Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8_lMuYsxoKDD118asRiqEK4gi-g.roa
File: 8_lMuYsxoKDD118asRiqEK4gi-g.roa (raw, json)
Hash identifier: lrnZLZaVOXCQLWaXXfpNp9yHufKd2sGE7+do6HNojNc=
Subject key identifier: F3:F9:4C:B9:8B:31:A0:A0:C3:D7:5F:1A:B1:18:AA:10:AE:20:8B:E8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A03A2D66937A634A5721CD0ABD0231D50C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8_lMuYsxoKDD118asRiqEK4gi-g.roa
Signing time: Tue 25 Aug 2026 18:27:28 +0000
ROA not before: Tue 25 Aug 2026 18:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31863
IP address blocks: 31.56.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:2d:66:93:7a:63:4a:57:21:cd:0a:bd:02:31:d5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 25 18:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3f94cb98b31a0a0c3d75f1ab118aa10ae208be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:a3:87:aa:2a:f5:a2:80:9b:c6:97:e7:c1:
97:28:7c:d0:1c:3a:78:60:13:c6:13:5b:05:90:8d:
40:91:9a:0f:df:5a:e6:de:8b:12:fe:ba:bd:d3:74:
27:10:9c:96:90:e8:c5:32:25:d5:58:0e:9d:a0:63:
42:d1:9c:47:3b:9b:e3:c9:4f:3d:d2:02:83:2c:f7:
56:72:4a:6f:1d:5a:66:59:1e:1e:c5:be:3c:93:f9:
16:07:47:e7:df:86:33:35:87:4f:88:ff:ef:9a:9e:
aa:d0:99:07:8f:05:56:29:2f:93:97:7e:44:57:0b:
dd:0a:80:7f:bd:f2:3f:5b:9e:d8:15:8b:47:37:33:
f3:a8:c6:d9:a1:c9:5c:b3:ae:d4:04:80:5d:31:b0:
bd:a8:e2:51:31:47:1b:44:e9:49:43:d7:d3:ef:96:
d6:36:de:a0:8b:ce:1a:1e:87:d0:08:1e:99:b5:61:
93:42:2c:2d:e0:b6:8b:cf:08:f8:5e:5e:68:2b:39:
ab:51:1e:2c:0a:a3:93:61:11:c7:42:10:f4:4a:e0:
fc:09:b8:f0:ae:a7:a4:b5:69:7d:cb:ca:7b:8e:05:
83:a8:76:82:7f:3e:ce:1c:05:0a:dd:49:f0:29:5e:
07:83:c1:e6:ff:2e:34:23:68:4d:4d:31:eb:be:73:
53:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F9:4C:B9:8B:31:A0:A0:C3:D7:5F:1A:B1:18:AA:10:AE:20:8B:E8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8_lMuYsxoKDD118asRiqEK4gi-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
Signature Algorithm: sha256WithRSAEncryption
31:fe:a0:47:45:2e:46:45:0e:0d:5e:34:3e:5d:cf:c7:27:86:
c2:df:12:42:1a:1b:a2:d6:19:84:30:82:e2:7c:c1:69:e6:7b:
1b:d2:90:46:51:97:3c:21:9b:dc:36:76:31:77:1e:6a:32:68:
b7:6f:28:51:21:c8:0a:ab:4f:53:af:41:ad:2a:fd:92:8d:bb:
36:aa:17:48:e2:e6:07:63:1a:20:76:e5:84:ab:94:b2:e9:b1:
d3:f1:ce:59:f9:e8:9f:ff:fa:84:36:ad:c2:1b:e5:ea:6c:5c:
0c:d4:d1:af:ae:7f:dd:19:75:54:f8:ec:29:c2:31:a9:f4:d4:
7b:08:b3:33:08:b4:de:87:bd:03:a8:28:76:71:1e:e9:b1:7e:
9f:d7:13:4d:e9:f3:69:12:32:68:e0:04:39:25:ee:39:5d:1a:
6f:05:33:e4:23:2f:b7:e8:4e:9d:f4:25:44:97:35:55:b2:6f:
55:bd:dd:c5:a2:93:c6:aa:84:47:cf:52:cc:f4:2a:8e:18:cf:
40:87:14:91:f3:20:5e:2b:71:38:51:bb:43:6e:40:d3:a5:c7:
a3:52:23:61:64:1f:e5:4a:d0:3d:27:b8:9a:fa:64:63:9f:f7:
41:a0:e0:32:d9:8f:ed:c8:56:ce:9a:a5:39:29:5f:cd:9b:d2:
86:9c:7c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:59 2026 by rpki-client