Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A9inXOirjbPEKzypmfm3y0HW0e0.roa
File: A9inXOirjbPEKzypmfm3y0HW0e0.roa (raw, json)
Hash identifier: VGwcmpkk/lyNoQoKz6rCzN3vMHAlXdCLyWL6XiKkEPQ=
Subject key identifier: 03:D8:A7:5C:E8:AB:8D:B3:C4:2B:3C:A9:99:F9:B7:CB:41:D6:D1:ED
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D053F0F4EAD11D06194F79606A1D83B83
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A9inXOirjbPEKzypmfm3y0HW0e0.roa
Signing time: Thu 19 Mar 2026 08:38:31 +0000
ROA not before: Thu 19 Mar 2026 08:38:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51031
IP address blocks: 31.56.66.0/24 maxlen: 24
31.57.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 14:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:3f:0f:4e:ad:11:d0:61:94:f7:96:06:a1:d8:3b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 19 08:38:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03d8a75ce8ab8db3c42b3ca999f9b7cb41d6d1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ab:76:45:e6:b2:f4:e1:ce:49:1a:01:90:5d:
d7:c4:8d:c8:7f:a6:e0:5c:02:86:67:7e:54:83:6c:
8a:f0:c1:22:94:a8:c4:c8:df:02:80:22:5b:46:cf:
9e:e1:53:14:49:77:1b:28:56:ca:08:fc:0a:75:36:
88:59:da:64:08:e2:96:a8:3f:9d:bd:b6:f8:c4:53:
1d:7c:78:d7:70:a7:fc:22:1a:25:6e:34:0b:93:04:
1c:ee:0a:92:53:a5:51:64:8f:d4:34:26:6b:6b:b4:
75:5a:7c:a7:d3:34:33:a0:aa:c4:48:b5:cc:2e:b7:
6d:28:5a:a8:d5:47:19:39:6e:6a:84:d1:e5:8f:e9:
d0:9c:24:88:56:b8:ba:c9:58:80:2b:ec:a0:41:8d:
9b:ab:fe:64:fb:62:ab:61:db:49:1e:66:41:98:53:
d3:8e:ef:a2:d6:f1:db:aa:59:db:96:70:3c:ad:bb:
2a:fd:e4:76:ad:8c:e7:ca:76:5e:28:54:1e:a4:26:
4d:b0:f9:a4:f4:b7:0f:64:f9:e5:f0:2d:cc:25:21:
82:2e:1e:4a:28:31:d4:a8:a5:2f:14:03:30:f5:9c:
a9:f3:d4:f9:85:a4:fa:b1:f0:92:99:ae:00:6d:ec:
42:da:d8:95:e6:36:0b:d9:30:84:c7:ed:a6:ff:be:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D8:A7:5C:E8:AB:8D:B3:C4:2B:3C:A9:99:F9:B7:CB:41:D6:D1:ED
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A9inXOirjbPEKzypmfm3y0HW0e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.66.0/24
31.57.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:47:75:8e:bd:db:9f:58:ad:b4:9b:04:43:f5:19:14:4a:0a:
fb:91:d1:64:59:60:d8:ad:8f:b6:2d:aa:9f:77:b6:85:01:e9:
a5:9d:da:54:3d:b9:16:b4:8d:66:5b:eb:85:25:ac:b5:77:a3:
e7:b0:30:80:dd:15:a7:4d:44:b3:a8:ca:96:21:b5:69:4a:72:
cc:9c:cd:23:aa:1c:2f:f9:a5:b8:fa:67:31:01:d3:33:82:e1:
aa:3b:2c:02:48:83:79:d9:dc:e7:74:32:01:0c:86:41:dc:91:
e2:0f:a8:4f:91:35:ae:ed:7c:db:fb:a8:4e:7f:e8:18:c6:a4:
25:df:67:a9:c9:11:ed:01:54:61:1b:65:6f:48:4e:8e:e2:5e:
30:c5:3b:d7:09:db:52:2b:09:19:f0:14:a1:18:62:0c:7b:bc:
f8:9b:60:3e:c2:90:d7:69:85:f4:3e:1a:78:7b:05:0b:ae:43:
0d:27:b8:e6:f8:06:e5:7e:1a:c7:aa:8b:e4:14:a9:2c:99:51:
b3:47:4a:12:40:11:b7:cf:7e:1f:19:39:0a:4e:a0:04:a6:de:
4e:56:97:38:36:8d:05:93:2c:37:c1:6f:a3:7d:60:d9:54:5e:
53:f8:52:ec:2c:0c:d9:17:a2:8b:91:b7:38:54:18:d7:83:c4:
4e:4b:f7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 18:49:27 2026 by rpki-client