Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F0Bdu_AVztblfey77F4z_ShdVBE.roa
File: F0Bdu_AVztblfey77F4z_ShdVBE.roa (raw, json)
Hash identifier: PwtzPo/V6+DcLWTP8lY1vMz9bGuWA/wjiFEQPzkL/cU=
Subject key identifier: 17:40:5D:BB:F0:15:CE:D6:E5:7D:EC:BB:EC:5E:33:FD:28:5D:54:11
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A174B0DDB4CB88E42542D605AB50E40116
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F0Bdu_AVztblfey77F4z_ShdVBE.roa
Signing time: Sun 25 Oct 2026 20:11:50 +0000
ROA not before: Sun 25 Oct 2026 20:11:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 31.57.1.0/24 maxlen: 24
31.57.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:b0:dd:b4:cb:88:e4:25:42:d6:05:ab:50:e4:01:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 25 20:11:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17405dbbf015ced6e57decbbec5e33fd285d5411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:9c:55:f0:18:6f:45:14:84:8f:e3:ac:3f:
9b:da:29:f7:e5:f7:71:f8:50:fa:80:14:d7:04:08:
52:af:c9:f9:27:0c:b7:8b:16:bf:17:bc:d3:eb:9c:
d9:49:48:6b:0a:b6:42:09:52:4e:84:8f:62:9b:c2:
aa:dd:af:85:e9:14:ee:70:0e:3b:21:c7:e1:a3:12:
d8:89:eb:97:12:09:62:91:6d:90:2f:0e:c4:0b:b2:
4d:6f:51:62:91:08:8d:a7:88:2d:c7:87:06:d4:29:
f0:ab:6b:bc:05:8a:06:dd:ee:5b:b9:48:b8:08:f8:
da:8f:b2:27:0b:5a:40:63:51:79:32:ca:48:c4:88:
61:9b:f5:d0:47:fc:f7:67:79:25:f1:14:48:57:2f:
6f:50:aa:4a:30:ff:96:b8:ef:53:92:7c:a6:cd:ce:
8d:c0:ab:60:d3:4e:e2:11:cd:82:9b:e8:9e:a4:88:
65:71:74:3c:97:19:84:3e:d8:6f:78:f6:5e:fb:ca:
0b:41:5a:e1:48:1c:65:f2:c1:0c:d9:08:e5:b6:c8:
05:c9:07:2a:09:8e:4a:6d:ee:c9:0b:3b:1f:1a:67:
fe:44:2e:b9:97:8f:a5:b5:5c:b1:45:06:ea:73:37:
96:b6:3e:72:87:bf:b5:11:a7:fb:9e:b3:54:3d:55:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:40:5D:BB:F0:15:CE:D6:E5:7D:EC:BB:EC:5E:33:FD:28:5D:54:11
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F0Bdu_AVztblfey77F4z_ShdVBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.1.0/24
31.57.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:33:94:e5:47:4a:3d:f0:b2:bd:1d:7d:2d:ca:b4:a4:48:46:
8d:ca:ab:67:5b:b6:d2:d0:9e:59:60:bb:23:49:6b:7d:0b:32:
b6:86:3b:d8:97:0d:24:c2:15:9b:87:c9:49:5c:f9:36:e7:03:
df:52:e6:c4:2b:8a:50:97:5d:b3:24:70:ee:e4:23:e9:8a:42:
b4:21:fb:9c:9c:35:05:7a:29:85:8c:dc:71:7a:7a:4d:19:da:
cc:db:92:a6:e2:cf:e0:6e:51:7b:a3:50:3d:49:b4:a1:8b:fb:
dd:84:9b:ee:99:39:77:27:3a:6c:6e:50:63:d4:e0:3c:c4:86:
7e:87:68:b1:f4:95:cd:2a:71:8e:f0:a0:6c:eb:3f:16:e6:84:
08:6e:3c:de:e5:cf:ff:14:db:8b:37:0b:20:1d:43:9d:17:1f:
de:02:fc:02:21:df:bc:f9:a0:a1:9e:a2:92:23:42:87:5b:2a:
7d:81:21:98:95:70:cc:8d:da:c1:34:01:59:4b:27:9c:af:1e:
17:27:bc:75:19:f3:f8:1e:4a:dd:48:50:cc:3e:70:d4:97:e0:
51:c8:f4:14:fd:24:ec:55:55:1a:91:e4:c6:03:f6:ca:65:b0:
25:ce:1a:93:8d:6c:93:f0:2f:dd:e0:14:f5:32:12:05:46:24:
26:4b:31:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:47:42 2026 by rpki-client