Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5a8y5IkIk66m940PEKFoELSosEw.roa
File: 5a8y5IkIk66m940PEKFoELSosEw.roa (raw, json)
Hash identifier: 4dG//d8CEq2OcYDsfH7mNk41+//0lcOmnCDbAVrTMeI=
Subject key identifier: E5:AF:32:E4:89:08:93:AE:A6:F7:8D:0F:10:A1:68:10:B4:A8:B0:4C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0E8E06A86D6B0F050A034D8A2AAA9EDAD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5a8y5IkIk66m940PEKFoELSosEw.roa
Signing time: Mon 28 Sep 2026 16:36:56 +0000
ROA not before: Mon 28 Sep 2026 16:36:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 31.57.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:e0:6a:86:d6:b0:f0:50:a0:34:d8:a2:aa:a9:ed:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 28 16:36:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5af32e4890893aea6f78d0f10a16810b4a8b04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:b8:b6:d9:d1:ec:aa:60:98:54:fd:20:f0:
83:8b:a9:45:2e:39:e8:7b:7a:fa:00:63:43:f9:ab:
8b:41:ce:12:82:f0:15:e1:16:95:b3:2e:4d:51:1d:
75:fe:24:c7:85:61:18:4e:44:30:ee:54:be:b0:d3:
88:07:09:d0:6a:0b:08:35:80:18:2c:9f:1b:48:fd:
56:7f:e0:6d:a6:26:f2:a2:34:3d:fd:58:2c:0e:19:
77:4b:dd:ef:e4:b2:e8:eb:6f:26:4f:80:a8:77:4b:
e3:25:ce:32:6e:48:ea:49:bf:d0:3a:6b:92:bf:44:
ba:cc:ca:ec:48:53:5e:c2:bc:01:1f:10:f5:8a:5f:
7e:5e:1e:1f:cf:fa:7d:46:7d:d8:9c:81:47:af:b8:
f0:2e:5a:2e:d5:29:66:0d:cf:c9:db:35:0c:23:78:
dc:cd:cd:5d:8c:c3:6f:d1:73:f5:08:16:06:72:9d:
b6:e9:c7:46:5b:a2:41:b2:ef:e7:4d:6c:1b:ca:8e:
13:08:55:9a:79:08:05:a9:0b:21:37:d2:c7:b6:d3:
ee:47:81:04:e6:d6:04:59:28:6c:76:f4:7f:fe:5d:
e8:db:3c:b7:fc:70:be:dc:c3:e4:07:12:a7:19:9a:
e4:97:6c:b2:dc:ee:49:66:ca:ac:27:df:24:ce:57:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AF:32:E4:89:08:93:AE:A6:F7:8D:0F:10:A1:68:10:B4:A8:B0:4C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5a8y5IkIk66m940PEKFoELSosEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:58:5c:6e:d3:24:20:70:88:71:1e:b7:6b:f6:eb:f1:d3:d9:
3d:0a:de:a5:78:36:01:6a:de:ba:b0:43:97:7f:5d:ab:73:3a:
99:46:30:3a:0e:50:fc:52:05:f1:dd:59:a7:cb:13:d7:d2:ff:
96:31:ad:ce:9d:d3:94:4a:7a:95:13:a7:03:9c:3e:e3:62:0a:
fe:fb:de:d9:ad:26:fa:26:ef:4e:78:67:27:86:aa:49:6b:ef:
4b:59:1d:43:1a:a0:7c:71:a8:64:15:ae:35:04:36:11:f3:08:
d2:70:ec:87:38:39:2f:64:46:2d:21:a5:81:10:cc:3b:c2:44:
e6:9b:c4:60:d6:41:62:b4:5b:f7:0a:b0:1b:f8:d0:3a:0c:1d:
33:e8:4d:2d:e0:69:06:23:48:8f:94:b9:3a:b0:43:06:e2:3c:
98:96:8d:f3:00:b8:71:92:67:68:a2:8e:56:3f:5a:9f:70:f3:
52:24:d3:9f:28:9b:a6:72:79:6b:df:09:d7:ac:9e:9d:f4:68:
e1:33:9b:66:a5:ae:7e:36:09:b4:3a:75:44:4a:0d:d8:10:e5:
e6:f1:c5:4a:07:f6:82:f2:65:24:91:a3:70:a5:a5:18:29:f2:
ca:09:1f:b4:77:d7:46:cd:a3:0d:65:01:c3:e9:3e:95:fe:91:
57:cf:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:12:32 2026 by rpki-client