Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I66P7l58B9uMP9AKpUzUvU7X910.roa
File: I66P7l58B9uMP9AKpUzUvU7X910.roa (raw, json)
Hash identifier: 2a75YHqifbm6ZusH76gZm7ZEdgBLgbc0bbNJgiMiKHQ=
Subject key identifier: 23:AE:8F:EE:5E:7C:07:DB:8C:3F:D0:0A:A5:4C:D4:BD:4E:D7:F7:5D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FD3BC8547C73B3C79930B2A702D09114E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I66P7l58B9uMP9AKpUzUvU7X910.roa
Signing time: Wed 05 Aug 2026 21:02:55 +0000
ROA not before: Wed 05 Aug 2026 21:02:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219064
IP address blocks: 31.56.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:bc:85:47:c7:3b:3c:79:93:0b:2a:70:2d:09:11:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 5 21:02:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23ae8fee5e7c07db8c3fd00aa54cd4bd4ed7f75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:11:56:40:a1:80:dc:38:41:cd:4e:44:7c:
c7:2f:43:46:c2:d3:02:76:26:76:0b:09:d4:8c:83:
f8:89:d9:bb:cc:2e:2e:81:87:c1:9a:46:64:d7:92:
4e:99:3b:00:57:a3:da:d4:2b:fe:53:ec:47:57:37:
59:e0:99:7a:9d:32:98:67:ae:08:b0:8e:ee:4f:45:
bd:7d:20:45:5e:a0:83:a9:21:88:0a:39:6c:31:08:
a2:bf:30:e9:36:e5:d9:c3:8a:d4:8b:ae:1d:d8:f0:
3e:ae:b4:1b:5f:9a:3b:c4:1e:b3:0f:a4:81:b6:37:
86:09:5f:33:e8:ed:19:86:4c:db:73:4c:af:6c:0f:
41:50:92:e9:e5:c8:41:ac:6b:fe:1a:1c:1c:9d:df:
db:fa:6a:e4:8d:5e:2e:b9:41:83:aa:36:3c:98:b1:
f7:50:a7:61:ec:53:af:96:62:4f:31:e4:32:93:9d:
a6:68:48:ca:41:de:69:72:7c:08:a4:c2:19:e5:19:
9d:1f:af:8c:7b:06:21:89:3d:96:af:70:68:11:a7:
36:7b:ce:72:10:7e:3a:b6:7c:8a:b3:ca:14:0b:9d:
80:08:5c:85:34:a0:bb:e0:71:14:8b:aa:34:89:e6:
ef:1a:21:b4:61:4d:a3:86:ae:4a:d9:dc:26:8a:6f:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AE:8F:EE:5E:7C:07:DB:8C:3F:D0:0A:A5:4C:D4:BD:4E:D7:F7:5D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I66P7l58B9uMP9AKpUzUvU7X910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.184.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:76:0b:ea:6b:dc:f7:2b:db:c8:00:e1:44:ff:28:16:a6:a9:
0b:b4:83:61:8a:28:82:f2:ea:94:b0:ff:40:94:cf:a7:9b:69:
09:eb:f3:b6:5d:6a:53:2d:70:67:85:30:39:57:5c:6f:1d:fc:
e5:85:10:aa:dc:d9:81:77:ac:4e:34:80:be:fc:14:d9:47:92:
39:1a:6c:5a:90:19:a4:07:3d:35:e4:eb:f2:3c:2b:b4:7b:78:
c0:f0:6a:de:0d:59:ec:25:01:ed:42:62:d5:28:23:ec:bd:a7:
60:37:10:67:b0:8d:bb:b2:35:7a:07:21:3a:e9:df:3a:73:91:
3f:ea:3d:ae:da:e7:a8:79:f6:e3:c4:b5:e6:bc:42:4f:50:ac:
1d:dd:88:89:9e:69:d6:c9:a1:ad:32:84:01:5a:b5:28:87:88:
8b:ea:21:d9:75:a5:23:71:75:cb:fb:89:3e:b0:0f:46:43:d1:
ba:a8:2a:8e:01:24:7a:62:d2:f5:6b:b5:56:0c:12:a1:a8:38:
bc:0c:34:4b:07:c9:55:18:66:8f:96:ca:96:82:db:75:72:18:
e0:c8:62:d5:92:11:9a:a0:e2:42:82:9b:17:e2:64:63:ee:4b:
9d:35:ac:29:7d:57:3d:b8:d4:2f:81:54:bd:1a:ca:7f:73:bf:
84:df:84:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 06:12:37 2026 by rpki-client