Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UvUrh_flaOksEp7LDo0qibXTtjU.roa
File: UvUrh_flaOksEp7LDo0qibXTtjU.roa (raw, json)
Hash identifier: k3cdQLrrksXeA1d2pbohCLkmQwdVy1tZ7OWGc083KRk=
Subject key identifier: 52:F5:2B:87:F7:E5:68:E9:2C:12:9E:CB:0E:8D:2A:89:B5:D3:B6:35
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A13A9B3A3EADA59208791E5A965F73A6A0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UvUrh_flaOksEp7LDo0qibXTtjU.roa
Signing time: Wed 14 Oct 2026 13:30:13 +0000
ROA not before: Wed 14 Oct 2026 13:30:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43969
IP address blocks: 31.56.62.0/24 maxlen: 24
31.57.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:9b:3a:3e:ad:a5:92:08:79:1e:5a:96:5f:73:a6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 14 13:30:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52f52b87f7e568e92c129ecb0e8d2a89b5d3b635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:f1:90:64:22:3d:be:3f:4a:90:38:20:42:
81:10:13:8c:25:dc:9a:ed:27:69:be:9f:f4:0d:69:
f4:26:8f:99:7c:bb:cb:e4:56:4d:f0:58:23:21:2e:
50:8e:6b:49:c8:07:e0:79:be:06:fa:38:df:1e:c3:
db:fc:3d:5d:dc:18:4e:b6:e0:7b:8d:98:3a:db:94:
32:b8:f3:9c:e4:68:0f:3f:a2:60:7f:ee:da:f0:24:
9a:83:f8:c2:a0:f7:ae:e0:be:45:30:df:11:51:23:
78:73:b9:95:c7:2b:b9:5b:9e:32:a6:11:9c:d2:d2:
27:77:fe:aa:74:ef:d7:66:38:f4:44:9c:45:03:8d:
56:e7:1b:0a:4e:78:b6:36:2e:01:20:ed:e7:ad:a2:
ab:5e:da:99:1b:b0:2e:a9:b3:39:fb:3c:9f:49:89:
ae:a6:7a:61:71:6c:52:b3:44:a3:f2:4c:3e:e2:10:
9c:70:2e:a3:6e:4f:f5:6f:33:5f:3a:5b:94:79:9d:
74:bf:a2:3e:9a:73:09:cc:16:14:78:c9:37:20:60:
25:d7:89:1b:02:92:f0:9f:6b:b1:7a:74:cc:b8:40:
fb:25:63:55:e1:a7:ea:ef:d9:cb:cd:a4:56:06:92:
3e:76:c8:c5:27:7b:e9:33:60:9c:c1:aa:c4:1f:f4:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:2B:87:F7:E5:68:E9:2C:12:9E:CB:0E:8D:2A:89:B5:D3:B6:35
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UvUrh_flaOksEp7LDo0qibXTtjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.62.0/24
31.57.218.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:da:3c:13:96:df:87:0c:af:53:40:ce:70:b5:68:fe:52:4f:
03:90:4d:d9:28:c4:34:4f:e1:8e:a1:e6:09:6f:b2:4f:f0:d7:
4f:eb:c9:81:eb:43:f4:44:4a:7b:5c:b6:d0:91:d0:26:4e:f4:
51:7b:04:48:c7:51:52:17:aa:15:c2:f2:af:57:b9:e4:7d:21:
d1:11:1e:62:11:d0:9c:09:a2:c4:db:b1:41:1d:33:ff:db:01:
27:76:86:66:f6:cd:87:4b:78:3e:0c:30:26:71:e7:b3:20:e1:
80:f6:a7:91:d6:0e:4f:68:b1:e2:f5:e4:47:6d:7e:30:72:47:
aa:82:29:7e:ef:79:53:76:11:75:20:9c:d8:dd:68:51:2d:27:
7a:bd:1b:85:81:31:4f:b9:fe:3d:ec:50:3c:84:36:e2:5b:21:
23:7d:c9:ae:0d:fb:6b:76:3b:7c:38:ba:74:a7:10:4e:32:8c:
71:a7:98:90:cb:46:84:2f:09:00:e9:b5:25:27:22:ea:2e:0f:
09:92:ab:6a:18:04:d3:9f:32:22:1f:8a:a5:e7:7f:0f:b4:7c:
80:5a:88:22:94:47:dd:be:c3:0a:a4:b7:71:b2:e7:68:4e:87:
59:86:73:e4:62:85:63:d5:37:77:8f:b6:e4:8b:50:52:c4:b5:
d3:f0:14:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:34:53 2026 by rpki-client