Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9wqxU0hmotE9Bhky5qTScAhgafk.roa
File: 9wqxU0hmotE9Bhky5qTScAhgafk.roa (raw, json)
Hash identifier: Be44jk1T3JwaiF+DicsRJLvskz2OoTGZRhsatG9b3d4=
Subject key identifier: F7:0A:B1:53:48:66:A2:D1:3D:06:19:32:E6:A4:D2:70:08:60:69:F9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DB1558AEB91B4A962DC864630026B2EB1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9wqxU0hmotE9Bhky5qTScAhgafk.roa
Signing time: Tue 21 Apr 2026 18:37:46 +0000
ROA not before: Tue 21 Apr 2026 18:37:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199301
IP address blocks: 31.56.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:55:8a:eb:91:b4:a9:62:dc:86:46:30:02:6b:2e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 21 18:37:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f70ab1534866a2d13d061932e6a4d270086069f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:ef:07:b1:a5:d2:c7:ab:ab:a6:66:30:b1:
8a:19:bf:e4:5c:41:6b:21:6d:2e:7d:00:70:40:dd:
7f:83:73:f5:18:10:86:c9:dc:c4:2b:ec:a0:8e:2e:
43:70:cc:71:c0:09:0e:b1:d6:92:b9:a0:70:60:a2:
48:1b:1f:f2:29:83:fb:0a:ab:94:c1:01:09:f2:50:
d8:17:ea:47:38:5e:26:2d:aa:44:dd:0b:84:76:c4:
7a:dc:b1:5b:99:c2:32:a4:db:f6:f5:62:9f:64:54:
53:4c:12:0d:b7:d9:7a:b9:d9:61:75:ac:1c:b3:67:
d6:28:56:7f:75:0b:0b:ad:b4:54:23:f9:f5:69:61:
f5:86:ce:54:76:8f:39:3a:e8:e7:d5:2c:d5:ca:5c:
95:02:fa:33:1e:0c:5e:e2:f5:ad:f2:af:18:96:c3:
54:21:72:4c:ac:2e:c6:d0:06:8e:f1:46:46:cc:ca:
d2:6b:66:ee:e8:ea:76:82:e9:89:6b:25:d5:09:0b:
d5:bf:2a:7e:af:4d:8a:ce:de:2a:93:da:52:5d:82:
36:5d:46:52:60:4a:dc:3c:f7:44:af:1f:6b:1a:1a:
5b:90:f4:40:cb:53:a8:bf:65:ce:2a:ab:7c:8e:35:
cb:b9:79:da:7b:8c:d8:52:81:3f:32:18:a3:d0:62:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0A:B1:53:48:66:A2:D1:3D:06:19:32:E6:A4:D2:70:08:60:69:F9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9wqxU0hmotE9Bhky5qTScAhgafk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.195.0/24
Signature Algorithm: sha256WithRSAEncryption
28:9a:dc:45:9f:fb:5c:0e:3d:30:55:2b:6a:a9:d9:60:be:d6:
fd:02:08:89:93:9b:33:be:55:b8:7e:fc:7d:7f:2c:cf:79:c2:
e9:35:7d:34:fc:41:a9:09:48:12:a3:9e:af:43:5e:74:e9:7a:
c8:76:f1:78:f5:42:bb:56:a0:94:b2:f8:2d:73:f0:14:1c:0e:
d9:3c:e0:cc:35:77:b8:46:75:17:5c:0f:74:34:ee:86:66:9e:
73:58:75:a2:2f:27:e1:b3:58:ff:8c:87:26:8e:9f:5d:2b:a4:
66:de:af:cd:20:28:98:d1:5d:0d:d1:7d:46:e5:17:75:d9:7a:
fd:c2:f1:9e:2d:81:17:16:58:51:6d:97:30:32:73:a2:63:c1:
15:4c:01:94:3c:ab:7e:2e:9f:e3:ee:22:0b:e1:16:66:15:d1:
30:ee:e4:b1:fd:20:49:23:c4:dc:bd:e0:50:cb:74:c5:ce:f5:
1b:01:20:62:de:16:cb:2a:d5:53:f8:1b:cc:78:f2:94:3c:92:
15:5e:80:60:da:d6:43:6b:1d:60:c8:19:b6:63:b0:70:1e:ac:
3b:bf:12:c4:bf:09:20:78:2b:af:1b:d4:6e:7b:62:e8:02:5e:
05:32:bc:dc:75:20:51:ff:b9:1e:20:48:cb:9d:d9:ef:7d:56:
ce:ae:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:23:12 2026 by rpki-client