Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FVZizL1E8hd9gQODGFdQJ4I_bnc.roa
File: FVZizL1E8hd9gQODGFdQJ4I_bnc.roa (raw, json)
Hash identifier: lyVOOqp9islSKm+n5JjWMHsdfWh1RnZ+DedM53eRMdQ=
Subject key identifier: 15:56:62:CC:BD:44:F2:17:7D:81:03:83:18:57:50:27:82:3F:6E:77
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A04725719F85E436D1F3CD0AAF88554072
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FVZizL1E8hd9gQODGFdQJ4I_bnc.roa
Signing time: Fri 28 Aug 2026 06:53:51 +0000
ROA not before: Fri 28 Aug 2026 06:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 31.57.144.0/24 maxlen: 24
31.58.238.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:25:71:9f:85:e4:36:d1:f3:cd:0a:af:88:55:40:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 28 06:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=155662ccbd44f2177d81038318575027823f6e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:73:14:5a:ad:59:17:27:8c:de:71:f7:6f:3c:
ce:74:03:b2:40:7e:05:34:64:56:ff:f6:8c:6f:31:
1d:73:93:2c:c3:2e:24:5b:2c:a8:cf:0d:0e:d2:96:
b0:16:ff:6b:cc:64:10:f0:a7:af:be:f8:68:9f:06:
34:14:fd:33:2e:41:9f:18:ef:da:11:b6:5e:ce:e3:
ab:1a:b0:f5:3d:d9:53:42:39:2a:94:5a:97:a9:5c:
1a:d9:1b:6b:6d:ce:2c:ff:eb:2f:a8:62:78:a0:d7:
ba:17:6e:09:14:57:3f:3d:0d:44:9d:59:b2:38:02:
e3:e5:b3:ad:22:e4:29:06:91:7c:b9:75:1f:69:93:
1e:74:a1:cd:2e:b5:7f:46:86:b1:c4:16:23:ed:ab:
2d:6f:ba:9a:06:ef:4b:f4:15:0e:c0:37:3c:17:4a:
44:bc:31:49:4d:de:da:70:aa:4e:0b:da:fd:f7:3b:
5c:01:39:a9:e1:47:8a:22:8e:6a:ae:54:3e:a1:f8:
6f:5d:97:b1:42:9a:9a:90:f3:4e:0b:56:3b:a2:fb:
32:5e:fe:28:b7:c0:1c:2b:de:ac:a9:2a:9e:39:03:
c2:ad:79:93:19:98:13:3e:ad:6b:a7:56:d1:d6:85:
29:80:a7:10:03:33:fc:3c:a4:13:2a:d3:b0:46:65:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:56:62:CC:BD:44:F2:17:7D:81:03:83:18:57:50:27:82:3F:6E:77
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FVZizL1E8hd9gQODGFdQJ4I_bnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.144.0/24
31.58.238.0/24
217.60.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:07:48:15:ea:48:79:f2:01:14:e1:7c:b7:0e:f5:60:fd:ca:
50:3b:ce:54:c1:b3:bd:3c:a6:3d:bb:a1:e1:f1:5d:4f:da:f9:
9a:be:14:5e:5f:b2:86:02:d8:66:ac:71:58:93:eb:86:4b:d8:
7d:a3:d5:9c:b9:86:d5:1f:01:38:54:05:2f:f2:60:4a:a6:be:
f9:df:86:dd:3a:88:ce:84:ea:f0:3c:eb:b1:f7:e4:36:23:bb:
69:82:d1:bc:79:01:27:7f:58:96:15:c7:0c:c7:f2:8c:17:0e:
76:33:1d:d5:82:44:e6:d2:77:48:ae:a6:9c:f9:b3:cd:65:5c:
db:c2:fe:23:79:31:07:2d:a8:4a:1e:65:59:79:e2:25:36:97:
00:60:de:ae:99:a7:18:28:91:72:d9:7a:15:7a:84:c0:d8:0b:
4f:dc:aa:e6:50:ef:62:bc:b5:a9:92:90:65:29:61:ef:07:31:
2f:ba:42:83:df:51:ca:65:12:c4:2e:9d:2b:62:d3:6e:65:3d:
9b:0e:89:9b:ed:79:18:35:d2:b2:db:4d:12:9f:6c:d6:e6:20:
5f:59:1b:48:5b:50:7c:b0:5f:05:b3:90:63:d1:7b:19:96:7e:
ba:dd:59:c3:a2:67:86:5e:cb:d4:b6:93:9b:a5:de:a0:b4:39:
db:42:71:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:40 2026 by rpki-client