Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SHlcTNqKy_u0OnVLZKWghsGwIL0.roa
File: SHlcTNqKy_u0OnVLZKWghsGwIL0.roa (raw, json)
Hash identifier: /PkqKU5cuVumtc5hyr7qFjzBZMzEzP6cMx3/LjiADRw=
Subject key identifier: 48:79:5C:4C:DA:8A:CB:FB:B4:3A:75:4B:64:A5:A0:86:C1:B0:20:BD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A163DC59F0DA81703E2F106F8E65F04A24
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SHlcTNqKy_u0OnVLZKWghsGwIL0.roa
Signing time: Thu 22 Oct 2026 13:45:47 +0000
ROA not before: Thu 22 Oct 2026 13:45:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.1.0/24 maxlen: 24
31.57.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:dc:59:f0:da:81:70:3e:2f:10:6f:8e:65:f0:4a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 22 13:45:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48795c4cda8acbfbb43a754b64a5a086c1b020bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d6:6d:48:7b:b5:50:66:bb:0a:f0:5f:7b:9d:
30:a7:04:46:f2:95:39:63:41:57:64:9d:fd:1c:38:
7c:8b:69:18:75:b9:50:a4:c6:93:36:8e:ae:9c:56:
af:9a:9c:98:d8:e2:2a:8f:2b:0c:21:99:fd:3b:bf:
17:85:ba:24:f3:60:53:a1:8d:b0:84:77:a9:27:17:
0f:1b:f7:78:f9:76:a5:e6:02:ef:cf:63:04:f5:67:
6e:c0:7b:92:e8:0a:82:9c:cf:33:4a:6a:a9:ef:44:
2f:72:af:65:65:7c:fb:c7:7e:53:14:ec:80:da:07:
49:e2:30:53:86:e9:93:3a:21:64:f1:24:1b:13:78:
50:a5:51:b1:f3:ff:ba:5a:39:2e:69:b6:c1:2d:d1:
08:97:bc:03:6f:36:ea:5f:51:08:b9:50:ca:c5:f7:
5d:62:0a:0f:5c:44:e8:c5:af:66:fa:68:51:5a:fe:
2a:c7:82:0a:a1:9c:2b:19:23:54:c4:f8:62:ba:21:
6e:95:d7:b4:5a:5f:83:30:8d:c1:e2:23:7f:8c:fa:
2a:c8:ad:24:73:aa:da:46:49:e1:cf:32:83:1f:32:
8f:b8:2b:4e:88:c9:31:d6:56:0d:38:b0:f7:f2:cf:
c3:e5:a5:b9:bd:2d:d5:29:35:6e:ae:7c:e9:7f:69:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:79:5C:4C:DA:8A:CB:FB:B4:3A:75:4B:64:A5:A0:86:C1:B0:20:BD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SHlcTNqKy_u0OnVLZKWghsGwIL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0/24
31.57.171.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9a:63:70:c9:42:81:3b:da:e5:48:47:0a:21:21:41:53:35:
86:fc:84:7b:c2:5a:ba:5f:2c:98:be:1e:95:68:ff:a0:4c:2b:
55:ea:34:77:78:ff:b0:91:1e:3f:11:a7:4a:05:f2:b0:d6:f0:
73:ec:2c:a5:9f:8c:6d:38:d3:8c:c9:42:d0:8a:5f:d6:9e:4f:
a8:c0:35:89:73:18:87:1c:3a:ea:28:02:6e:98:94:31:79:a9:
b2:bc:5f:30:72:cd:29:12:47:30:a1:8e:35:de:37:ea:72:79:
ae:15:95:69:f0:f6:3e:00:6e:b8:11:1d:97:f4:0a:d8:8c:1b:
00:e1:98:7e:ab:02:20:da:69:83:24:65:18:22:ea:fd:6e:20:
4e:67:96:43:6e:af:54:ea:f6:d6:43:97:2c:57:d1:a8:13:a6:
1f:19:88:d8:4e:39:c0:9b:55:f2:cf:e1:15:36:de:b7:f4:3e:
f5:27:a6:fa:d0:52:28:04:e6:30:f9:69:fc:3c:6e:55:c4:7e:
33:b8:f8:82:75:09:d4:2b:62:c5:ce:e3:7c:cb:2c:80:49:1e:
f5:ce:31:55:d5:c1:9d:0b:41:d4:8f:95:96:fa:6d:a5:21:b0:
0c:1b:5b:df:36:cd:16:78:cb:da:4a:be:39:f2:d3:99:60:1b:
4d:16:c5:17
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFj3Fnw2oFwPi8Qb45l8EokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDIyMTM0NTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODc5NWM0Y2RhOGFjYmZiYjQzYTc1NGI2NGE1YTA4NmMxYjAyMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitZtSHu1UGa7CvBfe50wpwRG8pU5
Y0FXZJ39HDh8i2kYdblQpMaTNo6unFavmpyY2OIqjysMIZn9O78Xhbok82BToY2w
hHepJxcPG/d4+Xal5gLvz2ME9WduwHuS6AqCnM8zSmqp70Qvcq9lZXz7x35TFOyA
2gdJ4jBThumTOiFk8SQbE3hQpVGx8/+6WjkuabbBLdEIl7wDbzbqX1EIuVDKxfdd
YgoPXEToxa9m+mhRWv4qx4IKoZwrGSNUxPhiuiFulde0Wl+DMI3B4iN/jPoqyK0k
c6raRknhzzKDHzKPuCtOiMkx1lYNOLD38s/D5aW5vS3VKTVurnzpf2mlnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEh5XEzaisv7tDp1S2SloIbBsCC9MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvU0hsY1ROcUt5X3UwT25WTFpLV2doc0d3SUwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzgBAwQA
HzmrMA0GCSqGSIb3DQEBCwUAA4IBAQBRmmNwyUKBO9rlSEcKISFBUzWG/IR7wlq6
XyyYvh6VaP+gTCtV6jR3eP+wkR4/EadKBfKw1vBz7Cyln4xtONOMyULQil/Wnk+o
wDWJcxiHHDrqKAJumJQxeamyvF8wcs0pEkcwoY413jfqcnmuFZVp8PY+AG64ER2X
9ArYjBsA4Zh+qwIg2mmDJGUYIur9biBOZ5ZDbq9U6vbWQ5csV9GoE6YfGYjYTjnA
m1Xyz+EVNt639D71J6b60FIoBOYw+Wn8PG5VxH4zuPiCdQnUK2LFzuN8yyyASR71
zjFV1cGdC0HUj5WW+m2lIbAMG1vfNs0WeMvaSr458tOZYBtNFsUX
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:03 2026 by rpki-client