Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IdWL4YGVNZysjL_-7kLoY7linPw.roa
File: IdWL4YGVNZysjL_-7kLoY7linPw.roa (raw, json)
Hash identifier: RFsdVGAYblo42LstIRq9SomAn4bDhS1QfSrXfYllk+0=
Subject key identifier: 21:D5:8B:E1:81:95:35:9C:AC:8C:BF:FE:EE:42:E8:63:B9:62:9C:FC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A00FD3BAF9B1B6C6C919C348C649CC4CA5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IdWL4YGVNZysjL_-7kLoY7linPw.roa
Signing time: Mon 17 Aug 2026 13:05:29 +0000
ROA not before: Mon 17 Aug 2026 13:05:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197974
IP address blocks: 31.56.54.0/23 maxlen: 24
217.60.101.0/24 maxlen: 24
217.60.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:d3:ba:f9:b1:b6:c6:c9:19:c3:48:c6:49:cc:4c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 17 13:05:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21d58be18195359cac8cbffeee42e863b9629cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:18:02:34:42:35:6b:7b:57:6f:1c:ab:d0:
00:2a:22:27:5c:e5:b0:20:8a:5b:1b:88:38:1d:e0:
55:fe:96:c4:34:43:69:5d:1a:f2:3b:91:af:4b:2b:
c2:e9:a7:a7:17:09:61:03:9c:80:51:73:1d:28:4a:
f2:80:42:de:27:7d:b5:1b:79:8e:f6:35:a5:b9:f8:
72:da:24:9d:d7:13:6a:4b:3e:45:7f:d2:7a:c8:db:
2a:d7:ac:c9:83:6b:9e:61:5d:33:1e:26:fc:36:c7:
61:3b:00:13:08:0b:a2:1c:c9:1b:4b:08:43:a5:93:
f4:d3:23:1e:07:cc:97:98:81:bc:0a:73:f1:eb:0c:
9e:8e:56:70:4b:c6:e1:5c:a6:24:0b:f1:a3:0e:18:
9e:7f:26:49:f6:26:d9:98:50:27:fc:b6:a9:aa:6c:
a5:ce:98:2b:91:52:d4:a2:ce:d7:69:0b:4a:88:78:
02:5c:af:3a:0d:3e:bb:25:3c:9f:71:53:cb:88:da:
57:5d:bb:59:cb:a6:d8:b6:6e:a2:c2:63:e9:a9:47:
ce:0f:9b:a7:fa:70:c2:0e:f8:45:f1:23:fe:2e:27:
e4:06:d3:a3:99:7a:2c:e7:61:cb:1a:a8:a4:ee:03:
21:b2:30:bb:e7:d8:e2:ce:9a:7a:09:19:94:b3:b7:
ab:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D5:8B:E1:81:95:35:9C:AC:8C:BF:FE:EE:42:E8:63:B9:62:9C:FC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IdWL4YGVNZysjL_-7kLoY7linPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.54.0/23
217.60.101.0/24
217.60.242.0/24
Signature Algorithm: sha256WithRSAEncryption
95:52:6b:32:b2:50:e1:ab:18:2e:c1:ec:67:08:84:84:da:33:
70:22:b0:5d:b6:d4:2a:ff:7d:22:03:61:e0:b3:03:39:df:11:
3f:3a:78:d1:59:57:50:ac:65:9c:b0:92:c7:c9:3c:bd:4d:07:
92:f6:0c:9b:fd:ea:74:39:ff:05:8c:22:d7:65:7d:d6:00:0b:
7d:ed:2b:51:0f:8c:94:37:25:bb:4a:3a:8d:67:94:cd:c6:dd:
7d:0a:5b:72:6c:19:a7:bc:9d:f1:20:d2:0b:ce:be:48:24:ce:
10:47:72:ca:98:13:03:44:6a:c3:bd:91:b6:1b:e3:51:c5:e4:
26:35:09:09:8e:2d:70:89:57:62:5e:df:06:a3:fd:36:a7:da:
c5:c3:7a:83:47:30:4d:1f:66:d4:21:95:a8:20:06:2b:52:b3:
aa:f6:ee:f8:31:3e:93:db:1f:75:80:af:3a:9b:f4:9d:af:7c:
ee:83:1f:e9:39:6a:97:bd:5a:b4:d3:07:e5:e4:73:b4:a8:ec:
a0:d5:25:5f:72:e1:5e:fb:8b:ef:d4:8b:e9:d6:69:fb:6b:7b:
a6:eb:52:90:ed:96:65:11:31:2c:7f:8e:b4:ee:52:20:c3:fe:
ac:68:3f:5e:a4:31:7b:be:0f:6d:8b:0b:6b:0b:b6:91:43:ea:
c0:8a:de:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:32:39 2026 by rpki-client