Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4lBgmswPJTo-1RBd3s7rLamHqR0.roa
File: 4lBgmswPJTo-1RBd3s7rLamHqR0.roa (raw, json)
Hash identifier: dZ1o9NfejGxyjsfu7PVCtZEXMOXbvlNKcvJXrkleJDc=
Subject key identifier: E2:50:60:9A:CC:0F:25:3A:3E:D5:10:5D:DE:CE:EB:2D:A9:87:A9:1D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FB98879600A7A1EDC5DC89E6E5DC77BAC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4lBgmswPJTo-1RBd3s7rLamHqR0.roa
Signing time: Fri 31 Jul 2026 18:55:56 +0000
ROA not before: Fri 31 Jul 2026 18:55:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207343
IP address blocks: 31.57.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:88:79:60:0a:7a:1e:dc:5d:c8:9e:6e:5d:c7:7b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 31 18:55:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e250609acc0f253a3ed5105ddeceeb2da987a91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:53:df:eb:aa:ac:66:73:93:b7:de:82:fe:e3:
29:c0:44:d1:0d:90:fa:68:44:8f:85:0f:4a:78:65:
19:49:fa:8e:4a:a1:43:9c:c8:d9:e5:97:34:df:f5:
ac:a1:eb:01:e6:ae:c7:d7:37:30:12:c4:4b:64:f5:
47:84:c7:36:98:be:ee:5f:5b:f0:ca:47:dc:de:3a:
c3:90:0a:3b:2b:6c:50:98:c9:fc:74:20:f2:5b:78:
59:f8:96:f6:71:88:87:f1:39:fa:8e:ac:c7:f4:43:
40:1b:f5:ad:f6:51:f4:79:d1:e7:83:e4:d1:f2:83:
d2:d3:c9:1e:8b:02:ae:bc:74:d9:9d:62:c8:ff:6a:
b4:40:c5:a0:14:b9:0d:67:7c:2d:ec:9d:8d:9d:1c:
de:6b:30:c5:7e:10:52:20:40:64:d7:ff:11:fd:54:
90:9d:a8:4a:93:6e:49:24:31:59:69:a6:e8:7c:f2:
e3:c7:a9:23:1f:56:79:49:b3:e0:6e:3b:9d:a9:9b:
7f:61:ac:52:09:9f:c0:4d:8b:27:50:44:8b:11:aa:
8e:b1:eb:96:d6:9c:83:ee:e6:95:e9:54:99:4d:d8:
d0:ff:24:bc:f3:fa:3d:0f:0c:f3:42:87:ab:f3:8b:
78:2a:41:d5:bb:19:b1:a9:e2:28:f9:5a:7c:c3:51:
22:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:50:60:9A:CC:0F:25:3A:3E:D5:10:5D:DE:CE:EB:2D:A9:87:A9:1D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4lBgmswPJTo-1RBd3s7rLamHqR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.98.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:80:e8:7d:80:48:c1:d2:c4:21:1f:be:a7:12:8a:57:c8:65:
80:e5:96:b7:bb:45:c0:9e:12:eb:8c:02:2e:36:4a:e5:03:57:
58:39:ac:19:cb:56:55:9c:52:10:8b:c9:77:dd:14:c6:b0:2a:
6e:c6:f0:af:01:ba:7b:93:b0:31:b6:ac:00:b8:c1:ec:d0:0d:
eb:60:77:ef:48:b1:24:9c:2e:8c:52:6f:a4:f7:05:9e:f3:73:
d6:82:48:11:42:ed:ad:aa:db:de:02:53:33:fd:e9:6b:49:4b:
a8:d3:17:6b:a8:8e:73:34:6e:39:f1:af:66:79:fc:94:44:9d:
be:70:73:fa:67:ad:db:66:08:05:19:fa:28:7f:ea:a5:fd:5b:
a4:72:76:68:9d:c6:1c:53:3b:0a:bf:b6:33:20:fa:6e:60:9c:
c5:d4:4b:39:e7:39:2f:2f:56:28:92:63:1e:d8:b4:b4:f9:10:
96:0d:1e:4d:40:6c:cf:83:a6:63:f6:03:cb:b7:ed:f7:90:cd:
0f:c2:d8:68:56:40:01:68:73:9d:9e:80:cd:98:fe:bb:27:2d:
76:45:3c:16:3c:e2:aa:73:3c:ee:15:2e:8d:3f:52:6f:26:d9:
0a:47:06:08:e1:17:74:d5:11:8b:30:c3:51:58:08:9b:5d:e6:
bd:8f:43:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:04:41 2026 by rpki-client