Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U11ADq50ZUW0TgbDx_DYN0cy-JE.roa
File: U11ADq50ZUW0TgbDx_DYN0cy-JE.roa (raw, json)
Hash identifier: pzampr7ThX30i/2UBHeQ4pPg2IL/OTQfQRR6nVBUSE8=
Subject key identifier: 53:5D:40:0E:AE:74:65:45:B4:4E:06:C3:C7:F0:D8:37:47:32:F8:91
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DAFF5B4957520B42052ABED018B0F9953
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U11ADq50ZUW0TgbDx_DYN0cy-JE.roa
Signing time: Tue 21 Apr 2026 12:13:28 +0000
ROA not before: Tue 21 Apr 2026 12:13:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36530
IP address blocks: 31.56.84.0/24 maxlen: 24
31.57.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:f5:b4:95:75:20:b4:20:52:ab:ed:01:8b:0f:99:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 21 12:13:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=535d400eae746545b44e06c3c7f0d8374732f891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:32:7d:71:2f:d1:29:cf:65:ee:67:f0:29:
71:cc:ba:09:89:7a:e2:3d:3f:72:5a:44:73:fc:2b:
4c:47:98:af:1f:ca:76:66:b2:c3:02:7c:c9:26:93:
27:e7:a4:76:33:ad:e4:40:83:34:7d:11:d5:f0:c6:
a5:ba:b6:b8:7d:fe:05:5b:eb:30:6e:40:b3:fe:f2:
72:6f:50:02:01:46:2c:a8:8d:59:71:17:ae:c9:00:
90:7a:0f:61:fb:c6:39:a8:4a:7f:13:f8:ee:23:95:
22:20:a7:68:87:ba:77:47:bf:86:35:17:c5:17:3a:
27:0e:c5:e5:47:34:ea:05:1e:ad:af:51:93:4c:86:
87:89:5e:03:7d:ff:98:80:a2:f3:fc:33:59:58:2c:
e7:f1:6a:d5:91:a3:6a:ae:d1:b6:98:d3:93:2c:28:
ef:3e:ef:74:95:a9:a6:11:56:24:bf:47:88:b3:56:
32:b1:34:3f:0f:b8:ce:ca:a4:96:e7:20:86:34:e8:
66:6d:fd:14:16:4e:6b:9c:74:f7:db:b4:d2:52:3e:
37:06:86:c8:f7:83:08:a1:66:61:0f:aa:91:61:b1:
15:10:c1:9a:48:9d:c7:74:e8:0b:a2:34:c5:f8:df:
84:53:bf:9e:aa:ab:37:7d:a6:ef:48:1b:2c:a7:ea:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5D:40:0E:AE:74:65:45:B4:4E:06:C3:C7:F0:D8:37:47:32:F8:91
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U11ADq50ZUW0TgbDx_DYN0cy-JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.84.0/24
31.57.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:33:5e:e0:44:ed:c2:86:79:03:c2:45:53:99:e4:b1:69:71:
ef:bf:74:a1:c5:a9:67:ed:7f:ef:64:c5:69:44:47:9a:1c:28:
2a:47:b7:2c:04:fc:57:3b:6b:70:89:b2:4b:66:cd:45:d5:f2:
c9:02:84:9e:93:e6:83:93:8f:ce:09:01:73:9f:36:98:57:18:
2f:7e:b5:46:b6:5f:91:3e:50:15:d2:15:b7:56:31:be:1c:3d:
30:64:fe:52:cd:11:7d:5f:1b:5f:71:e1:90:b5:e1:7e:14:8f:
e8:90:9e:e6:54:9a:3e:8b:29:54:b1:2c:fa:64:b1:ea:71:fa:
66:e8:ec:bc:0d:8a:8b:8c:20:ee:e4:6a:5c:cc:f5:a3:cd:20:
8b:6b:53:b5:ff:1f:d6:1c:ad:2a:02:15:84:64:27:db:51:96:
7c:ab:5d:d9:f0:b9:a6:90:bd:b1:eb:e4:c7:f8:16:80:04:a5:
93:04:ce:c4:f0:73:6f:2f:1f:e5:f5:fb:72:bb:53:8a:45:00:
64:6b:78:7f:76:2f:49:e4:f0:c1:ae:5f:5d:d0:af:89:e2:8b:
f8:04:37:52:46:9a:0b:95:5d:f1:74:02:62:af:85:4e:17:c5:
07:b9:e5:16:da:07:8d:df:a8:da:b5:22:da:30:db:79:a6:f9:
fb:3a:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 16:49:57 2026 by rpki-client