Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NbF7c17TF47icX7Fsa8W_USMLsI.roa
File: NbF7c17TF47icX7Fsa8W_USMLsI.roa (raw, json)
Hash identifier: vWREO1M2Ivo7nfnAkVcipa2TpMgsFExvSn0IE9dIQxg=
Subject key identifier: 35:B1:7B:73:5E:D3:17:8E:E2:71:7E:C5:B1:AF:16:FD:44:8C:2E:C2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A174B0DE05ED4A8A614295D63A10A9F5E6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NbF7c17TF47icX7Fsa8W_USMLsI.roa
Signing time: Sun 25 Oct 2026 20:11:50 +0000
ROA not before: Sun 25 Oct 2026 20:11:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219536
IP address blocks: 31.57.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:b0:de:05:ed:4a:8a:61:42:95:d6:3a:10:a9:f5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 25 20:11:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35b17b735ed3178ee2717ec5b1af16fd448c2ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:fa:c9:0a:43:3b:bb:20:6a:13:4e:54:55:
a1:55:d7:7d:19:d1:be:47:f9:dc:dd:83:c5:3a:41:
1e:fa:4b:b1:3f:4e:a2:76:fd:be:9d:51:a6:c3:f7:
e6:e0:88:6b:55:4a:37:dc:ce:5c:b3:14:40:35:56:
3b:9d:6e:dd:53:d7:07:d5:34:93:4e:66:de:bc:ad:
0f:24:6a:be:36:6b:3e:f2:10:6c:86:2a:73:4c:b8:
6b:20:a4:a7:00:4c:f6:bf:71:da:c6:89:2c:f6:a7:
35:51:aa:83:62:13:69:62:9e:ca:39:de:26:2a:59:
42:d9:d0:c0:de:29:7e:08:62:91:f3:87:58:2a:97:
73:60:1c:77:63:23:08:45:77:79:b2:2a:9f:5f:65:
79:89:b4:75:b1:66:5b:20:99:c5:06:f6:15:c7:d7:
2b:b5:46:75:65:3a:9b:39:6a:92:8d:76:5c:e9:f8:
48:85:3b:41:5f:a4:6b:51:31:3c:9f:77:84:a3:f8:
f2:6d:97:25:16:a4:22:6e:0b:f1:7a:1e:0f:86:a0:
a7:af:c6:40:40:97:d0:db:95:e7:24:03:3e:40:0e:
51:49:25:8c:19:af:46:2a:f1:51:75:c7:25:1c:66:
29:81:71:20:ef:fc:0b:a7:5c:5b:c0:9a:be:0f:f4:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B1:7B:73:5E:D3:17:8E:E2:71:7E:C5:B1:AF:16:FD:44:8C:2E:C2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NbF7c17TF47icX7Fsa8W_USMLsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.1.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ea:60:8f:8c:87:18:82:8f:8f:72:77:c8:e2:a9:d6:3d:0b:
66:0d:ce:24:8b:cb:55:d0:28:bb:09:d7:56:10:d8:af:64:33:
c8:a8:96:f6:f5:5c:db:07:c6:fb:61:ca:b7:3d:fa:22:5f:72:
5f:23:1b:02:bb:46:40:41:1e:2c:76:f1:3e:cf:d8:cc:d6:fb:
b2:d8:5e:28:8a:a5:70:44:d2:38:d5:2d:f1:fa:6e:e4:45:ae:
6a:12:2b:1c:dd:fd:3e:96:67:cb:0e:3d:0a:f4:4d:28:78:e4:
2b:29:71:e4:9d:05:9d:c5:b8:b0:71:06:3e:f3:34:85:fc:69:
7d:6e:f9:06:1e:ad:a5:7a:a3:98:b3:a9:74:4b:11:88:da:19:
7a:13:3f:66:d0:4c:43:33:a3:d3:af:dd:9d:3b:45:4e:87:18:
4c:9e:e3:be:33:27:cc:27:f9:44:41:50:2b:ee:9f:c8:9e:67:
7d:3f:b2:5b:f7:e8:16:58:72:c4:4a:22:35:cd:9b:16:06:d8:
3d:5d:05:2c:82:5a:cb:35:c5:73:a6:4b:a0:9a:ac:a0:03:93:
68:72:38:32:a3:43:a9:58:96:cf:a1:71:22:1e:21:3d:9d:09:
e1:7d:3e:a4:e0:f0:b8:09:41:5b:cc:51:23:1b:d1:bd:17:4d:
9e:e9:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:49:57 2026 by rpki-client