Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lsni30xsE4NPceA7XUjB3dSy95k.roa
File: Lsni30xsE4NPceA7XUjB3dSy95k.roa (raw, json)
Hash identifier: XmWOKOtvyIDTq3EqosLK+nlP0MjoRqB/V4iH5eOSnTo=
Subject key identifier: 2E:C9:E2:DF:4C:6C:13:83:4F:71:E0:3B:5D:48:C1:DD:D4:B2:F7:99
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D2EF2D58813D807C61CA7983E024B0C73
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lsni30xsE4NPceA7XUjB3dSy95k.roa
Signing time: Fri 27 Mar 2026 10:59:19 +0000
ROA not before: Fri 27 Mar 2026 10:59:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 31.57.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 08:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:f2:d5:88:13:d8:07:c6:1c:a7:98:3e:02:4b:0c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 27 10:59:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ec9e2df4c6c13834f71e03b5d48c1ddd4b2f799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fd:65:c6:02:4b:ee:d4:4b:20:fd:33:91:71:
51:33:93:a1:ab:2a:25:1a:76:bb:26:9b:fa:ed:7b:
ae:35:4a:20:c7:1d:be:ff:22:da:cf:a8:07:de:d0:
f1:d6:ee:69:69:00:78:e4:24:88:c0:66:dc:5c:be:
e7:a5:ff:28:52:43:21:61:c2:98:c0:f7:86:b3:47:
b8:c5:14:84:70:8f:d5:99:f6:5b:47:bd:c4:cf:c5:
3d:07:51:d7:db:29:ea:79:61:26:2b:74:0e:80:37:
f5:b9:df:b4:db:01:2e:2c:52:45:7c:77:d0:b0:aa:
7b:55:40:88:07:0d:3b:f2:b4:3d:36:dd:68:a9:55:
bd:a7:8b:79:0b:df:97:21:ab:80:68:8e:a8:c2:21:
e1:a1:9d:08:4d:53:1f:32:c7:d6:79:75:aa:be:e6:
c8:d6:61:1b:29:3a:46:de:05:43:d7:f0:41:f1:18:
9d:60:8c:04:44:0e:c2:12:05:9b:f2:42:bb:2e:16:
e9:db:3f:09:c8:0f:a6:78:3a:67:8b:aa:34:c3:ae:
d9:49:a6:6c:21:0a:fa:58:3b:21:c3:82:78:a8:1e:
6a:7f:df:6b:c9:fa:44:96:7e:bf:e9:a8:66:a1:20:
2b:ff:e7:5d:14:42:88:69:70:d3:b4:89:1e:3b:c2:
21:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C9:E2:DF:4C:6C:13:83:4F:71:E0:3B:5D:48:C1:DD:D4:B2:F7:99
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lsni30xsE4NPceA7XUjB3dSy95k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.143.0/24
Signature Algorithm: sha256WithRSAEncryption
56:11:a9:a7:4f:05:7e:ff:d0:a7:b0:5d:62:99:cb:25:89:ac:
88:79:9e:45:6b:ea:ba:5c:bc:1a:e9:4f:fb:e7:7d:7d:73:2b:
84:ad:63:9f:8d:3d:4c:25:ca:b2:59:b9:02:0e:2f:66:0c:95:
d7:e4:7d:36:7c:dd:9e:b6:8f:6e:6e:6c:33:94:9b:75:cb:8e:
09:e0:3a:17:6b:b9:87:a6:91:ca:e2:cb:57:e3:e0:ed:7d:51:
3b:71:47:95:12:9e:f4:8c:99:ba:99:f3:8d:22:8b:ad:d5:14:
58:d5:5b:24:c5:cd:38:c2:16:df:82:da:8a:08:0b:89:44:4d:
08:10:02:eb:2e:17:15:9c:fe:f6:39:e6:91:8a:c4:79:11:e4:
32:99:96:fb:8f:7d:e1:a5:bf:be:2d:65:40:09:f2:6b:65:b8:
02:f9:e3:eb:21:7c:71:84:2a:69:eb:84:4f:d4:b4:95:ca:9f:
7c:f5:f7:09:26:b3:1d:b5:61:14:4f:04:7c:4f:1d:af:cc:78:
0f:43:38:aa:f4:c4:10:9d:ec:19:7b:dd:c7:a0:3b:a2:c4:ee:
a4:07:3f:05:8c:53:b0:67:01:93:b9:10:89:13:dd:ec:23:25:
1e:2e:22:4a:bd:78:24:93:22:b9:42:fb:13:08:09:1a:93:57:
4c:6a:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:01:35 2026 by rpki-client