Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9cltA4kkE_uIU15nUMirpYJ_siM.roa
File: 9cltA4kkE_uIU15nUMirpYJ_siM.roa (raw, json)
Hash identifier: VlO01gW08/Ir7ugtWBQcQLoPRRRYytI+U2h5BjoZz9Y=
Subject key identifier: F5:C9:6D:03:89:24:13:FB:88:53:5E:67:50:C8:AB:A5:82:7F:B2:23
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E5F70C9049A890076947E002FE0672AF0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9cltA4kkE_uIU15nUMirpYJ_siM.roa
Signing time: Mon 25 May 2026 14:01:27 +0000
ROA not before: Mon 25 May 2026 14:01:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 31.57.12.0/24 maxlen: 24
31.57.15.0/24 maxlen: 24
31.57.53.0/24 maxlen: 24
31.57.59.0/24 maxlen: 24
31.57.146.0/24 maxlen: 24
31.57.171.0/24 maxlen: 24
31.58.44.0/24 maxlen: 24
31.58.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:70:c9:04:9a:89:00:76:94:7e:00:2f:e0:67:2a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 25 14:01:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5c96d03892413fb88535e6750c8aba5827fb223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:cc:e6:86:da:2c:25:53:61:8f:db:fa:d9:
e8:cb:7c:45:9d:cc:0c:93:a3:10:8f:53:97:70:0a:
af:2c:fa:61:3c:8f:d0:e1:2d:5a:7f:b9:b3:d7:4b:
bc:17:3c:7f:10:c3:16:14:3f:e1:0f:76:35:83:33:
4d:cf:76:ae:01:06:98:80:42:ee:4b:d7:de:6f:2a:
cd:e9:63:7c:6d:57:b4:e7:ea:e1:a3:7b:db:78:8b:
dc:e0:70:f9:13:b4:e3:eb:b2:d0:3a:99:68:82:3b:
f6:e8:54:6e:da:23:34:8d:20:d2:e1:d2:b4:f4:ec:
86:46:66:07:cb:7d:0f:e5:90:51:5e:12:28:53:4a:
2d:6a:a1:05:a9:e4:56:11:98:9b:09:e4:17:d8:06:
01:d0:1b:12:cd:84:ba:ed:5c:aa:35:7e:e9:6d:ec:
8b:13:24:5f:a6:a4:ec:f6:d4:41:3b:83:60:dd:97:
99:33:69:72:bc:eb:ee:b8:1f:a7:c5:0f:d9:31:3a:
95:05:d8:1b:b0:a9:70:9c:db:b5:d8:d7:a6:4d:fc:
88:c3:70:c8:0b:18:33:e1:d6:d3:e8:4e:1a:35:06:
89:8e:74:8a:be:78:35:ef:17:5a:c9:1e:64:ea:0d:
67:cd:88:a0:c9:79:d2:2f:c3:cc:38:8e:4e:53:65:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C9:6D:03:89:24:13:FB:88:53:5E:67:50:C8:AB:A5:82:7F:B2:23
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9cltA4kkE_uIU15nUMirpYJ_siM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.12.0/24
31.57.15.0/24
31.57.53.0/24
31.57.59.0/24
31.57.146.0/24
31.57.171.0/24
31.58.44.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:2a:78:42:9c:1c:46:4d:23:8c:30:7f:cd:d2:63:a9:fd:91:
43:64:3c:7f:79:7b:bf:0c:e7:00:d2:bb:9a:39:45:2f:93:d1:
9b:ed:78:68:18:e8:a9:86:bd:8f:a5:ba:dc:38:03:64:76:1d:
8f:c0:3a:86:b6:47:70:7c:55:be:1f:73:b5:af:cf:7e:94:69:
be:08:7a:35:b0:b8:ee:40:8f:17:fd:e1:46:84:8f:b8:f1:10:
6c:b4:56:fa:1c:b4:43:32:e7:c5:8d:f9:f2:38:85:e2:4d:07:
93:76:97:99:b3:f0:a7:38:1c:84:f1:d7:04:7a:44:91:25:fa:
33:66:22:df:26:be:1e:e6:75:89:61:45:14:f8:0b:fd:b1:06:
3d:01:2f:2b:27:c3:09:09:cd:bf:f9:10:5d:7d:4d:24:49:59:
a1:ca:4c:59:02:db:fa:d7:b3:69:58:fc:b1:d1:e5:53:7f:c6:
76:96:1e:f4:c4:f3:23:24:06:1f:96:61:93:fd:97:ac:5f:0d:
7f:fb:e2:44:62:e2:4d:57:49:32:46:ce:5d:88:c7:d9:91:42:
3a:99:3f:6e:f3:0c:6b:9e:ea:bf:9e:d3:0f:f4:93:43:0e:52:
45:19:e0:08:7c:04:05:08:57:27:b3:3f:5d:c2:8f:f4:76:23:
68:f7:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:59:22 2026 by rpki-client