Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ICypUTZe1_ZQSHo7QNKU33zADRQ.roa
File: ICypUTZe1_ZQSHo7QNKU33zADRQ.roa (raw, json)
Hash identifier: UZ9HScOfGoEVvyfzGOJ70M6A6MmU4+FfAut1lVsOMr0=
Subject key identifier: 20:2C:A9:51:36:5E:D7:F6:50:48:7A:3B:40:D2:94:DF:7C:C0:0D:14
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F3151B23A12DC749A6D3DAB15E46C0767
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ICypUTZe1_ZQSHo7QNKU33zADRQ.roa
Signing time: Sun 05 Jul 2026 08:07:45 +0000
ROA not before: Sun 05 Jul 2026 08:07:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210464
IP address blocks: 31.57.56.0/24 maxlen: 24
217.60.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:51:b2:3a:12:dc:74:9a:6d:3d:ab:15:e4:6c:07:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 5 08:07:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=202ca951365ed7f650487a3b40d294df7cc00d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:10:6d:bc:09:aa:be:9a:69:13:29:e3:17:5a:
88:1d:61:b9:79:67:a7:07:45:1b:3e:99:1e:7d:8e:
4a:63:75:e9:04:b1:74:bc:b6:0e:db:e9:da:19:49:
72:bb:75:88:96:ea:50:d0:f6:11:ef:6b:94:78:25:
d9:8a:91:91:88:ca:26:78:ea:4a:67:57:bd:d4:9f:
87:b4:de:35:39:d8:cd:42:6c:e7:64:75:e4:7c:f0:
dd:f6:e3:ad:48:60:12:14:0a:06:0c:c3:a5:5f:b1:
7a:80:b6:c8:3d:d1:13:af:ef:bd:48:f8:30:12:da:
a8:ba:e8:04:a4:a3:4a:47:b5:d6:99:9e:c7:e2:f2:
df:b7:7d:2a:0b:c6:dc:b2:1b:3d:43:a5:fb:07:a4:
f9:ee:55:cd:e2:d5:65:0c:95:0e:32:03:20:6c:2d:
bf:9e:7e:23:36:0f:da:b1:5d:70:d7:c0:3e:85:4c:
0f:84:fd:8e:02:98:3e:ff:1e:cf:2e:5b:18:8b:62:
f6:e9:a6:91:b7:57:f9:a9:57:ed:0a:38:de:31:42:
86:8e:16:22:f3:ae:63:95:a1:44:0f:f5:5b:87:a4:
34:cb:ba:79:56:69:b7:76:a3:08:4d:17:57:45:2f:
87:13:52:ec:25:4c:e8:0b:2e:c7:50:7c:f4:f7:19:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2C:A9:51:36:5E:D7:F6:50:48:7A:3B:40:D2:94:DF:7C:C0:0D:14
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ICypUTZe1_ZQSHo7QNKU33zADRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.56.0/24
217.60.96.0/24
Signature Algorithm: sha256WithRSAEncryption
43:23:31:09:b5:67:98:3b:6c:70:6b:ec:1f:18:cd:10:82:8e:
08:05:cc:d0:36:f2:66:55:ff:97:1e:f4:7a:fb:1d:27:cc:49:
42:9a:60:0f:61:c5:c0:4a:e6:ec:a9:a2:96:20:a6:eb:ce:b9:
14:bf:bf:f0:74:73:fc:38:7b:0e:50:68:00:19:ec:f4:f6:c0:
39:59:11:a7:ba:5a:30:1e:89:24:71:6a:91:6f:0a:2a:91:c7:
93:95:8f:1d:49:bc:36:c3:c7:cf:f2:71:c1:ef:50:8c:39:40:
68:8a:d1:d4:76:74:7e:01:74:6b:b3:ff:a0:c7:47:bf:28:21:
49:83:c2:41:fa:6a:8e:82:70:34:81:c7:0e:3f:3c:55:08:ec:
02:4b:0b:ce:0a:8e:98:6f:86:33:bd:7c:10:81:e1:ff:d1:08:
37:15:68:fe:99:02:fc:e8:72:76:26:4f:00:ed:37:bd:77:08:
ae:73:d1:91:b0:9c:cc:d9:65:97:66:2a:3e:35:f7:9e:fa:51:
09:fa:4e:82:2a:f3:84:50:9d:db:e6:24:91:fd:34:79:28:db:
8f:45:12:e6:6c:16:a7:a3:f1:b6:37:1e:e3:5d:b4:4c:d8:ba:
54:f0:20:23:67:cf:0b:86:a9:2b:58:00:75:4e:2e:ba:7f:d0:
be:9c:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:52:05 2026 by rpki-client