Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_oCDjVbr4e-LnWUq5Zgusxlfqko.roa
File: _oCDjVbr4e-LnWUq5Zgusxlfqko.roa (raw, json)
Hash identifier: GPFNDX7mwdHwe0Zc5LI6vldLpxZZULzIfVYYSHP+67s=
Subject key identifier: FE:80:83:8D:56:EB:E1:EF:8B:9D:65:2A:E5:98:2E:B3:19:5F:AA:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FB9B298D724D46A4926B3F43CB216E4FD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_oCDjVbr4e-LnWUq5Zgusxlfqko.roa
Signing time: Fri 31 Jul 2026 19:41:57 +0000
ROA not before: Fri 31 Jul 2026 19:41:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200169
IP address blocks: 31.57.0.0/24 maxlen: 24
31.57.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:b2:98:d7:24:d4:6a:49:26:b3:f4:3c:b2:16:e4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 31 19:41:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe80838d56ebe1ef8b9d652ae5982eb3195faa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:4e:48:b0:37:ec:ee:02:c6:75:3c:39:57:
f7:16:7a:75:0f:45:fe:7c:59:f3:72:19:56:7e:c7:
47:6f:f6:cb:a6:97:8c:62:57:7f:68:e5:df:71:fb:
76:c3:3a:6b:ca:82:01:7c:2f:b4:5b:70:e8:29:42:
43:cf:82:c9:c8:4d:57:23:7b:40:f1:a1:00:14:bd:
65:bc:19:3c:f0:ec:dd:26:62:e7:b2:a7:e5:fa:74:
aa:b5:85:f5:45:7a:21:ce:12:80:be:7a:1b:b8:ed:
52:df:0c:93:66:91:c6:e1:72:5b:05:a0:11:51:5c:
fd:6e:98:60:45:4f:55:ed:15:a5:3c:a4:db:5e:e7:
70:0f:48:b3:96:8d:6f:9b:7a:fe:ff:40:2f:a3:4d:
11:58:bf:fb:fc:b4:fc:4a:a4:e4:6b:65:55:01:c7:
54:fa:80:e3:33:32:45:ab:02:2d:f8:3b:5b:28:e2:
06:3d:3f:56:c5:4d:89:e4:72:fd:fd:34:ad:d5:dd:
86:be:44:2f:e9:41:5d:f7:67:93:7a:e0:f3:d8:ae:
80:97:eb:82:4b:d5:d1:6c:61:a8:f2:62:10:e2:46:
dc:d6:dc:24:3f:fa:19:8c:36:4d:7f:83:93:ef:c2:
4a:f8:65:b7:e0:ee:d1:c7:35:c2:5b:19:a9:35:13:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:80:83:8D:56:EB:E1:EF:8B:9D:65:2A:E5:98:2E:B3:19:5F:AA:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_oCDjVbr4e-LnWUq5Zgusxlfqko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.0.0/24
31.57.167.0/24
Signature Algorithm: sha256WithRSAEncryption
83:eb:01:9a:9c:b9:66:a7:b6:5a:87:28:10:3d:84:fd:c3:dc:
12:0a:0e:b8:aa:a5:4d:a2:c4:93:6d:18:2b:8d:72:2b:30:a0:
b4:61:62:52:45:b4:37:4f:0c:5a:ed:c4:f2:8a:2c:02:3b:ce:
f2:83:fa:30:94:8c:a7:a8:a9:a4:ba:d0:30:5f:eb:66:9c:49:
35:11:78:48:b5:ef:75:16:5c:3f:d3:d8:e2:8d:83:9e:af:0a:
8e:d4:df:c0:66:31:7d:87:03:f0:d5:e3:ac:83:62:ea:2e:0c:
90:86:23:04:6e:7e:db:3d:9c:01:3d:cc:81:99:5f:db:c4:cc:
e1:f0:51:bb:d7:28:42:bf:b6:59:f8:9e:41:46:3a:e3:f3:66:
ea:0e:5f:24:f7:9a:ed:9a:8c:dc:aa:ed:6a:3a:46:59:a8:c0:
b7:29:b8:d0:c5:bc:30:db:53:08:52:36:e1:71:69:db:f7:41:
5d:ef:74:fa:86:48:86:65:7a:aa:c1:44:6d:11:9b:06:e5:18:
2d:f5:96:f7:ea:63:e0:e7:54:63:0c:ee:45:e6:f8:1d:51:68:
6d:b2:26:20:1f:c0:83:bb:cd:4b:45:46:52:76:af:6e:27:2c:
4e:0b:44:54:0a:8f:a6:1e:f0:94:3b:d7:c3:c4:ec:39:f4:38:
55:2e:08:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:10 2026 by rpki-client