Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y-khBqPRsWkCtn_TDoJadZQLsNM.roa
File: Y-khBqPRsWkCtn_TDoJadZQLsNM.roa (raw, json)
Hash identifier: 76ZO54ZYO5QSqw7rsW5G0BSFbVoLobw9J6KBEFPMObA=
Subject key identifier: 63:E9:21:06:A3:D1:B1:69:02:B6:7F:D3:0E:82:5A:75:94:0B:B0:D3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A07CCF03E4DEEF125167825B783DB1765D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y-khBqPRsWkCtn_TDoJadZQLsNM.roa
Signing time: Mon 07 Sep 2026 16:58:56 +0000
ROA not before: Mon 07 Sep 2026 16:58:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63907
IP address blocks: 31.57.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:cf:03:e4:de:ef:12:51:67:82:5b:78:3d:b1:76:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 7 16:58:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63e92106a3d1b16902b67fd30e825a75940bb0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:be:0d:f2:34:8e:70:16:50:14:22:fa:4f:
2a:6e:4c:f1:56:aa:af:58:fd:46:d5:0b:37:7c:0e:
8b:25:58:c1:a3:91:97:aa:f8:b4:11:66:b5:c9:b0:
a9:0f:ec:ff:6c:67:58:43:78:56:13:c6:19:d7:71:
bc:bb:d1:85:01:17:2f:7c:85:9a:6b:8b:40:09:08:
b5:e4:b7:6e:6e:38:96:5b:b0:cd:0e:b5:e1:89:33:
1f:c4:f4:d5:10:bd:ef:43:dc:fe:3a:7b:24:87:03:
ad:5e:45:61:6f:98:34:45:1f:67:3b:b2:5b:df:9d:
6f:81:db:74:9b:34:b7:0b:1e:1e:05:7b:a3:3e:44:
7c:c3:3d:a8:a3:39:ff:63:6e:6b:e9:f0:f3:c6:8b:
72:93:51:63:bb:39:1c:24:ae:a8:55:1a:59:39:3a:
f1:21:e6:92:a9:bb:e4:9c:55:a2:ff:b8:20:b2:83:
39:9e:bf:04:57:cf:d1:bf:07:61:e4:b0:de:cc:c8:
2a:de:05:35:1e:ab:1d:40:4e:79:ec:e0:76:fa:e4:
23:65:de:b7:e7:a5:c2:98:15:2b:fc:ec:05:de:af:
c7:a1:a2:d5:33:08:ff:21:a6:2d:42:4d:83:26:0f:
eb:e9:ee:e3:6c:1a:12:5a:97:9a:21:b6:cf:4f:d4:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E9:21:06:A3:D1:B1:69:02:B6:7F:D3:0E:82:5A:75:94:0B:B0:D3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y-khBqPRsWkCtn_TDoJadZQLsNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.155.0/24
Signature Algorithm: sha256WithRSAEncryption
05:0f:f3:8c:c0:1a:a3:4b:13:e6:27:1c:76:e3:b1:6c:8a:41:
15:2d:b6:ed:9b:9b:ec:20:6e:a6:18:57:d2:50:d7:47:64:f0:
37:de:36:ea:b7:2f:72:f9:3d:15:09:51:44:71:a4:f8:15:43:
a9:23:5b:b2:66:63:a4:04:99:b7:98:1d:06:e7:57:29:ff:9c:
42:e0:c1:58:b6:32:17:2b:99:20:e1:9d:dc:be:cf:41:c4:e0:
c4:f6:e1:f2:bd:3a:7c:00:57:b2:7a:5c:86:52:c1:f5:49:d5:
d9:33:f4:42:7a:8c:ba:31:7f:e6:c2:b5:2b:3a:22:1d:33:67:
3f:48:da:73:55:51:1e:73:49:80:cf:7f:76:7f:26:8e:70:12:
36:be:e9:19:dc:27:54:76:6c:8d:f3:a1:ef:77:9d:02:cf:40:
31:23:65:5d:96:17:69:7b:5e:ad:2b:6b:17:a4:c9:84:c0:b8:
43:c4:1c:6f:97:3b:52:87:b1:de:a0:ab:28:f7:34:70:e5:01:
fe:78:7e:e1:65:aa:18:d1:46:f7:0c:22:a8:fb:33:0f:18:c6:
45:86:ee:3b:19:b5:e7:1d:65:be:75:f4:93:66:0b:f6:3a:86:
16:43:28:c3:3c:c6:0d:57:0b:ee:e7:4f:93:29:2a:4a:a2:bb:
c5:8f:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 08:38:02 2026 by rpki-client