Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SNqpmPtCEJ5F4ALz61ITV_msI68.roa
File: SNqpmPtCEJ5F4ALz61ITV_msI68.roa (raw, json)
Hash identifier: CYlKK3NB2cXU9oCIlj1PhdNIg0U8A0Zn7j6ni403tA4=
Subject key identifier: 48:DA:A9:98:FB:42:10:9E:45:E0:02:F3:EB:52:13:57:F9:AC:23:AF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A16240ECE5408A8840DFCF5D028EC2381E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SNqpmPtCEJ5F4ALz61ITV_msI68.roa
Signing time: Thu 22 Oct 2026 06:16:24 +0000
ROA not before: Thu 22 Oct 2026 06:16:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135598
IP address blocks: 31.57.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:40:ec:e5:40:8a:88:40:df:cf:5d:02:8e:c2:38:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 22 06:16:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48daa998fb42109e45e002f3eb521357f9ac23af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:67:31:d6:e8:d7:cb:e3:30:9a:20:fb:f1:
0c:4d:03:14:47:e5:c4:c4:24:ea:08:66:b5:d5:c8:
bb:cb:0b:db:98:5e:67:f1:9b:19:13:2f:c0:e8:0a:
c4:d3:df:1d:42:58:b6:c8:99:90:38:10:5c:7e:f4:
ec:2c:ae:f9:01:ff:93:d9:26:83:4d:91:f7:2d:5a:
62:44:60:f6:14:4a:e5:a4:cc:5d:d3:7a:6d:75:71:
b5:e2:85:6e:73:b1:f4:25:26:5d:b2:d0:a9:6c:5b:
a0:a2:bc:d1:80:92:0a:f3:d4:6e:e7:77:dd:18:77:
48:c4:5d:be:74:b5:0c:df:e3:2f:4b:15:09:63:36:
a2:f0:61:51:cc:29:29:3f:ab:65:56:19:01:98:f4:
ed:cc:63:d2:78:31:aa:37:61:8e:22:14:12:73:91:
36:7c:7f:1a:a1:37:35:be:4c:6f:5a:18:22:e7:5e:
81:3f:af:5a:ff:25:b9:c6:66:f8:30:fe:30:bd:98:
4a:37:01:c6:38:ef:2e:30:5e:8a:72:6a:59:9b:aa:
d6:8b:45:47:b2:3b:9c:1c:5e:c9:5a:27:e9:1f:81:
2d:65:6a:c6:c6:49:f5:cd:e2:3b:b1:e0:df:2d:8b:
34:f0:f8:11:b2:57:90:34:ff:8e:fb:3b:e9:73:08:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:A9:98:FB:42:10:9E:45:E0:02:F3:EB:52:13:57:F9:AC:23:AF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SNqpmPtCEJ5F4ALz61ITV_msI68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.224.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:06:07:f0:b3:bc:82:94:71:b3:fe:a7:ab:cd:f4:25:1f:b7:
49:b9:59:34:b6:af:d9:ea:b6:81:c5:1c:93:bb:9e:5c:d5:97:
bc:c5:50:be:4e:e8:a3:fa:93:87:11:d9:55:14:fe:15:78:b9:
57:b1:b0:fe:f8:cb:96:a9:46:1c:91:7c:d2:0a:f1:be:2c:16:
1a:fb:54:32:75:df:36:77:c6:95:ce:09:5e:c4:3d:9c:b2:36:
8c:ac:c8:75:cd:5d:5f:56:53:01:3a:0b:64:d4:0c:62:16:4b:
c3:fd:b3:87:bf:5e:fc:9a:85:85:71:13:09:06:7e:ed:7e:e8:
e3:67:10:8d:a6:fd:9f:f3:c1:7e:76:ca:e3:7c:6e:1c:78:ec:
11:ca:8a:2f:15:1e:b3:64:ca:59:36:3e:07:42:a2:52:3c:cd:
64:0c:84:fa:9d:09:e2:9b:72:72:b3:4f:99:d9:d9:ee:16:e7:
f7:d6:31:1b:1a:31:47:a1:52:f4:0f:30:eb:fb:b5:c2:28:5c:
00:3c:5c:82:e0:cc:d2:c7:b6:3c:88:06:ff:ea:e6:b8:52:b8:
4c:fb:92:73:ce:40:e3:72:d7:26:1b:d5:b6:1b:9e:0c:86:8a:
4a:9c:39:f6:1f:cb:88:13:c7:37:1d:48:03:a5:7a:58:a4:3d:
c8:0d:e1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:46:13 2026 by rpki-client