Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RD0ZdRWAYUXzPKaQ3YGydXnOgzg.roa
File: RD0ZdRWAYUXzPKaQ3YGydXnOgzg.roa (raw, json)
Hash identifier: w5BcqFvwS4Q3E66irI3k/B2xs0vNVumnJRTQOstyTwQ=
Subject key identifier: 44:3D:19:75:15:80:61:45:F3:3C:A6:90:DD:81:B2:75:79:CE:83:38
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0F16C9B5DB98CDC7A4E3F2F4CAD32E83B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RD0ZdRWAYUXzPKaQ3YGydXnOgzg.roa
Signing time: Wed 30 Sep 2026 08:27:01 +0000
ROA not before: Wed 30 Sep 2026 08:27:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214120
IP address blocks: 31.57.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:6c:9b:5d:b9:8c:dc:7a:4e:3f:2f:4c:ad:32:e8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 30 08:27:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=443d197515806145f33ca690dd81b27579ce8338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:d8:1a:7d:ab:c2:37:46:47:ac:1c:73:bd:
b2:c5:b0:42:a5:f3:71:d3:2e:88:60:1f:7b:33:e8:
b5:e5:2b:2e:64:4e:b0:2b:36:53:28:91:17:16:63:
2d:98:9b:42:fb:c3:c2:c2:ba:c8:6a:b8:24:d7:9a:
a5:90:aa:d9:d0:86:c7:56:8c:60:85:54:d6:3f:bb:
4d:59:4b:6c:8d:97:b6:c4:44:31:ae:a3:0a:48:b8:
27:ae:f4:a8:4e:8c:8b:ac:79:64:99:a9:36:ce:8f:
21:ba:16:65:24:88:48:19:ef:ba:92:f0:c3:04:a3:
e1:79:ae:73:05:db:1d:34:53:26:af:0d:60:4a:67:
8f:5e:4e:eb:5f:8a:9d:de:f0:f5:42:27:15:a4:34:
62:aa:22:7a:ad:70:a3:b4:22:6e:4b:86:1b:8e:ad:
e9:58:10:be:c6:8d:23:c9:08:cf:b3:f9:f6:d1:46:
ec:e0:c0:03:36:b4:02:bb:4f:da:1f:5e:c7:55:30:
28:e1:ed:30:4c:2c:38:52:d5:a6:f6:1a:9c:7f:08:
cf:c1:1b:04:15:9d:d0:17:2d:ec:6b:ec:a4:5a:e4:
55:2d:2a:f5:fa:e1:2c:2d:e3:22:75:34:0e:35:10:
c0:87:0e:f2:96:2e:2b:36:b7:0e:49:e8:db:ba:a1:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3D:19:75:15:80:61:45:F3:3C:A6:90:DD:81:B2:75:79:CE:83:38
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RD0ZdRWAYUXzPKaQ3YGydXnOgzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.5.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:4c:f8:d9:5a:71:fc:46:f8:25:53:73:ae:c2:a1:4f:cc:96:
54:23:c6:fe:64:92:79:d7:c6:31:d1:8b:7e:1c:3a:47:14:49:
ae:6c:43:fd:87:03:b7:aa:05:37:e7:eb:47:2b:5e:4a:e7:b5:
da:b2:f7:e4:f1:a7:df:02:66:06:93:b8:de:23:16:25:d6:11:
47:ab:d8:6c:95:9d:3d:08:55:bc:09:db:a5:44:37:06:a2:4b:
5c:22:b2:10:f8:ad:5b:7a:32:c0:c6:43:49:9f:1f:75:ea:f4:
a2:26:c2:10:45:77:d5:32:15:4f:53:c0:b9:c3:08:9f:72:21:
9b:89:e4:78:e1:80:3f:63:b7:9e:56:2e:21:dd:a6:0e:f3:31:
95:1b:1e:24:3b:89:24:5c:6c:75:8f:c2:40:87:1b:37:c5:ff:
12:cd:93:01:1d:3b:6b:82:35:66:e4:c9:72:8b:b0:ae:12:23:
2c:ba:52:92:78:a1:a3:68:6b:4e:74:00:1c:00:ba:7a:26:b4:
15:46:b9:a5:23:cd:10:51:02:1f:24:2f:2f:f5:0b:7f:fe:04:
57:d8:ce:e1:94:3c:f8:a7:f5:42:0e:e4:9c:ef:e1:8e:74:bc:
e5:b1:40:c3:63:ca:95:32:93:75:07:48:72:e6:03:5f:0d:56:
f6:f5:91:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:47 2026 by rpki-client