Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DyDrfEdTmaXg-Us5pkDtGQxhaG0.roa
File: DyDrfEdTmaXg-Us5pkDtGQxhaG0.roa (raw, json)
Hash identifier: BFbdGdYhDImgL+rYbG2Bj06fldj7NqXoN6A5us6hFsw=
Subject key identifier: 0F:20:EB:7C:47:53:99:A5:E0:F9:4B:39:A6:40:ED:19:0C:61:68:6D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1274952C1BCD817D01D118B7A0B599F98
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DyDrfEdTmaXg-Us5pkDtGQxhaG0.roa
Signing time: Sat 10 Oct 2026 19:27:59 +0000
ROA not before: Sat 10 Oct 2026 19:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 31.57.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:49:52:c1:bc:d8:17:d0:1d:11:8b:7a:0b:59:9f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 10 19:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f20eb7c475399a5e0f94b39a640ed190c61686d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:a5:6c:40:49:c7:9e:26:f4:20:74:50:70:
32:47:bf:c6:49:1c:23:9c:25:ac:7b:33:e1:8f:5c:
c6:6b:3a:29:3a:22:09:5f:5c:58:eb:0f:b6:c2:46:
e8:72:54:51:df:97:30:0e:42:e9:73:ac:5f:d0:53:
9f:e5:5a:9b:19:e1:33:65:9b:86:32:fa:88:6c:57:
0b:69:e8:84:5d:be:7b:f0:b0:05:e6:55:93:67:41:
97:a2:d6:1f:ac:38:4b:c8:5e:c8:d8:20:18:cc:f0:
3d:4d:3c:b5:93:b8:15:95:ea:7a:14:b3:1d:81:2a:
ed:82:48:c4:8d:7b:dc:7f:d9:64:66:fe:ad:2d:bd:
40:29:1d:2b:dc:04:cd:3c:2b:9f:cb:9f:7c:48:98:
c6:21:e3:0f:8a:43:ad:3d:d4:40:08:33:cf:c0:6f:
54:cf:12:60:a7:2f:1c:97:cf:ab:35:9b:ec:14:33:
b1:7d:c4:93:b6:36:f3:e2:62:ce:55:0b:30:eb:f2:
08:d0:c5:03:8c:66:a2:21:0d:20:3f:8f:dc:b2:c2:
45:95:30:bf:d4:ca:b2:de:58:1f:b6:34:23:ef:21:
a1:7a:1f:5f:d4:fc:51:78:17:dc:dc:28:5a:de:ae:
4c:95:85:7e:51:66:c1:04:d8:e4:cb:aa:cd:76:da:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:20:EB:7C:47:53:99:A5:E0:F9:4B:39:A6:40:ED:19:0C:61:68:6D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DyDrfEdTmaXg-Us5pkDtGQxhaG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.96.0/24
Signature Algorithm: sha256WithRSAEncryption
66:dc:a0:e5:69:48:1b:89:52:73:61:5c:de:fb:2e:75:19:e5:
2e:8d:92:6f:cf:6f:77:a8:a8:fc:8d:31:68:8f:0e:8f:f6:c4:
b7:a3:8d:40:a3:c3:9d:28:d9:ba:42:83:ca:ab:42:52:9d:23:
2a:b6:94:00:eb:78:54:aa:46:4f:1d:cb:39:93:eb:2a:e6:90:
41:9d:01:70:27:12:28:d7:93:fd:50:b9:9e:2b:f4:c4:9a:26:
50:9d:15:3f:e3:e0:66:4b:cb:7b:95:ec:32:0f:86:95:84:a1:
b8:e9:91:51:52:11:54:51:5f:14:f7:2b:c6:ca:19:d9:2d:4a:
1f:5d:b8:ec:d8:bc:60:fc:59:22:84:20:80:51:7e:19:98:a3:
5f:42:ad:c5:29:aa:99:4b:66:fd:34:b8:0a:fc:2d:3a:56:f5:
b4:dd:61:bc:10:c2:b7:db:38:06:83:65:53:58:14:db:40:81:
ff:62:c2:2d:a9:93:ca:db:b0:31:b0:1e:40:1e:5b:e5:6e:e6:
2b:41:d3:c2:bd:6b:94:8f:15:4a:e8:c4:31:b7:1e:16:03:a3:
c2:39:65:d2:e0:d4:dd:14:b6:f4:1f:e4:0c:d8:b9:ae:04:63:
34:f7:41:fb:05:e2:05:40:5c:a4:70:30:c3:65:3e:9c:cc:00:
c2:f7:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:15 2026 by rpki-client