:BD:E7:92:31:E6:23:34:14:36:27:75:B3:D2:99:44:33:C4:6F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E4ED6270CB45B869E1BF06F009C2568C7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/34a955Ix5iM0FDYndbPSmUQzxG8.roa
Signing time: Fri 22 May 2026 08:38:37 +0000
ROA not before: Fri 22 May 2026 08:38:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153169
IP address blocks: 31.57.238.0/24 maxlen: 24
31.58.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:d6:27:0c:b4:5b:86:9e:1b:f0:6f:00:9c:25:68:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 22 08:38:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df86bde79231e6233414362775b3d2994433c46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e6:df:ad:fe:bd:20:38:09:d2:59:53:6b:0c:
44:98:7c:f5:ba:8d:9d:df:cf:f9:63:5f:8f:f7:d7:
cb:eb:27:13:0f:a5:d4:c2:c9:a1:d5:14:f2:88:b5:
56:55:f0:92:29:c2:6c:c1:35:81:36:fd:6a:df:32:
c5:96:32:5b:ff:b3:df:8b:a1:d2:c8:a6:66:d9:6c:
41:82:cf:99:f9:2f:7a:60:e0:23:2a:f2:16:64:71:
72:60:6e:a3:25:33:94:5a:e7:1b:87:18:69:be:18:
ca:7b:40:79:c3:7d:37:cd:af:76:b6:4b:ce:f2:9d:
4e:b7:41:d7:31:fa:58:11:ed:c4:a1:0b:f9:f3:4d:
39:4c:ba:93:c2:0c:27:26:06:71:15:6d:6c:6e:52:
82:5e:22:2a:87:ac:49:75:a1:4d:3e:59:40:e2:a0:
6d:c6:76:39:ba:a7:ae:f2:cb:65:99:1c:8d:45:fb:
e1:10:a2:1b:b0:b7:33:93:ab:fb:21:01:ac:2a:c2:
1b:c9:38:7d:39:be:bf:c1:e8:e9:59:1f:ef:20:39:
0b:7f:f3:eb:5f:4e:b0:86:3a:30:ec:8a:55:6e:3b:
67:42:43:aa:e8:20:c8:7e:67:35:a0:c9:38:0b:80:
10:7b:62:8a:a8:39:5c:6e:65:13:f7:4a:da:ab:7d:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:86:BD:E7:92:31:E6:23:34:14:36:27:75:B3:D2:99:44:33:C4:6F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/34a955Ix5iM0FDYndbPSmUQzxG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.238.0/24
31.58.221.0/24
Signature Algorithm: sha256WithRSAEncryption
47:71:b8:37:5c:80:68:30:a0:36:f9:65:1f:81:c4:4d:a3:f4:
af:bc:19:78:c1:af:11:1b:4a:c2:7f:56:14:f5:f9:33:1e:2f:
a4:99:6f:16:44:60:36:c5:ff:c6:d6:a9:c0:3d:19:33:63:4b:
f1:18:c4:84:6b:90:5a:1f:ff:b9:90:3d:d3:4b:22:e5:89:7c:
92:0c:90:09:16:b1:af:cf:dc:0a:5b:09:ae:a9:d7:8f:dc:96:
32:25:da:9a:2d:5b:09:2c:95:f6:f7:43:56:1b:45:fd:fe:96:
e8:3e:b9:2d:68:0e:87:71:6c:8f:1d:06:99:82:65:a2:dc:5d:
8e:62:2c:b3:68:2e:85:0a:70:06:02:06:91:42:de:05:73:95:
e9:d9:a7:9b:ed:04:37:b5:f5:45:38:c5:c0:c7:8e:a4:52:b3:
29:88:85:ab:ce:6e:6f:5a:e3:e3:05:22:32:3c:5f:48:89:b0:
da:60:e5:6f:45:09:ad:17:4d:2b:3a:04:a1:48:e0:c6:5e:80:
05:dd:0c:6f:26:c6:9c:6f:cb:20:04:3d:dd:10:30:30:72:32:
19:d1:e9:f8:f0:ac:b6:b7:58:55:bd:96:3a:8c:c2:74:16:a5:
26:3f:a1:cc:d4:ba:28:10:5d:79:21:88:df:34:e0:1d:06:4a:
53:04:d3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:18:40 2026 by rpki-client