Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B5nbM_RGcZDThlUR22-rmUF7ywc.roa
File: B5nbM_RGcZDThlUR22-rmUF7ywc.roa (raw, json)
Hash identifier: a5AL9yRGnombaOnXhUCo+wWvUBGIRrReu/1eQDNEE3w=
Subject key identifier: 07:99:DB:33:F4:46:71:90:D3:86:55:11:DB:6F:AB:99:41:7B:CB:07
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A05442B765040B4C5D67FB66A51B9AB4C8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B5nbM_RGcZDThlUR22-rmUF7ywc.roa
Signing time: Sun 30 Aug 2026 20:00:53 +0000
ROA not before: Sun 30 Aug 2026 20:00:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 31.56.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:54:42:b7:65:04:0b:4c:5d:67:fb:66:a5:1b:9a:b4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 30 20:00:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0799db33f4467190d3865511db6fab99417bcb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:6d:8a:e2:98:6f:0b:2e:07:5e:bb:45:3d:
a9:40:cc:82:20:46:60:13:11:b4:aa:47:7a:aa:1b:
44:5f:be:7d:53:e8:4b:49:32:ce:3f:a0:ec:67:60:
0b:44:13:13:6a:fa:dc:a4:50:a1:24:a9:19:9d:30:
2a:93:7b:fe:e3:ca:f0:c1:a2:c8:dd:82:02:cf:01:
c3:fb:4b:0b:b5:38:92:c6:7a:e7:fa:d6:9c:e9:b9:
4a:4d:1b:0d:9b:90:1c:47:f8:a3:d6:53:6b:d7:6b:
1f:f2:83:75:cd:ff:e5:45:40:9b:1e:7a:f9:89:c2:
7c:9e:c4:b4:f8:e6:9f:d7:35:13:b3:77:18:0a:62:
06:f0:4e:3c:16:58:6a:d1:ed:d4:78:fd:9c:b9:f1:
2d:b3:dd:8f:d0:a7:0e:c0:f4:f8:3d:8e:02:ae:d2:
14:f3:1f:7d:77:e1:f1:79:00:5a:7b:d5:bd:b7:4c:
3d:8a:3a:9d:4c:f4:b5:3d:52:dc:f0:2c:bc:e0:5b:
21:d0:0c:96:0c:75:01:1b:3a:fe:e4:f3:75:1d:ec:
e1:a9:6d:c4:1a:ec:69:46:50:69:90:2d:f8:f2:be:
cd:f4:4c:5c:dc:f3:c7:77:74:a3:80:95:78:0f:a2:
27:2f:69:9c:b1:37:e5:b0:12:24:91:93:ec:ac:5d:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:99:DB:33:F4:46:71:90:D3:86:55:11:DB:6F:AB:99:41:7B:CB:07
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B5nbM_RGcZDThlUR22-rmUF7ywc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.100.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:54:e8:ad:82:53:5e:52:3c:ba:f4:e0:90:c6:70:3f:49:0e:
2f:09:4a:8d:50:47:d8:fe:4e:cc:0e:aa:67:29:72:aa:16:df:
48:e1:1c:97:45:c3:f2:80:97:ea:c3:59:da:fe:ed:f9:81:aa:
52:2f:18:6d:dd:b5:79:e6:59:08:02:e2:c6:1e:48:67:e7:30:
2d:ba:bd:06:c7:92:e7:3e:f3:0d:fd:89:21:b6:f3:d8:27:fb:
a7:3b:4b:f5:71:b3:a0:2e:83:a3:92:19:8f:7c:bf:1e:bb:38:
cf:a9:ef:45:b9:b0:60:a6:a5:3e:64:6a:22:6b:7f:33:65:fd:
e8:f8:57:53:7f:b5:b9:bc:12:c2:7a:d2:af:01:3e:40:85:93:
f4:77:28:53:7c:a1:6b:3e:ec:34:b8:72:32:b9:98:79:ed:e4:
59:94:fc:e8:34:c2:0a:31:65:f0:16:e5:9f:d3:60:8f:40:77:
82:17:79:3c:ba:03:2b:db:06:21:75:e3:5d:89:c1:43:14:47:
9f:1a:9e:e4:60:ce:13:85:7c:db:03:b7:77:a9:2f:e1:59:4b:
cc:d9:13:a3:34:47:53:7b:dd:e1:82:8a:bb:35:0f:20:33:83:
ee:08:50:7e:36:8b:aa:f4:5a:51:67:88:cf:fb:8d:12:38:95:
41:ac:3b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:18 2026 by rpki-client