Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Utacq9suJfbGwvRo2t1eC1BIV00.roa
File: Utacq9suJfbGwvRo2t1eC1BIV00.roa (raw, json)
Hash identifier: BzwlGNrstKU+cDnpGmbhogz0rDJXq65QYMZn7lcoQXc=
Subject key identifier: 52:D6:9C:AB:DB:2E:25:F6:C6:C2:F4:68:DA:DD:5E:0B:50:48:57:4D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0352AC0A03392A04C735D900DC619C90B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Utacq9suJfbGwvRo2t1eC1BIV00.roa
Signing time: Mon 24 Aug 2026 19:06:29 +0000
ROA not before: Mon 24 Aug 2026 19:06:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 31.57.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:35:2a:c0:a0:33:92:a0:4c:73:5d:90:0d:c6:19:c9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 24 19:06:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52d69cabdb2e25f6c6c2f468dadd5e0b5048574d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:dd:62:2c:05:fc:d7:1c:3c:24:6e:ee:49:
13:07:30:e6:45:fd:53:ff:01:2c:6d:22:f1:01:29:
5d:ac:6f:de:54:35:6f:3e:e8:35:dc:b5:78:dd:d0:
ab:f1:8b:e0:6f:51:ba:76:3e:cd:44:91:48:b2:6f:
ac:02:24:9d:42:03:e8:90:e0:49:4b:7d:71:8b:2c:
f5:43:82:3d:ca:19:d3:1c:66:35:37:8b:de:bb:a5:
a1:fe:13:c9:b2:58:1c:c7:96:27:db:0d:24:d4:60:
95:f1:b0:b0:52:0e:ee:f1:16:ff:eb:ea:da:97:b0:
dc:ab:63:e0:fe:22:f4:86:f7:3e:0e:a7:e4:cf:c0:
63:87:7f:d7:3c:f5:8e:6e:81:7e:89:97:4a:90:a5:
29:0b:a4:0d:3e:87:a9:ea:b1:2d:4e:69:08:f7:2e:
fe:2e:be:4c:53:fc:30:9f:34:77:74:3b:56:6e:e8:
4e:4b:01:35:91:87:24:2d:42:f1:06:23:96:12:ac:
2d:b0:23:3e:4c:15:41:cf:03:cf:d9:03:da:65:b1:
ea:8a:cb:17:90:55:76:f6:73:84:a1:0c:ee:d6:0f:
8b:d5:2b:c0:a2:86:ee:99:2b:76:12:e8:7b:3a:d5:
18:61:b0:14:f3:e1:59:4f:dd:fe:64:ad:f1:28:6e:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D6:9C:AB:DB:2E:25:F6:C6:C2:F4:68:DA:DD:5E:0B:50:48:57:4D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Utacq9suJfbGwvRo2t1eC1BIV00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:34:15:2a:0b:d2:69:f2:92:2c:a0:9f:ea:52:55:01:9e:73:
dd:6a:5b:bb:ca:65:9f:9c:f7:50:3a:22:ee:f6:21:fe:e7:3f:
7a:ac:b1:ef:11:ac:84:10:14:ed:da:62:80:7b:e5:59:4a:c1:
cf:2d:80:77:ad:66:65:a0:c8:ca:e3:5f:6d:da:22:90:1b:18:
fe:a9:87:66:b6:2f:fe:a8:76:cd:b7:30:ca:cd:eb:18:e5:02:
a9:88:63:c9:0f:65:6b:ee:88:c3:85:39:07:25:1d:d0:8c:ba:
be:11:b3:7f:b9:9c:1e:80:ca:25:71:35:e3:83:1c:ca:e5:28:
27:01:7c:40:9c:19:9a:f0:42:9c:8f:ad:ee:cc:c6:17:a2:ee:
0c:8b:7d:64:e9:54:bf:67:8f:50:1b:9d:a3:06:4e:b0:ae:c1:
16:7a:34:eb:3a:7e:72:36:37:48:e4:ab:a4:e2:cf:84:1d:e9:
01:81:78:d2:9f:43:02:ac:f9:04:aa:d8:5d:7d:a4:50:5a:00:
d4:32:21:48:7a:e0:76:d2:f6:ef:31:b6:71:f8:89:98:02:8e:
6c:6d:1f:67:0e:84:01:67:d6:b8:94:ee:09:47:be:90:65:55:
1b:d3:38:2f:5c:ab:fd:6b:9a:cd:8d:43:1f:71:32:b2:31:16:
24:5f:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:48 2026 by rpki-client