Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6KCV7bSnLWQ4QexBfFZA99vaNO8.roa
File: 6KCV7bSnLWQ4QexBfFZA99vaNO8.roa (raw, json)
Hash identifier: 6AO9nRv7eO/CeMfLASCtA+cX8Dna8ZEc0FdDXLrUqo0=
Subject key identifier: E8:A0:95:ED:B4:A7:2D:64:38:41:EC:41:7C:56:40:F7:DB:DA:34:EF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A167EEA404BABFEC4791B5BB0AFF179252
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6KCV7bSnLWQ4QexBfFZA99vaNO8.roa
Signing time: Fri 23 Oct 2026 08:44:15 +0000
ROA not before: Fri 23 Oct 2026 08:44:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 31.56.0.0/24 maxlen: 24
31.57.53.0/24 maxlen: 24
31.57.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:ee:a4:04:ba:bf:ec:47:91:b5:bb:0a:ff:17:92:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 23 08:44:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8a095edb4a72d643841ec417c5640f7dbda34ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:f4:1d:fd:f6:a3:71:cf:c5:96:a5:5f:89:
55:d0:82:25:a6:f6:1a:50:9c:25:dd:be:7e:74:36:
a5:7d:4a:b6:e4:ea:ef:c3:c3:41:36:f1:17:80:bc:
a5:3e:20:95:4f:30:16:16:5b:b0:44:3c:42:c2:be:
15:4c:25:e2:cb:af:aa:b7:d5:fc:8c:24:6b:48:df:
ba:4a:e1:14:4a:b3:72:16:a5:dc:c2:46:48:72:f5:
c4:84:b4:b4:1b:d0:d9:30:a1:ec:14:52:b6:82:1a:
eb:d0:0d:83:9c:c6:5a:5b:c2:1e:5f:54:bc:5b:18:
a3:6d:af:87:16:d6:45:ca:10:2c:0a:d7:f3:35:42:
46:fb:de:f0:01:9f:12:17:41:39:88:6e:f1:0a:ba:
7b:a8:b1:d3:8c:b3:9d:0b:03:5c:77:d4:f8:b9:4c:
58:6b:17:f5:11:b4:bd:fb:56:5c:31:c8:60:f4:c1:
63:98:4b:2a:10:88:f5:a8:a7:fc:09:f0:db:22:ae:
1f:65:24:21:d2:ae:5b:f6:40:ec:a8:a7:ff:d7:8a:
49:12:c4:ac:5c:5f:b2:c0:50:56:34:46:66:28:a7:
32:67:86:8e:7a:34:a7:07:70:2a:3f:e0:a7:1a:3b:
08:d8:92:00:44:de:76:eb:94:f4:08:82:06:0c:59:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A0:95:ED:B4:A7:2D:64:38:41:EC:41:7C:56:40:F7:DB:DA:34:EF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6KCV7bSnLWQ4QexBfFZA99vaNO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/24
31.57.53.0/24
31.57.59.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f9:0d:35:39:8d:06:dc:ff:1e:61:21:87:48:98:81:a0:bc:
38:c2:ed:0d:ad:4b:04:b9:ae:b9:b1:cd:cb:b4:94:c9:bd:78:
62:cf:97:f8:cf:06:dd:5c:d9:b5:6b:e2:6d:c2:a6:78:04:17:
b3:50:74:6c:56:f4:58:72:bf:db:38:47:52:41:b9:52:f0:30:
39:fe:38:4a:42:4e:4e:a0:8f:9a:e9:a9:a5:f6:5d:47:27:c5:
33:b6:83:be:b8:50:de:f8:dc:3a:81:ce:42:91:52:49:01:89:
0e:eb:fc:4e:32:6e:49:90:ae:3c:77:25:c1:e6:30:70:73:79:
6c:9a:87:d6:90:8d:60:2e:25:9b:5e:06:d3:79:c1:e3:88:fe:
66:44:f7:54:51:fd:5d:1c:2e:c5:35:0b:50:f6:c4:43:9d:ec:
48:6b:e8:2f:d0:ec:73:31:50:61:1f:b4:6f:12:fe:d2:e0:c1:
e6:c0:eb:eb:1d:89:ab:7b:26:e0:e9:a8:95:b9:a3:6b:46:9c:
e0:44:d7:68:b2:b5:d9:a1:5f:f0:f6:1e:de:44:ef:52:ac:85:
3b:26:73:1c:66:b5:34:6e:fa:a8:77:cf:d4:0c:0b:59:89:37:
98:ff:c0:74:63:b8:1d:c5:a4:41:8f:73:17:87:37:6a:49:df:
35:05:d6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:46:06 2026 by rpki-client