Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IYGeGlMnaMHSamuFiH7zudsuJrY.roa
File: IYGeGlMnaMHSamuFiH7zudsuJrY.roa (raw, json)
Hash identifier: VQQJ10ekDjqgKQO8/9lCEtXcFmuGSjj2F3LGyWA/kc0=
Subject key identifier: 21:81:9E:1A:53:27:68:C1:D2:6A:6B:85:88:7E:F3:B9:DB:2E:26:B6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FC6E88C46D59C76B75E2BFA839436D9F2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IYGeGlMnaMHSamuFiH7zudsuJrY.roa
Signing time: Mon 03 Aug 2026 09:15:56 +0000
ROA not before: Mon 03 Aug 2026 09:15:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219118
IP address blocks: 31.57.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:e8:8c:46:d5:9c:76:b7:5e:2b:fa:83:94:36:d9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 3 09:15:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21819e1a532768c1d26a6b85887ef3b9db2e26b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:18:ab:d5:61:23:19:7d:49:20:65:61:9a:
a1:27:1b:c5:ab:f4:f0:7e:be:af:b9:d6:66:f0:59:
84:67:53:82:7c:25:fa:76:10:45:91:a5:4a:43:5e:
e8:43:8f:59:a0:71:86:34:0d:9d:b6:61:41:8d:9f:
2a:4c:b1:43:27:be:e7:02:eb:91:df:a0:7e:d3:83:
c3:a7:fb:72:ce:ad:a8:c7:89:b6:2d:93:04:2b:27:
ae:90:e6:f1:86:81:a6:9b:ee:fb:2f:fd:8b:8b:f0:
7b:3e:bd:a3:4a:ee:67:25:1b:33:b7:0d:c6:8f:77:
a9:f7:c2:a7:c8:69:20:3d:5c:db:9f:c0:8b:e3:fe:
3f:04:d7:f5:6c:20:db:2b:4a:d9:15:65:6e:06:78:
20:b4:d4:3a:93:50:28:9b:65:44:e0:c3:4e:4b:ed:
7f:1e:05:af:97:b7:19:07:ac:12:ce:9c:21:1a:fc:
70:8f:6d:35:73:ea:b7:b2:3b:37:ce:27:b6:38:cf:
9a:70:73:c3:a0:1e:a5:cd:bc:04:8c:79:0d:67:50:
03:b8:46:4b:5f:39:28:11:f3:94:6f:7a:d4:65:eb:
2a:b6:32:c1:ab:16:9f:8a:72:cd:3e:88:81:39:b8:
94:2d:b0:0e:9a:f3:95:1c:a2:23:91:42:a4:3d:57:
60:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:81:9E:1A:53:27:68:C1:D2:6A:6B:85:88:7E:F3:B9:DB:2E:26:B6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IYGeGlMnaMHSamuFiH7zudsuJrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.36.0/24
Signature Algorithm: sha256WithRSAEncryption
44:23:10:8b:c3:1e:35:95:86:bf:ae:70:8c:4e:f7:45:a0:ed:
64:a7:dc:b5:79:3f:db:90:cc:6c:74:f1:a6:14:09:f3:ce:3b:
1d:a5:28:39:b7:9a:02:d0:06:39:f1:73:75:52:02:06:a4:1d:
c8:d2:7b:e0:da:3d:18:3c:ee:ad:b2:21:49:d2:69:b3:7e:06:
dd:2b:03:2b:9c:19:88:e5:b2:46:59:0d:63:85:ad:5a:c5:3d:
4e:45:29:a4:85:8a:29:2f:d8:f8:0c:2b:95:92:b6:8f:b8:11:
ff:a5:c8:cd:05:d9:3a:cb:7e:7a:1b:be:dc:f2:30:ae:c4:84:
ba:16:53:46:57:a2:23:28:94:18:b6:a7:d7:51:8d:2d:da:7d:
f5:e7:2f:dc:68:dc:2b:98:4c:61:4a:6b:c0:c4:e6:90:21:11:
da:8f:ce:a4:16:03:cd:0e:80:ee:a6:f6:d7:62:8e:8b:28:7a:
db:de:7e:05:cc:e0:ef:36:cc:5e:18:03:83:e7:75:c2:70:70:
f9:80:02:d4:98:f3:c5:b1:42:10:ad:99:34:0e:54:01:0f:89:
7d:d7:21:9d:7c:b4:6b:5c:7f:f5:fa:23:1e:47:2f:c7:27:13:
8b:80:ad:a0:88:e3:4e:32:41:e7:c3:8f:8f:40:3e:3f:22:05:
7b:f6:29:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:41 2026 by rpki-client