Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5ZVotDjd9dVKDAc-Wdhl5P2CtoU.roa
File: 5ZVotDjd9dVKDAc-Wdhl5P2CtoU.roa (raw, json)
Hash identifier: ujIub9qVDMWxEETVwOC3rMrXOAaRy2Uwl4bVIq3vK8g=
Subject key identifier: E5:95:68:B4:38:DD:F5:D5:4A:0C:07:3E:59:D8:65:E4:FD:82:B6:85
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A051A887AAAB69771D38FFADA1576DFED4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5ZVotDjd9dVKDAc-Wdhl5P2CtoU.roa
Signing time: Sun 30 Aug 2026 07:53:14 +0000
ROA not before: Sun 30 Aug 2026 07:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:a8:87:aa:ab:69:77:1d:38:ff:ad:a1:57:6d:fe:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 30 07:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e59568b438ddf5d54a0c073e59d865e4fd82b685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:66:af:2a:91:d3:ca:b7:be:44:cc:bd:5e:
5a:27:dd:90:12:c1:af:ed:d2:e3:fb:d8:f3:36:d6:
7c:e4:42:68:28:aa:8d:1e:0e:5c:fb:0c:bc:92:34:
a4:d5:e9:34:e0:09:62:64:f2:33:8e:5a:aa:55:80:
c2:9c:54:d3:a9:23:f3:12:af:20:9e:9e:81:25:4f:
b3:36:bc:8f:a0:cb:95:49:93:00:d0:0b:f0:9a:36:
9b:31:1f:b5:d9:b4:23:86:f3:ff:7b:ce:8b:61:0d:
d4:a3:49:bf:e1:ff:88:94:26:16:58:71:2f:15:da:
a0:8c:54:40:e3:f9:c5:69:3c:11:ca:0a:2a:50:a0:
25:f0:72:af:79:f5:72:27:c9:69:2e:46:77:b8:0a:
a3:b8:40:6c:17:08:52:60:77:5f:c3:c3:be:7c:16:
69:43:01:f9:d9:08:3a:b3:ff:97:10:f0:23:eb:84:
1d:f1:0f:ff:91:c0:d0:1b:04:16:d5:6b:56:f1:94:
85:c6:37:55:38:bc:c2:7c:35:95:03:80:b2:dc:f7:
ab:9a:7c:68:0f:08:7c:37:36:72:c6:c2:9d:63:aa:
1a:00:3f:c9:c7:2c:c2:5a:21:27:b1:77:31:5a:e8:
30:a1:41:cc:7b:4b:dd:d5:58:19:a0:de:46:de:11:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:95:68:B4:38:DD:F5:D5:4A:0C:07:3E:59:D8:65:E4:FD:82:B6:85
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5ZVotDjd9dVKDAc-Wdhl5P2CtoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.82.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6a:26:81:14:af:25:c3:99:f2:26:43:03:0c:5d:d7:56:6b:
2f:2b:96:1e:32:e0:87:5c:9a:51:65:42:11:0a:43:76:1f:fd:
9f:4a:26:a4:9a:4a:f4:c5:dc:d1:82:42:bc:b4:a2:75:28:ee:
57:ed:f6:f6:37:8a:a5:f2:3f:63:c3:cc:85:45:23:2b:46:44:
c4:50:75:69:e6:1a:58:34:59:89:eb:7d:01:7c:67:ee:84:2f:
f5:c7:42:92:f8:ca:f8:1a:f1:34:04:9a:ef:b1:62:5f:79:e4:
ef:5d:67:ff:a6:c3:82:96:74:37:7e:b2:f0:2f:49:8f:6c:ce:
70:a4:af:e2:07:5b:3f:37:0a:76:2b:0c:8e:3e:da:81:e5:fb:
66:35:d2:d3:33:cf:8b:d9:0c:f9:c4:68:58:8d:eb:ca:74:bf:
49:34:cf:99:2a:ca:f2:07:be:4b:a4:fa:fa:63:b3:bd:ea:75:
e3:d5:dd:c1:82:c7:d2:99:10:65:b6:80:eb:53:d3:f8:fc:bf:
f2:46:07:8a:4a:46:27:7b:29:32:eb:b9:cd:5b:8f:39:e0:66:
d0:56:b1:77:c8:51:8d:a9:09:30:a7:8d:83:8a:21:8c:9f:25:
a2:2a:74:9a:32:3f:2e:c8:f7:b5:22:4b:71:db:98:38:42:de:
8f:72:ff:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:18 2026 by rpki-client