Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Bz0u2dcV0p813JZbW4LcGXV_g4A.roa
File: Bz0u2dcV0p813JZbW4LcGXV_g4A.roa (raw, json)
Hash identifier: yt8ymwek3Kglg2vHkL7NjN9h+LZaSzgO4PfxfWqIfEM=
Subject key identifier: 07:3D:2E:D9:D7:15:D2:9F:35:DC:96:5B:5B:82:DC:19:75:7F:83:80
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0F860F9EBA06B372AE83C8183A1671A06
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Bz0u2dcV0p813JZbW4LcGXV_g4A.roa
Signing time: Thu 01 Oct 2026 16:51:39 +0000
ROA not before: Thu 01 Oct 2026 16:51:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 31.56.125.0/24 maxlen: 24
31.57.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:60:f9:eb:a0:6b:37:2a:e8:3c:81:83:a1:67:1a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 1 16:51:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=073d2ed9d715d29f35dc965b5b82dc19757f8380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:bc:26:3c:38:6e:18:15:3f:c7:e3:c4:b5:
0b:cb:04:31:e6:86:7f:0f:de:9e:a6:d1:26:e5:3a:
17:76:7d:84:f2:15:42:a6:ba:45:72:64:11:9e:28:
e0:7d:bc:a6:b4:e0:8f:08:ff:c8:bf:57:f9:e3:15:
91:cd:7e:d8:26:f3:8e:a2:6f:78:e4:53:af:90:d7:
f8:08:11:48:35:ec:7e:c5:5b:01:4c:71:c6:90:b7:
7b:4f:eb:72:4e:2b:2f:16:44:f1:27:68:e3:cb:84:
59:4d:4d:ad:c0:ac:8e:ae:7c:6a:62:e3:28:8f:f4:
51:b3:94:bd:44:51:24:88:03:4c:90:31:b9:02:d0:
72:6c:bf:51:b3:6c:be:43:77:e2:fd:2d:3d:45:35:
b8:28:60:69:a1:65:9d:2b:25:24:6f:87:3f:78:9a:
e6:66:98:a6:23:12:a1:75:33:12:47:73:1e:73:13:
a5:87:2b:dc:9b:cf:6d:a6:c5:c7:1b:7a:43:74:a6:
ef:06:c5:5f:d2:c2:5e:5c:cb:eb:2f:de:e9:a1:e4:
b4:46:30:99:2a:9a:1f:17:df:f2:c5:fe:d6:8c:af:
ea:a6:c2:91:9c:d8:00:c4:42:e3:54:1d:66:4b:4b:
53:63:bf:56:33:fc:87:a8:47:da:5a:d5:e6:be:42:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3D:2E:D9:D7:15:D2:9F:35:DC:96:5B:5B:82:DC:19:75:7F:83:80
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Bz0u2dcV0p813JZbW4LcGXV_g4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.125.0/24
31.57.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:13:ae:aa:e7:61:64:ec:99:c5:b8:f6:3e:42:46:53:7b:eb:
34:90:2b:06:64:89:bc:20:38:16:ed:62:0e:4f:f8:c2:d7:1f:
08:0f:20:43:c0:1d:c6:a0:a7:9c:4e:f9:be:4a:b7:49:a6:35:
9f:18:5d:48:91:2d:b8:0c:c5:d2:5c:3b:7f:69:f7:0f:b2:85:
99:4d:80:6c:2b:09:27:bc:62:bf:e9:27:cf:37:55:af:16:8f:
ac:37:bf:60:cc:ea:c5:53:4d:5d:c8:b4:0b:02:99:ec:1c:cf:
c1:24:3c:4e:13:4f:18:77:5f:b5:fc:be:71:4b:4f:bc:15:81:
28:35:05:3c:9c:0e:ce:76:4e:80:64:e9:45:09:99:c3:08:ed:
e7:62:6f:35:43:d3:02:fd:b3:bb:1b:01:63:95:9f:f6:f5:97:
4b:a7:c0:a2:a0:ed:a6:cf:22:a1:90:7e:c8:da:7b:56:bb:b5:
94:c1:d9:b7:51:78:66:8a:34:67:49:14:48:fd:c0:dd:4b:cd:
ce:05:a6:e5:8f:9e:0a:4a:54:4a:8a:70:56:cd:8c:9b:f1:4e:
22:ca:12:7d:7f:83:ce:3c:2d:2d:9d:9f:5a:27:aa:63:66:13:
df:78:c7:cf:d6:47:a4:45:1e:3a:30:59:39:7c:c0:4d:ac:a4:
0f:96:a2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:16 2026 by rpki-client