Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V1erz0Nk35FLjDG-OxSG0ZYF73I.roa
File: V1erz0Nk35FLjDG-OxSG0ZYF73I.roa (raw, json)
Hash identifier: Z8VidfdHBlLiHfcuf+jkUm8JtSCOtMMSarmEZSJ53JU=
Subject key identifier: 57:57:AB:CF:43:64:DF:91:4B:8C:31:BE:3B:14:86:D1:96:05:EF:72
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E4952680A5F3915F5346CAFB537B28366
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V1erz0Nk35FLjDG-OxSG0ZYF73I.roa
Signing time: Thu 21 May 2026 06:56:37 +0000
ROA not before: Thu 21 May 2026 06:56:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50810
IP address blocks: 31.56.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:52:68:0a:5f:39:15:f5:34:6c:af:b5:37:b2:83:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 21 06:56:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5757abcf4364df914b8c31be3b1486d19605ef72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c4:ad:d0:5d:1a:2e:88:d7:76:2f:84:47:a6:
fc:af:67:af:84:cd:2a:2d:e1:5b:65:05:8d:d7:f6:
3e:ee:f5:fe:84:5f:fd:7c:ce:1b:07:1b:98:48:7e:
ed:52:b5:f1:51:64:4e:ea:66:92:54:25:67:9b:20:
a4:0f:d9:4a:e4:20:c1:f2:82:5a:ed:fb:70:5f:a1:
c3:58:cd:1c:26:ff:5b:c1:27:54:d3:0a:c2:d1:c6:
5a:1c:e4:25:2a:00:64:78:47:dc:ac:8b:82:85:86:
b4:50:e3:68:01:5f:1a:0a:39:34:99:94:c8:cd:66:
c5:4e:d1:3d:2d:68:aa:ac:0b:71:c0:cf:9f:ff:91:
84:b4:a8:4f:c4:cb:1d:53:b1:6b:de:8f:76:6d:11:
a0:b2:d4:4f:99:44:84:17:6e:56:7f:b1:87:cf:78:
65:17:35:cb:a9:a5:9e:2c:e8:16:49:6e:76:0e:02:
af:ed:7f:99:06:36:cc:ee:03:91:1a:b2:c2:6f:15:
49:c9:68:9d:95:39:2b:22:76:db:0d:50:d8:7c:d5:
7b:2b:bc:c1:dd:66:f0:af:50:5f:50:40:94:fa:c8:
e6:05:df:45:da:ab:b5:e3:0e:09:be:92:4b:9b:64:
41:63:d8:10:76:1c:49:5d:38:b5:62:c2:4a:ca:47:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:57:AB:CF:43:64:DF:91:4B:8C:31:BE:3B:14:86:D1:96:05:EF:72
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/V1erz0Nk35FLjDG-OxSG0ZYF73I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:84:14:c2:5e:57:c2:8c:5f:42:cc:f7:eb:b2:56:ac:eb:da:
47:0c:73:5c:d4:e6:89:c1:02:71:75:df:fe:4f:11:8a:f4:f1:
fa:e0:1d:e1:df:cd:86:a6:a7:b7:cf:c8:77:71:e1:5d:c3:b6:
46:b5:c3:17:74:60:ae:c3:0b:82:7a:4f:78:fc:34:f5:bc:bf:
11:24:71:dd:cd:41:c8:10:6d:ff:a5:68:a2:b6:d2:5d:24:b1:
8a:57:e3:10:6a:f6:f9:8d:06:20:89:cc:f2:e7:65:38:17:62:
6b:d7:37:5f:86:7a:97:03:c5:9a:6e:f1:54:b6:01:18:00:87:
75:bb:86:aa:eb:3d:ac:db:6d:8c:7b:60:c1:52:ae:99:81:33:
01:d3:96:c8:1d:ac:0a:05:4b:66:4a:71:a1:7c:7d:ad:e8:5c:
e1:c7:37:c0:30:6a:17:52:34:7a:b3:24:13:6e:86:dd:d2:8e:
29:d2:9c:40:ae:be:d5:bd:30:83:b0:27:39:06:76:bb:2c:c7:
5a:fa:d1:54:12:6c:6e:1e:e8:be:40:fa:f0:77:72:52:f9:de:
32:e5:27:bf:98:79:7f:c0:89:b6:7e:10:94:e5:af:c8:4f:78:
70:e6:86:39:bd:58:06:24:fd:bd:d5:4f:d5:ee:7d:f5:0a:d9:
0d:88:da:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:56:32 2026 by rpki-client