Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XG7OJ_bt72dKGp1gFGhelwVGTLc.roa
File: XG7OJ_bt72dKGp1gFGhelwVGTLc.roa (raw, json)
Hash identifier: ZW4OJ5pFSgnuu+kTPwiv8s8bireP1b5BQrrHXm0OV1E=
Subject key identifier: 5C:6E:CE:27:F6:ED:EF:67:4A:1A:9D:60:14:68:5E:97:05:46:4C:B7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0153CEB26DDF84B15AE403AD6F96E4FB4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XG7OJ_bt72dKGp1gFGhelwVGTLc.roa
Signing time: Tue 18 Aug 2026 14:18:28 +0000
ROA not before: Tue 18 Aug 2026 14:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56655
IP address blocks: 31.56.216.0/24 maxlen: 24
31.59.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:3c:eb:26:dd:f8:4b:15:ae:40:3a:d6:f9:6e:4f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 18 14:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c6ece27f6edef674a1a9d6014685e9705464cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:4f:c0:f8:cd:30:7b:92:b9:60:f5:f1:4d:
fd:ab:93:a2:f7:22:7d:cf:d1:4e:ff:12:3f:11:90:
d8:61:42:ca:95:43:0f:f7:4d:eb:6f:37:3f:03:b1:
81:80:5c:ed:90:55:4d:ae:a2:33:6d:f1:93:f7:55:
56:43:bf:39:8c:0f:b6:a4:a8:87:88:45:37:37:dd:
4e:c4:cb:78:b4:d5:b9:c3:c4:4f:cc:a8:52:ed:47:
2b:df:7b:a9:31:5a:ad:0b:f5:04:6a:20:d6:39:d5:
30:20:dc:52:80:5e:7b:f2:1f:4f:5f:24:67:7e:cc:
26:68:88:f0:49:8b:d2:16:ea:e7:80:73:d5:69:5e:
ed:b7:55:3f:33:23:79:e1:47:5d:1c:e0:ba:8e:44:
cc:fa:31:c2:86:da:c1:72:6c:cc:b9:5c:fe:33:0d:
f6:40:58:c6:69:cf:e6:80:43:13:a6:16:d7:e8:1f:
8c:c5:77:f1:e0:99:c1:82:97:82:86:53:7a:b1:c0:
bf:43:98:4d:a9:4b:d5:26:8e:4e:3a:0f:47:92:1a:
c0:cf:d7:77:08:da:07:5a:de:cd:29:b3:d9:1b:1b:
ad:5c:56:e4:61:4b:89:3d:cd:fb:40:c7:f9:8d:c5:
8b:41:b7:df:ab:24:fd:65:a7:01:02:32:3a:7d:d3:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6E:CE:27:F6:ED:EF:67:4A:1A:9D:60:14:68:5E:97:05:46:4C:B7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XG7OJ_bt72dKGp1gFGhelwVGTLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.216.0/24
31.59.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:23:c8:e4:ac:3a:95:51:95:bc:13:c0:18:75:c6:b4:ca:a1:
a1:3f:af:b7:f8:cc:92:e3:57:61:ce:58:6e:ed:61:66:c3:aa:
6c:4b:c7:c4:76:17:7a:5b:b1:47:10:d8:04:43:19:16:5c:45:
27:4d:87:17:aa:54:53:7c:b1:97:17:16:9f:6b:32:4d:2e:73:
56:6d:2d:5a:e3:c2:45:76:d0:d6:7d:ff:73:11:a8:ab:7a:28:
30:77:84:1d:54:43:1a:51:40:8a:20:0b:9a:ff:af:5d:f7:39:
52:56:0c:f3:f8:10:62:df:0c:37:d0:b5:b1:f5:e4:a4:06:73:
91:c0:67:4a:0b:9a:38:85:ab:ef:4c:59:80:b9:8f:1f:85:95:
88:7e:fb:c1:b8:bc:d0:fe:e1:30:d9:12:6d:c2:1c:be:e8:63:
30:bd:62:f5:de:4d:a5:d8:71:ae:a4:ff:8a:b2:dd:15:5b:ba:
99:6e:8e:c3:27:8d:0f:a3:e0:fa:2f:d3:c7:2f:23:c3:aa:7c:
ec:b3:9d:18:af:c4:67:76:d9:db:f9:43:2d:1f:d0:16:8a:d2:
db:fe:2f:9e:8c:f9:c0:c7:e1:bc:6d:ab:c3:e6:05:11:9e:7a:
83:88:69:21:99:50:91:09:18:64:d0:06:7f:0e:75:71:82:a8:
b4:7a:69:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:51 2026 by rpki-client