Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BVHBo773gPk7wX90_aNnEej5Sa4.roa
File: BVHBo773gPk7wX90_aNnEej5Sa4.roa (raw, json)
Hash identifier: cSrClyvNcdwYZoDeV4jt2ECdqx5BCErObA+GxXWVVIs=
Subject key identifier: 05:51:C1:A3:BE:F7:80:F9:3B:C1:7F:74:FD:A3:67:11:E8:F9:49:AE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A14B549016E01C019BA8CA888D9770A1B4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BVHBo773gPk7wX90_aNnEej5Sa4.roa
Signing time: Sat 17 Oct 2026 19:26:35 +0000
ROA not before: Sat 17 Oct 2026 19:26:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23061
IP address blocks: 31.57.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:54:90:16:e0:1c:01:9b:a8:ca:88:8d:97:70:a1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 17 19:26:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0551c1a3bef780f93bc17f74fda36711e8f949ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:ab:43:c5:3e:b5:7d:8f:b7:a4:5c:02:52:
a5:76:fd:a4:f2:00:e6:99:f3:3c:cd:5d:d3:de:53:
dc:52:97:30:6f:4f:44:d5:d6:02:0d:75:32:fe:4d:
3b:62:8e:8d:8a:9f:6f:59:96:c8:d8:5c:1b:ef:ab:
c5:14:98:b0:f5:02:4e:38:08:30:e1:af:cf:c9:47:
80:69:e0:df:30:78:2b:90:c6:ed:99:d1:b4:92:81:
f9:63:9b:ff:62:e0:d6:05:f1:4e:7b:cb:f3:ea:65:
b8:b7:cf:3a:fb:ac:da:3e:61:35:e4:3a:b1:74:f3:
33:1c:5a:28:a4:d2:74:85:70:62:e5:76:d1:ba:8c:
5e:da:33:c7:d1:34:3a:0e:9e:0e:8d:d4:d4:77:09:
98:6f:95:d3:7c:07:85:2a:d9:7b:d4:c8:6b:cb:94:
b9:bc:73:0b:52:c4:64:a1:a3:fc:48:69:44:92:06:
8c:30:b2:f7:8f:b6:cf:0d:75:7e:32:92:e9:4d:93:
60:e6:6a:b8:1a:30:30:9d:c1:eb:c8:e1:37:24:b6:
66:40:e4:02:67:df:f3:a8:82:ff:bc:4a:99:de:c1:
c9:3e:ce:93:91:39:e1:43:b1:74:c6:dd:12:ff:b6:
6d:8b:31:c1:34:9a:46:68:fa:bf:3a:1d:b6:6c:b8:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:51:C1:A3:BE:F7:80:F9:3B:C1:7F:74:FD:A3:67:11:E8:F9:49:AE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BVHBo773gPk7wX90_aNnEej5Sa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.55.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:fc:72:64:b4:72:d1:45:06:ab:9d:34:e8:f4:0b:66:fd:ae:
78:9a:71:23:40:4a:4f:f2:bc:a8:30:9d:76:69:a3:9b:74:b0:
20:e6:b9:d0:94:11:6c:8c:c2:f2:45:a6:85:74:fb:23:69:dd:
53:00:74:95:68:d6:78:44:09:45:33:51:26:73:b6:39:92:79:
89:9a:46:24:da:85:11:87:43:3c:84:0f:11:64:d8:61:5d:a2:
4a:6c:a1:ee:b8:ad:a0:44:1a:7d:ec:8f:64:a9:06:fe:40:38:
cc:32:eb:33:c2:e4:18:1e:be:5d:ab:5a:8b:de:07:4d:79:dd:
7e:ef:ba:0e:e1:fd:98:06:d4:a5:08:8b:60:32:36:06:85:51:
12:81:ef:8d:dd:0f:4a:87:d1:bc:87:50:27:a8:bd:e2:4c:a9:
19:cf:a0:a9:ad:fa:97:c1:c7:87:28:51:64:b3:a9:a0:dd:af:
6d:57:ae:a1:37:cf:c7:75:13:e9:5c:18:89:2a:f7:70:68:43:
44:64:82:f8:81:d3:db:8e:a6:d3:5f:ba:d9:2c:b3:3c:67:51:
d3:9e:a8:fa:b5:95:64:04:7d:52:03:d3:e2:14:81:23:bd:4c:
f0:d3:35:f0:22:f9:38:e6:a2:70:d0:3e:ad:0f:f1:1d:3d:69:
57:a7:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:18 2026 by rpki-client