Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YpjbUHTs2OHVv8DfdxfnmcvLiQk.roa
File: YpjbUHTs2OHVv8DfdxfnmcvLiQk.roa (raw, json)
Hash identifier: 9LNDrXxO4EJZHQyUJ6116q+R2/lnjvJfz6S69cAmI3g=
Subject key identifier: 62:98:DB:50:74:EC:D8:E1:D5:BF:C0:DF:77:17:E7:99:CB:CB:89:09
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0AE16379DA998F71F77C851BE61F967E8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YpjbUHTs2OHVv8DfdxfnmcvLiQk.roa
Signing time: Thu 17 Sep 2026 06:38:06 +0000
ROA not before: Thu 17 Sep 2026 06:38:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62651
IP address blocks: 31.56.99.0/24 maxlen: 24
31.56.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:16:37:9d:a9:98:f7:1f:77:c8:51:be:61:f9:67:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 17 06:38:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6298db5074ecd8e1d5bfc0df7717e799cbcb8909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:78:7e:78:e3:b8:74:50:68:8a:cb:28:c9:
73:ba:93:7c:40:52:40:28:02:32:30:75:64:cc:03:
d7:f7:ba:41:20:ed:ab:d7:ca:9b:6a:34:17:10:cd:
33:50:18:0c:53:aa:cf:ba:e4:ee:d3:8b:97:d1:29:
08:cf:c6:08:78:0c:e2:b6:16:51:c7:12:43:6f:55:
71:e1:77:c0:56:6d:ac:60:2b:60:18:3c:fa:12:ff:
6f:76:66:14:5c:92:50:2f:e9:2f:d8:b9:8e:6e:ea:
c0:ac:13:44:7c:8b:9f:e2:f5:92:85:72:b9:07:c7:
80:e7:56:20:1b:b5:b1:8a:f6:19:0e:05:dc:16:df:
34:e7:15:6f:fa:25:c4:9d:d7:8b:95:76:d9:d4:bc:
e3:2c:a0:b2:d9:00:44:c6:4c:c0:07:13:09:e9:d6:
7b:cf:92:0a:73:9d:63:c6:87:db:fe:61:39:14:c2:
9f:e3:b8:2a:6a:0e:21:89:fc:37:20:05:4e:aa:57:
ed:ec:d6:8c:6d:3f:74:81:7a:0b:2b:39:62:de:dd:
86:71:de:b9:46:1d:97:f1:ec:ec:dc:5e:3d:db:19:
2b:fa:28:3d:88:9c:fd:74:f8:af:75:50:7f:1a:8c:
66:9c:00:27:fa:0a:84:bc:54:be:52:b4:92:e9:b4:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:98:DB:50:74:EC:D8:E1:D5:BF:C0:DF:77:17:E7:99:CB:CB:89:09
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YpjbUHTs2OHVv8DfdxfnmcvLiQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.99.0/24
31.56.160.0/24
Signature Algorithm: sha256WithRSAEncryption
83:55:d2:2b:22:11:c0:49:9d:8f:80:09:aa:e6:0c:14:52:be:
fd:f0:8d:2c:2f:0a:fd:db:08:86:f6:2f:42:eb:96:4b:56:57:
8e:07:58:c0:e5:7c:b1:08:3d:d2:63:a9:eb:df:19:e3:18:2b:
40:74:5d:a8:e3:2d:97:33:36:0c:39:a1:28:d2:33:ec:4f:0d:
af:77:12:de:80:88:c3:00:f4:ea:6c:f0:11:47:09:ae:55:6e:
8b:7c:74:81:79:a5:a0:00:42:6a:bd:44:ac:3a:63:41:27:bc:
b9:a9:55:be:e1:81:c1:31:12:cc:71:d5:2b:b8:3f:3c:31:78:
aa:9d:8d:8b:72:4f:d3:8c:b4:c9:ee:2e:95:bb:d0:f6:fd:f7:
51:36:8c:9e:02:bf:1b:9e:1c:22:84:e9:4f:68:9e:a0:9e:88:
cf:3f:75:98:4e:00:23:b1:0d:13:b7:b2:87:bd:8f:2f:f6:f7:
f2:d6:37:58:2b:1a:9a:8b:87:96:9c:22:67:2f:1b:4b:5b:57:
1e:fc:1b:a8:06:65:30:72:f1:be:f2:5f:26:f0:20:ea:27:e1:
0c:61:6d:66:e6:33:67:d9:1b:80:21:22:59:ba:ad:28:38:d6:
7f:2f:fb:1e:66:0a:45:03:38:b1:ec:36:e9:47:54:c6:9f:da:
5d:f1:33:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:24 2026 by rpki-client