Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/St6fJcswQeA0hPmF67J2S9RfVIQ.roa
File: St6fJcswQeA0hPmF67J2S9RfVIQ.roa (raw, json)
Hash identifier: oyoIAeP+CJ05HkbryGiN0TwDuuyjHGtcg7USB5jdNHY=
Subject key identifier: 4A:DE:9F:25:CB:30:41:E0:34:84:F9:85:EB:B2:76:4B:D4:5F:54:84
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FAE2DA21E4C4093A3DCF705933E8604F8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/St6fJcswQeA0hPmF67J2S9RfVIQ.roa
Signing time: Wed 29 Jul 2026 14:00:53 +0000
ROA not before: Wed 29 Jul 2026 14:00:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 31.56.193.0/24 maxlen: 24
31.56.194.0/24 maxlen: 24
31.58.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:2d:a2:1e:4c:40:93:a3:dc:f7:05:93:3e:86:04:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 29 14:00:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ade9f25cb3041e03484f985ebb2764bd45f5484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:74:40:b0:d3:cf:58:25:83:b2:46:ec:3e:90:
e4:07:a0:a7:5b:46:3a:af:f1:52:da:0f:1d:f1:da:
48:d4:9a:fc:b2:a6:4f:a3:26:31:6c:ce:56:07:c4:
51:82:84:f1:53:11:6d:0a:3e:33:52:4c:33:a8:32:
9b:5b:a4:d8:c6:cb:86:32:a2:20:75:e4:81:43:48:
36:a1:7b:c1:0d:be:2d:d3:d7:da:59:ed:4c:e0:68:
56:1a:36:aa:4a:fc:e5:0b:df:b3:17:02:ea:34:79:
49:71:f7:c5:09:c3:38:5e:67:81:82:d3:40:bd:75:
d1:76:59:f8:b7:fa:b0:47:85:40:b5:47:c8:2d:69:
5f:9f:5d:4f:71:46:d9:18:b7:0f:c3:0d:45:0c:15:
ff:a4:65:56:a9:82:1e:13:53:ac:93:a4:52:b8:49:
36:ca:15:51:87:25:44:14:b1:39:d5:1d:80:84:e0:
95:64:46:45:d1:7b:f6:46:e9:3d:a1:df:e1:d4:12:
60:a3:5e:7a:55:0e:f3:49:99:69:4f:82:f1:9d:fa:
69:c8:78:ac:7c:bb:65:9e:28:41:c3:c9:5b:64:94:
f2:42:df:ab:0c:e2:30:d3:25:4c:df:f4:97:13:d0:
97:8b:31:4b:79:ef:ab:0d:13:5b:92:eb:49:e6:15:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DE:9F:25:CB:30:41:E0:34:84:F9:85:EB:B2:76:4B:D4:5F:54:84
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/St6fJcswQeA0hPmF67J2S9RfVIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.193.0-31.56.194.255
31.58.36.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6b:2f:48:12:13:2e:6d:d6:d6:f1:83:49:9e:c6:d8:60:d2:
47:48:0c:3d:22:d9:d1:cf:46:9e:04:5b:fb:0c:fa:ac:83:b3:
82:2c:55:05:38:4f:cf:49:d0:94:c6:07:32:a0:d2:94:a2:db:
48:ae:5e:ae:92:d2:cd:63:15:2b:38:7b:0c:62:e4:e0:e0:f0:
79:99:f8:36:5b:ec:51:4b:f7:ca:6b:ec:7f:20:12:4d:e9:c3:
53:60:48:ec:98:c3:76:50:35:6e:6b:1b:56:85:67:c7:79:b5:
be:af:52:33:a7:a9:51:fa:2d:23:df:7b:25:24:f8:93:b8:fc:
26:95:c5:16:a9:09:8b:19:91:e0:c2:78:03:6a:76:b8:ce:5b:
5a:d2:28:6a:30:4f:10:e5:61:03:38:f0:19:fb:d6:d4:cd:50:
97:0d:f4:50:43:06:c5:31:c0:50:fc:49:88:c0:3e:7e:4d:7d:
ac:2c:e6:29:ba:88:d8:01:21:23:73:97:23:b8:0a:26:65:12:
3c:e8:d8:01:f7:39:4d:e5:66:bd:36:5d:42:4b:43:a9:c6:b4:
4c:aa:b2:fc:61:7a:9b:1a:45:f2:4f:53:4d:44:0f:24:5d:58:
63:de:d1:c5:79:fa:f8:cf:c5:7d:e3:40:ad:ff:0f:3b:e0:be:
7f:d6:71:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:29 2026 by rpki-client