Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XN6wWDHRL3pAU1YOI8lBdaqp_Hs.roa
File: XN6wWDHRL3pAU1YOI8lBdaqp_Hs.roa (raw, json)
Hash identifier: du10GzCgno3idEEQ7Gcw96h4tbq8bqqTk1i4zM8H9lM=
Subject key identifier: 5C:DE:B0:58:31:D1:2F:7A:40:53:56:0E:23:C9:41:75:AA:A9:FC:7B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A05D645FA7D8F192980129A3866E5F7B7D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XN6wWDHRL3pAU1YOI8lBdaqp_Hs.roa
Signing time: Tue 01 Sep 2026 14:34:14 +0000
ROA not before: Tue 01 Sep 2026 14:34:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 31.56.80.0/24 maxlen: 24
31.56.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:64:5f:a7:d8:f1:92:98:01:29:a3:86:6e:5f:7b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 1 14:34:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cdeb05831d12f7a4053560e23c94175aaa9fc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:6d:87:5a:ac:21:61:75:aa:9c:e9:6c:9a:
a4:28:35:d5:e3:9d:55:7d:72:5d:1c:d1:64:9e:09:
c6:f5:41:0a:0a:e8:c9:5e:e5:99:92:f2:3e:29:6e:
1e:3b:d3:bf:0a:17:d3:42:d8:04:df:72:a5:5b:e0:
c6:f7:1e:30:b0:3f:ad:a8:2b:29:21:aa:b0:ca:8f:
2e:e7:5a:70:53:bf:b2:69:96:d7:7c:d0:52:d1:a6:
04:e0:df:04:a2:5b:4e:0e:97:1d:c4:1f:ad:40:7d:
96:7b:80:ab:59:32:ee:ce:4b:ef:b4:aa:fb:c1:f2:
f3:9c:55:e2:88:d6:fb:a8:9f:16:12:b5:ad:5c:de:
78:5d:17:f1:4b:9e:bd:70:ae:ce:34:36:87:e1:95:
62:ee:22:fa:73:11:39:6a:a9:f3:72:cb:f7:ad:7d:
bb:0d:4a:64:94:be:a3:7c:54:41:f6:38:e0:f9:3f:
89:94:03:7f:16:9d:b5:c4:cc:34:3a:76:77:88:3b:
00:ba:03:1e:51:1d:a9:7a:3a:a5:e0:b2:03:58:bc:
1e:91:07:af:3e:ed:c5:03:8b:38:ad:88:d4:81:d7:
d6:6d:ab:83:b9:ba:32:8c:5b:02:83:a6:ae:86:71:
3a:71:7a:bc:4d:ef:35:51:20:40:95:18:12:2b:c7:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DE:B0:58:31:D1:2F:7A:40:53:56:0E:23:C9:41:75:AA:A9:FC:7B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XN6wWDHRL3pAU1YOI8lBdaqp_Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.80.0/24
31.56.220.0/24
Signature Algorithm: sha256WithRSAEncryption
07:14:88:58:aa:77:7a:22:d9:84:c5:a0:9f:82:55:4d:78:be:
90:18:1f:53:da:21:26:26:27:9d:fc:f1:f7:a5:ea:64:c7:5d:
9b:fc:47:c1:a1:89:54:27:e5:f8:8f:49:69:ff:a9:eb:be:3e:
b2:eb:c5:a3:66:0b:81:f2:06:29:d5:94:93:e6:14:e0:83:4d:
28:e2:a7:b5:87:75:d9:9d:e8:f0:af:af:5c:7c:8d:66:24:8b:
3c:8d:d3:74:87:a5:51:0d:47:b3:df:3c:a3:de:57:58:29:16:
ae:c5:6c:81:31:cf:79:fe:d7:2d:65:c5:a4:3a:76:4a:2e:a9:
d5:88:8d:c3:a9:37:77:17:63:9f:2e:bf:6e:4d:cd:54:a2:57:
21:33:a7:b8:65:18:30:de:db:64:a4:bb:02:53:3c:46:e3:98:
c1:52:31:f5:13:44:09:ba:79:4b:c9:03:4b:44:26:56:b0:41:
01:df:ca:1c:95:db:f6:b6:2f:ef:f3:aa:af:e2:f4:8e:54:50:
cc:82:1d:96:c4:af:48:e5:b4:c2:61:cb:30:77:06:d9:da:cf:
53:6c:87:fe:54:e1:82:b1:7d:00:c8:75:cd:69:e7:78:84:8b:
f3:66:35:01:97:5c:84:13:38:73:cf:5d:3f:1b:79:52:5f:e8:
24:9f:46:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBdZF+n2PGSmAEpo4ZuX3t9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTAxMTQzNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2RlYjA1ODMxZDEyZjdhNDA1MzU2MGUyM2M5NDE3NWFhYTlmYzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMlth1qsIWF1qpzpbJqkKDXV451V
fXJdHNFkngnG9UEKCujJXuWZkvI+KW4eO9O/ChfTQtgE33KlW+DG9x4wsD+tqCsp
Iaqwyo8u51pwU7+yaZbXfNBS0aYE4N8EoltODpcdxB+tQH2We4CrWTLuzkvvtKr7
wfLznFXiiNb7qJ8WErWtXN54XRfxS569cK7ONDaH4ZVi7iL6cxE5aqnzcsv3rX27
DUpklL6jfFRB9jjg+T+JlAN/Fp21xMw0OnZ3iDsAugMeUR2pejql4LIDWLwekQev
Pu3FA4s4rYjUgdfWbauDuboyjFsCg6auhnE6cXq8Te81USBAlRgSK8cOwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFzesFgx0S96QFNWDiPJQXWqqfx7MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWE42d1dESFJMM3BBVTFZT0k4bEJkYXFwX0hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzhQAwQA
HzjcMA0GCSqGSIb3DQEBCwUAA4IBAQAHFIhYqnd6ItmExaCfglVNeL6QGB9T2iEm
Jied/PH3pepkx12b/EfBoYlUJ+X4j0lp/6nrvj6y68WjZguB8gYp1ZST5hTgg00o
4qe1h3XZnejwr69cfI1mJIs8jdN0h6VRDUez3zyj3ldYKRauxWyBMc95/tctZcWk
OnZKLqnViI3DqTd3F2OfLr9uTc1UolchM6e4ZRgw3ttkpLsCUzxG45jBUjH1E0QJ
unlLyQNLRCZWsEEB38ocldv2ti/v86qv4vSOVFDMgh2WxK9I5bTCYcswdwbZ2s9T
bIf+VOGCsX0AyHXNaed4hIvzZjUBl1yEEzhzz10/G3lSX+gkn0aq
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:24 2026 by rpki-client