Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DXe4ip2WNtSW2wWL8zv8hutpu6E.roa
File: DXe4ip2WNtSW2wWL8zv8hutpu6E.roa (raw, json)
Hash identifier: 2ms4+Tw+d4HERZ8HP+yqI3fPQtvrcXv2XlxLUn1XyoY=
Subject key identifier: 0D:77:B8:8A:9D:96:36:D4:96:DB:05:8B:F3:3B:FC:86:EB:69:BB:A1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FB98879E83820107CD30C4D36AE05818C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DXe4ip2WNtSW2wWL8zv8hutpu6E.roa
Signing time: Fri 31 Jul 2026 18:55:56 +0000
ROA not before: Fri 31 Jul 2026 18:55:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400308
IP address blocks: 31.56.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:88:79:e8:38:20:10:7c:d3:0c:4d:36:ae:05:81:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 31 18:55:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d77b88a9d9636d496db058bf33bfc86eb69bba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:93:de:98:3b:a7:30:19:60:2c:e8:6e:27:
4c:5f:36:54:d4:ef:43:f2:22:0e:e9:e7:57:91:69:
f2:cd:e5:97:3a:bc:42:5e:08:8c:ed:f4:30:3c:d7:
a1:d3:0d:5a:a9:dd:0a:49:a4:34:30:fe:b9:a0:69:
73:8f:e5:fb:35:52:76:7c:90:67:32:6c:b3:97:ac:
25:85:29:91:a4:14:b2:31:0c:90:c9:36:38:a4:b1:
a8:ed:88:26:b2:0a:38:bf:b8:d5:99:28:38:f8:8f:
2e:f6:6f:48:a2:6c:90:ab:e2:a4:75:42:90:f2:4b:
12:2e:9a:fc:33:b8:77:85:ce:d1:44:30:90:ba:3b:
1a:af:8e:bc:26:95:ef:64:8e:50:85:c4:67:17:8e:
80:f7:8e:8c:c0:4f:74:4b:e5:50:50:a8:25:76:8a:
36:8d:99:66:8f:a5:4d:dd:d9:76:d3:56:cd:a7:f0:
05:11:af:ec:95:1f:34:d2:a0:57:10:ad:a8:4c:f5:
b0:b9:16:37:a7:3c:a9:0a:a9:95:f9:77:49:9d:98:
a3:76:2b:87:c0:8d:eb:51:42:df:ed:08:eb:ee:7a:
59:93:04:09:ef:9f:3c:da:b0:52:ad:b5:b3:a3:d7:
83:26:2e:5c:f2:2b:73:8d:b0:43:2f:e2:ef:8e:61:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:77:B8:8A:9D:96:36:D4:96:DB:05:8B:F3:3B:FC:86:EB:69:BB:A1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DXe4ip2WNtSW2wWL8zv8hutpu6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.71.0/24
Signature Algorithm: sha256WithRSAEncryption
57:bc:6f:a6:e2:56:bd:03:76:7a:09:1f:77:e5:e0:aa:1b:00:
76:e4:1f:09:3c:ba:f6:7b:81:b1:23:c4:8c:ab:f0:ed:e0:10:
e8:80:5a:c3:1d:7d:53:1a:05:89:74:08:aa:54:25:36:c8:37:
64:23:f3:f0:68:f6:3b:31:70:23:5d:73:bd:ab:75:1a:8e:71:
3b:dc:34:27:9c:c0:2e:7b:e1:aa:89:da:ca:5b:cb:08:f1:e1:
66:4c:aa:73:e6:c7:46:4b:67:78:88:d0:39:b0:b2:f8:4d:c6:
a7:08:59:2b:7e:6b:3a:50:94:0e:15:b9:3a:e2:0d:ad:b4:6a:
31:da:b7:87:6e:96:b2:5b:85:47:1e:f9:ac:7f:d5:0b:d9:15:
4d:84:24:71:37:ea:e8:0d:4e:f0:5d:be:91:6d:6b:b0:ae:6a:
08:db:89:ff:40:d1:43:a6:18:eb:20:55:88:ef:68:e2:43:0b:
99:62:70:36:5e:30:f3:f7:cd:b6:a6:a2:34:39:16:34:8e:54:
7c:52:9e:4d:43:99:be:82:dd:32:96:9f:8d:0c:73:a1:6c:d9:
0d:8a:49:19:dc:45:b0:ca:f1:24:76:5b:c4:13:03:a2:d7:45:
01:3a:34:ea:62:8f:5b:27:f2:5f:3a:40:c1:55:f0:47:6c:35:
8e:68:01:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:55 2026 by rpki-client