Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B8FatnJE8cGQWeSlh2YdTNmZEGQ.roa
File: B8FatnJE8cGQWeSlh2YdTNmZEGQ.roa (raw, json)
Hash identifier: pKKswqX6Xre6vl1/vgbjd14+nPNLHs/tRMSyld2WHIs=
Subject key identifier: 07:C1:5A:B6:72:44:F1:C1:90:59:E4:A5:87:66:1D:4C:D9:99:10:64
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A023F7FA914A7D9C0709BC4165E9E2BA53
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B8FatnJE8cGQWeSlh2YdTNmZEGQ.roa
Signing time: Fri 21 Aug 2026 10:57:29 +0000
ROA not before: Fri 21 Aug 2026 10:57:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219068
IP address blocks: 31.56.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 12:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:f7:fa:91:4a:7d:9c:07:09:bc:41:65:e9:e2:ba:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 21 10:57:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07c15ab67244f1c19059e4a587661d4cd9991064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:25:54:1a:74:3a:db:dd:bf:2c:c3:71:54:
99:5a:80:fc:d7:30:15:61:00:96:1c:13:5b:eb:6e:
14:4e:69:ff:e8:bc:91:e1:7a:22:ac:a7:c3:1b:a6:
d4:3f:c4:c5:24:32:ce:94:99:e2:99:ae:b6:61:8c:
fb:8a:f6:be:07:a9:67:c5:2c:f7:d2:a7:87:d5:03:
54:d2:97:ed:bb:1b:95:4c:96:c4:72:86:23:2d:76:
03:c2:68:cd:75:53:2d:f0:c3:b6:5d:78:d2:b5:61:
13:e3:ff:5b:ca:c8:71:46:ac:af:07:96:0b:0e:fe:
c7:25:ac:de:07:dc:77:2c:69:e4:9c:fd:26:4c:51:
2a:91:80:1f:8b:a9:76:b2:d7:f7:b0:48:75:e3:d7:
78:e9:93:9d:b4:ba:af:6b:2a:c0:67:23:47:47:8d:
58:e9:c4:01:0e:01:4e:b8:90:60:d7:89:15:42:2a:
b6:8b:22:4f:83:54:1d:de:1c:d0:20:a8:bc:3a:b5:
ea:29:7c:1d:51:12:45:10:2c:0c:ad:b6:23:17:73:
66:c0:cc:1b:17:c2:08:ee:d9:0c:c3:76:fd:6e:68:
e5:63:87:89:4e:47:d8:a2:8f:c8:52:fa:6b:b5:d8:
e8:85:e2:a4:a6:da:69:a3:f9:90:a4:cc:c6:72:48:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C1:5A:B6:72:44:F1:C1:90:59:E4:A5:87:66:1D:4C:D9:99:10:64
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/B8FatnJE8cGQWeSlh2YdTNmZEGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:5f:bf:b2:76:3e:55:4f:df:3f:24:fe:57:f7:d1:70:5d:20:
c6:1b:78:11:4a:90:59:b7:03:ce:1c:5b:9f:87:70:4a:0e:af:
a9:26:7c:12:f5:35:14:06:b1:8d:24:2f:60:42:31:12:5b:36:
50:ff:f3:62:1a:e8:ff:f1:69:d1:0c:fc:04:fa:c5:b0:c0:7f:
c3:b4:fe:31:b2:44:a8:5d:e0:b0:c4:19:f1:fe:4d:54:a0:dd:
1a:6e:53:f4:6b:13:f7:ef:f1:50:53:5c:7f:34:07:2a:3b:7f:
cf:6f:7f:30:fe:97:ef:57:a0:27:05:e9:c8:1f:bf:83:ca:1b:
c1:f7:f0:48:5a:85:16:82:35:e5:91:4d:b6:07:c1:16:77:0e:
84:f5:99:dd:db:cc:f5:f3:cf:9d:0e:98:6d:c8:c0:be:81:1b:
64:4c:9b:96:27:01:da:98:b9:22:67:f8:32:1e:31:c3:b3:bc:
8e:10:10:13:06:7e:33:92:19:66:f0:fc:dc:ee:a8:f0:3c:25:
fd:b6:40:05:2b:c4:ca:1e:1b:a3:29:e7:7f:e9:e5:54:a2:53:
41:cc:17:44:05:24:bd:03:bd:28:ec:c2:d6:db:37:5d:11:60:
3b:f1:60:18:ad:c5:9e:8d:25:05:54:91:b7:2f:93:09:f7:de:
e9:3a:56:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 15:38:25 2026 by rpki-client