Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BMktGBvSEoRKh-4g9fwDYYNx1no.roa
File: BMktGBvSEoRKh-4g9fwDYYNx1no.roa (raw, json)
Hash identifier: AwuZLZ0tLRSnE2/W8ibBzkg64ZRKE57RMX8E81W0ZUw=
Subject key identifier: 04:C9:2D:18:1B:D2:12:84:4A:87:EE:20:F5:FC:03:61:83:71:D6:7A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DB91C89E23E1B233442D7E4624317BC24
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BMktGBvSEoRKh-4g9fwDYYNx1no.roa
Signing time: Thu 23 Apr 2026 06:52:28 +0000
ROA not before: Thu 23 Apr 2026 06:52:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208504
IP address blocks: 31.57.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 18:44:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:1c:89:e2:3e:1b:23:34:42:d7:e4:62:43:17:bc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 23 06:52:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04c92d181bd212844a87ee20f5fc03618371d67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:47:8b:61:9a:7e:25:b1:cb:30:89:16:02:
f1:30:3c:5f:8a:d6:dd:8c:d3:47:bc:8f:13:38:1c:
6a:b1:ea:d3:72:4e:4b:10:6f:8c:2e:d4:38:9d:dc:
a9:cc:ec:52:0f:33:9d:7a:f6:c8:9f:fa:2f:ce:2d:
8a:ad:4e:99:46:4d:f9:eb:51:0e:c1:88:ee:0a:92:
a5:78:48:fa:74:9c:b4:da:68:4b:c1:6d:0d:c0:0d:
05:63:48:e7:5b:9a:c3:a4:50:72:d8:6b:d3:b4:a9:
1d:db:af:c9:37:7f:4f:fa:34:97:3f:2b:2a:7d:0f:
84:3b:8b:29:ea:4e:f4:fa:73:a7:38:20:52:4e:64:
1c:aa:a9:c2:41:65:76:ed:2d:b4:33:90:85:95:24:
83:b6:90:4f:f8:1b:3a:93:9c:cf:90:66:26:20:61:
63:4f:f0:5f:c5:df:00:65:f6:1d:ce:ab:44:b8:41:
2a:9b:fd:ca:b4:7a:e1:50:11:86:3b:2d:82:79:39:
35:c0:9b:1c:60:32:93:c9:81:06:c2:23:b0:3c:84:
5f:12:58:a6:dd:2e:8b:f3:3c:37:20:07:e9:b9:55:
6b:78:64:74:da:fe:9e:9e:d9:74:d7:93:66:ed:90:
8f:42:d5:f2:72:09:e0:77:a8:de:17:e4:13:e3:43:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C9:2D:18:1B:D2:12:84:4A:87:EE:20:F5:FC:03:61:83:71:D6:7A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BMktGBvSEoRKh-4g9fwDYYNx1no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.96.0/24
Signature Algorithm: sha256WithRSAEncryption
65:bb:38:73:1c:bf:87:c5:5d:3f:4a:a0:19:18:c4:df:a4:eb:
fa:c6:66:33:30:7b:be:aa:d4:c0:27:55:16:61:75:55:42:24:
49:c9:de:d0:dc:87:47:d8:b5:24:c1:e6:99:ea:76:1d:5e:2f:
0e:ff:d5:47:5c:ee:66:8f:17:aa:ab:8e:c7:5e:52:69:32:69:
d8:1c:2e:f1:c1:26:a8:14:5b:0f:fe:97:f6:8b:5c:44:7b:c0:
c6:7b:12:1a:57:7a:77:d7:f2:b4:12:e0:eb:82:87:96:5a:59:
a6:24:1a:95:f9:3a:43:9d:b6:23:4e:8f:63:52:9c:ba:ad:27:
31:48:a6:68:b9:eb:91:cb:2e:02:f5:1c:35:4a:cf:19:a4:1e:
5a:b4:eb:ce:a4:24:0c:2b:2f:b4:d0:e7:66:22:68:20:93:3f:
d8:d3:d8:73:44:a9:60:e0:6e:55:4e:20:01:11:d5:40:48:c5:
b0:67:e9:ec:77:7d:c6:38:75:5c:8b:c2:d6:18:1f:84:cc:42:
83:de:18:74:77:36:1e:76:2c:dd:7b:1d:e2:0a:ea:fb:8b:d3:
1e:49:4f:cc:22:64:ad:82:ab:e6:42:cf:73:5b:dc:4b:92:4c:
5d:90:41:1c:39:ac:3c:f4:16:82:08:00:4f:75:79:a0:da:40:
1a:6c:3a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 02:51:33 2026 by rpki-client