Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UKlVTD86_AHOhf1z1yEk0AE335o.roa
File: UKlVTD86_AHOhf1z1yEk0AE335o.roa (raw, json)
Hash identifier: +Drw4daz6bJzvy16MwL1wXhedzhIjajeom7edigiD78=
Subject key identifier: 50:A9:55:4C:3F:3A:FC:01:CE:85:FD:73:D7:21:24:D0:01:37:DF:9A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E4BEEBEFCCFE48B9168D9B9166C8276AA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UKlVTD86_AHOhf1z1yEk0AE335o.roa
Signing time: Thu 21 May 2026 19:06:38 +0000
ROA not before: Thu 21 May 2026 19:06:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402214
IP address blocks: 31.56.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:ee:be:fc:cf:e4:8b:91:68:d9:b9:16:6c:82:76:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 21 19:06:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50a9554c3f3afc01ce85fd73d72124d00137df9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:3c:6e:81:de:62:7f:18:e0:04:ac:d3:ad:
98:8f:fb:4d:99:25:45:c0:8e:ac:b1:18:f0:54:b5:
8b:00:f6:2c:8a:8a:25:dd:4b:5c:9b:88:d3:03:4f:
c5:c0:a2:f2:ec:bc:83:ea:91:16:8d:4c:0b:fe:57:
e8:70:9d:33:7a:bb:e2:5e:90:74:39:27:dc:16:bb:
ac:ca:ba:43:43:c8:8d:85:56:af:b0:d1:13:67:fb:
8f:a3:71:a4:d8:b4:a3:c5:cf:f6:82:c0:38:ee:29:
ba:00:ad:81:91:1b:74:d1:d2:a4:47:c7:a4:5d:48:
b9:52:05:08:84:5c:b3:ac:f4:c2:1d:9c:aa:89:d1:
5c:62:1f:30:5a:d6:a0:8d:be:22:51:a5:e8:69:3d:
9e:bf:e5:fb:69:40:3a:d0:bd:f6:7d:7a:6e:6b:21:
58:d7:7e:59:75:5b:28:15:96:6c:3f:29:f3:62:21:
08:eb:4d:d5:3a:99:ea:6c:7c:4d:c3:cc:23:05:26:
3f:85:17:22:2c:fc:42:9f:26:68:2a:e6:03:e2:fb:
3f:83:81:6c:14:1c:4f:16:c9:b4:f4:fb:9e:ce:29:
cb:49:ad:2b:13:57:95:fe:ff:cf:1c:64:ea:f4:ad:
dc:13:dd:00:5a:66:4b:f6:2c:f1:05:a4:63:83:b3:
6b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A9:55:4C:3F:3A:FC:01:CE:85:FD:73:D7:21:24:D0:01:37:DF:9A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UKlVTD86_AHOhf1z1yEk0AE335o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.153.0/24
Signature Algorithm: sha256WithRSAEncryption
32:0d:ab:15:62:af:45:7e:47:17:47:63:7c:f3:ec:ad:1a:c1:
0a:59:a7:be:93:90:f9:73:5e:a3:81:20:b7:5c:98:66:aa:f9:
3b:14:f8:47:57:d3:bb:3c:39:a1:3b:35:7c:bf:14:5d:55:e2:
68:36:65:7a:8b:d7:2f:f7:9b:7d:dc:a5:23:c9:d7:f5:a8:38:
bc:4f:76:15:df:61:7f:9a:7e:63:5f:3d:b7:3a:79:b2:51:da:
a7:70:04:c7:a1:f5:e9:c7:83:60:84:23:ac:1f:ae:03:2d:30:
8f:c6:85:08:54:9e:3f:dc:06:6d:63:bf:34:0d:5f:82:56:11:
f9:56:66:a8:da:64:c1:3e:d6:f4:02:d6:03:06:3e:9f:07:d8:
6d:92:0b:af:af:a1:48:37:bf:e3:6d:61:b0:f1:7c:52:4a:0e:
03:41:fd:5b:e7:2c:86:88:37:73:ea:d1:a8:1e:01:73:c3:de:
dd:e6:b0:40:5c:f8:21:e0:3f:ac:2e:72:af:5b:47:13:f5:45:
95:e7:83:3e:ab:3c:f9:ca:0d:ea:43:13:52:d9:2e:83:7e:f4:
68:1b:49:ad:04:d1:a1:aa:27:a2:f8:c5:63:f4:75:6a:0b:d2:
a3:07:f5:dd:bf:44:8b:b3:63:3a:7a:3a:4c:fc:42:90:74:ca:
32:74:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:56:44 2026 by rpki-client