Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YaLFICvToHbBZeSNp5ys5LWiZDo.roa
File: YaLFICvToHbBZeSNp5ys5LWiZDo.roa (raw, json)
Hash identifier: 6SZS2JhnCJfHHZ55siVtF3har/9oG7b5rHAe7YDgbwM=
Subject key identifier: 61:A2:C5:20:2B:D3:A0:76:C1:65:E4:8D:A7:9C:AC:E4:B5:A2:64:3A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A00BB5F4DB5965260A6B694BF1B21FE759
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YaLFICvToHbBZeSNp5ys5LWiZDo.roa
Signing time: Sun 16 Aug 2026 17:54:29 +0000
ROA not before: Sun 16 Aug 2026 17:54:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 31.56.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0b:b5:f4:db:59:65:26:0a:6b:69:4b:f1:b2:1f:e7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 16 17:54:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61a2c5202bd3a076c165e48da79cace4b5a2643a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:ce:a5:02:3b:15:cf:61:57:4f:e3:bd:1d:
41:17:c5:9a:5d:98:98:37:95:fa:0e:de:f9:80:d8:
7f:7e:86:40:78:e5:6d:f8:65:d6:f8:29:66:a4:14:
68:33:d3:d2:7e:08:21:cc:f1:b6:08:09:2e:cd:74:
25:de:99:90:24:1e:73:16:ed:f3:0a:b8:58:00:fe:
be:c9:2c:0e:cc:56:ba:84:7e:36:32:37:2e:42:71:
92:85:aa:3f:73:d5:1f:3e:e2:1d:08:ec:ae:5e:3a:
17:4f:fc:52:e7:0e:01:7b:8b:f6:a1:88:25:f7:8a:
36:25:03:11:6b:bf:08:5f:fd:36:d4:e5:03:b0:04:
33:9f:39:5b:83:d4:d4:1c:66:5e:7c:17:74:45:9c:
f2:7e:1b:db:2a:b1:9b:1b:58:82:b2:7e:c9:d8:6a:
3a:34:8e:31:39:06:d3:7d:41:28:0a:b2:2c:89:68:
bb:5f:da:05:07:09:e9:1d:d0:91:0d:d5:90:f7:6d:
2b:d5:c4:77:ba:a8:20:12:89:b3:00:83:4a:a0:79:
bd:d9:4d:d9:37:30:c2:8a:c9:c7:ed:e9:86:ef:e6:
67:4f:a1:e7:ee:86:5b:4f:fb:b3:48:5e:7a:b4:08:
45:d4:6e:4c:5c:18:85:fa:bc:69:f9:a6:bd:63:e8:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A2:C5:20:2B:D3:A0:76:C1:65:E4:8D:A7:9C:AC:E4:B5:A2:64:3A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YaLFICvToHbBZeSNp5ys5LWiZDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:f6:39:9a:5d:04:8b:ea:e7:60:e7:e6:9d:b4:93:48:f8:d0:
21:f2:34:fe:c2:f5:55:f3:61:f6:5a:4b:26:41:8f:75:21:73:
6d:c7:b8:24:1b:fb:56:14:31:b0:1d:4d:71:10:a6:bc:48:b1:
8f:3b:42:ef:f6:af:76:7b:fd:b2:0d:f6:29:7c:20:85:6e:44:
9b:e7:da:98:92:eb:06:da:6d:2d:57:4e:34:2b:48:49:16:84:
a0:aa:45:e7:42:10:d3:da:b5:64:a0:bb:03:6e:ff:0f:86:c8:
75:4f:13:9e:2a:2a:25:05:d3:2c:15:76:1a:56:64:55:8f:d7:
8a:c6:0a:6f:32:dc:29:06:06:e4:28:ba:34:3f:b1:9b:c8:7b:
de:c1:ba:6e:f7:a6:0b:bf:6e:b5:ba:da:be:69:69:bd:f1:64:
3e:63:0d:c7:3c:16:07:07:3d:dd:67:89:7b:da:c7:a6:a1:52:
6b:01:80:28:3f:d4:0b:ef:4d:a7:03:51:49:11:4b:3a:9b:48:
35:73:98:c2:77:a5:50:9b:42:d9:bd:af:3a:f3:f5:3c:2b:19:
60:90:50:ee:4d:eb:97:ab:f8:7d:ba:47:ea:5a:cb:0a:9d:6b:
76:b2:b2:5e:24:0c:b3:c8:64:88:4e:32:bc:27:3a:1d:69:b3:
57:53:77:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:55 2026 by rpki-client