Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hydx9bAzRAQfwcL_3cdckyOvxu8.roa
File: Hydx9bAzRAQfwcL_3cdckyOvxu8.roa (raw, json)
Hash identifier: n8uXH1kl5io2FAKK7sWGqYpjlEKVUECA3vZ/VTGQ1D0=
Subject key identifier: 1F:27:71:F5:B0:33:44:04:1F:C1:C2:FF:DD:C7:5C:93:23:AF:C6:EF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1274954E7C8D1C69F6523CADA68487F8A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hydx9bAzRAQfwcL_3cdckyOvxu8.roa
Signing time: Sat 10 Oct 2026 19:27:59 +0000
ROA not before: Sat 10 Oct 2026 19:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 31.57.53.0/24 maxlen: 24
31.57.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:49:54:e7:c8:d1:c6:9f:65:23:ca:da:68:48:7f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 10 19:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f2771f5b03344041fc1c2ffddc75c9323afc6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:39:ec:62:b3:94:c6:c4:91:51:9c:cb:b5:
05:4c:f7:45:21:05:5d:ce:0c:44:fb:6c:24:8c:b0:
ec:b2:74:68:6d:3d:d6:1c:8a:d9:2a:f0:68:73:3a:
af:9d:b7:40:aa:d3:ff:c6:e6:9a:98:40:d2:c6:e0:
1c:2e:e5:57:ea:46:03:24:35:bf:5a:6d:83:0c:b4:
da:0d:bb:8c:54:7c:86:f5:89:26:ee:09:54:16:dd:
13:b7:9d:2c:a8:8f:25:8c:2c:8e:6d:2d:7d:38:95:
6d:c7:50:bb:d8:81:ff:39:8c:81:5f:31:72:f3:9d:
16:29:ea:1a:ae:26:2f:bf:62:32:8a:bc:21:e6:5f:
e3:b7:d9:0b:9e:4a:f3:c2:51:9e:27:12:e2:51:e5:
a4:0a:a5:65:71:15:46:63:eb:5b:78:50:ca:c4:91:
1b:9a:74:22:ae:80:83:95:cd:5b:9b:68:7a:e6:06:
f5:93:3e:8d:02:2d:47:3a:ee:b6:51:56:12:76:61:
1a:8a:75:c7:a6:dc:ab:7f:99:d2:21:86:17:94:0d:
7f:0f:7f:26:76:43:9f:c1:b5:32:5d:8d:ad:da:22:
79:58:c6:62:ad:71:ee:8c:58:b0:2a:b6:8e:c2:71:
3e:db:bb:48:ea:ed:2d:97:91:54:ac:5a:c0:5b:a7:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:27:71:F5:B0:33:44:04:1F:C1:C2:FF:DD:C7:5C:93:23:AF:C6:EF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hydx9bAzRAQfwcL_3cdckyOvxu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.53.0/24
31.57.59.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:6e:ac:6e:f0:a0:10:cb:f9:f4:77:2d:a8:9f:09:c0:fd:5c:
12:19:9e:b0:28:20:85:e0:5c:ac:6a:a8:7d:45:5c:40:c8:92:
63:fb:6d:5c:42:0e:83:3f:bb:a2:c2:7f:1a:4d:56:fa:2a:16:
cd:bf:79:0e:7b:70:4e:c7:6c:de:03:fc:05:e6:57:40:43:22:
f7:9d:0f:5a:df:7a:b7:a1:4d:e1:93:22:60:19:fe:fa:97:75:
82:19:ba:ec:c2:3a:5e:5b:68:57:79:17:06:8a:b2:59:ac:49:
8c:66:e9:8f:a6:12:68:f3:c1:d6:f1:ae:31:90:e4:94:8b:fe:
b1:ab:34:6f:ae:eb:29:bb:1c:eb:84:53:e2:08:2d:53:6d:74:
33:68:0c:e1:1c:b6:f9:31:85:19:80:0c:5c:63:a4:da:e0:42:
b1:09:85:27:fd:fd:23:78:94:65:94:39:41:58:22:fc:d2:a3:
08:c0:64:0d:17:7d:0b:17:f2:90:7e:eb:95:f3:96:47:a4:79:
8a:01:6e:e9:a6:02:d0:92:d7:fd:7b:fb:7e:e1:2c:e3:f6:98:
a4:0f:6a:a2:63:bb:59:62:38:83:07:31:01:a1:66:e5:4c:1a:
f9:07:81:3d:be:23:f1:90:43:13:b0:04:bc:cd:ef:f3:b3:86:
d4:6f:a0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:04:25 2026 by rpki-client