Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d642omdwPyRn87ihKpQU-wPlbWo.roa
File: d642omdwPyRn87ihKpQU-wPlbWo.roa (raw, json)
Hash identifier: y9foMOgX+W95j3IDAF+NYlC6egvyUsUfGUr7GpWmSOU=
Subject key identifier: 77:AE:36:A2:67:70:3F:24:67:F3:B8:A1:2A:94:14:FB:03:E5:6D:6A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A167EEA3664814FAB48B6FC5B2CAA364AF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d642omdwPyRn87ihKpQU-wPlbWo.roa
Signing time: Fri 23 Oct 2026 08:44:15 +0000
ROA not before: Fri 23 Oct 2026 08:44:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 31.57.39.0/24 maxlen: 24
31.59.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:ee:a3:66:48:14:fa:b4:8b:6f:c5:b2:ca:a3:64:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 23 08:44:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77ae36a267703f2467f3b8a12a9414fb03e56d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:e0:59:26:9d:39:c9:d7:f4:36:12:cb:23:
5f:cc:98:e5:a0:d2:a1:7f:f4:1e:20:27:d4:30:fa:
d4:55:a2:7d:24:29:19:80:27:cd:cb:da:e0:f8:34:
e5:38:dc:75:8d:ec:28:36:e3:12:95:d6:7e:00:1b:
6e:40:df:74:3c:f2:f3:bd:e9:ad:27:5c:0a:33:53:
d2:57:0f:07:3e:c0:c1:c9:4d:28:c5:2a:56:a5:f9:
01:f9:79:c1:cf:36:80:c9:aa:ec:16:e5:c5:3e:16:
44:5a:6c:49:f7:fa:ab:49:53:c1:33:e4:cb:d3:94:
13:49:de:21:63:c9:d3:54:b0:92:b9:50:f2:25:7d:
c9:09:d0:fe:74:bb:08:38:cb:b4:31:80:50:cd:1a:
cc:75:5b:43:8e:da:0e:3a:fc:08:8b:ef:5a:02:d8:
05:ff:8b:3f:f0:9d:74:3e:ec:a1:fd:89:dd:18:79:
3c:30:69:34:92:da:b2:9a:68:23:f3:00:7b:cd:26:
39:0d:e8:27:f6:e3:a8:2b:ca:3d:58:51:7a:94:a7:
ab:eb:60:d8:89:07:c5:d9:59:d1:40:96:fd:e4:17:
00:c5:6f:58:bf:cc:8a:6c:06:18:b1:8a:e8:f2:29:
c9:09:f3:93:0f:9e:26:31:fe:65:26:26:1e:8a:b3:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AE:36:A2:67:70:3F:24:67:F3:B8:A1:2A:94:14:FB:03:E5:6D:6A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d642omdwPyRn87ihKpQU-wPlbWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.39.0/24
31.59.75.0/24
Signature Algorithm: sha256WithRSAEncryption
78:80:ae:81:cc:df:20:95:f7:23:c8:9a:2c:7d:3b:f3:db:d1:
28:20:a1:59:85:3f:ad:1c:ef:89:4e:37:d7:10:16:24:58:6c:
7a:ba:76:56:ca:ee:0c:c2:16:f4:d7:e3:fd:11:12:10:9e:94:
ca:b6:75:7a:64:a8:a0:72:1a:37:f0:3c:e7:fe:fe:fd:8e:fd:
18:94:45:3d:06:c7:37:a8:62:d6:b0:2d:3f:f4:9b:9c:c1:90:
31:30:26:68:e4:ad:ee:2e:64:59:bd:ea:24:90:1d:b6:cb:06:
c1:13:c2:ef:21:fc:08:db:cf:36:7c:fb:41:c4:b8:ad:f9:c9:
ca:9d:66:93:f8:8c:73:27:b0:b1:4b:cb:ad:b1:d2:18:dd:71:
42:f6:34:3d:0a:46:ef:00:3a:41:94:93:9e:7b:c9:9c:28:53:
58:03:02:0e:18:b4:df:ce:a6:2f:68:d7:49:16:3f:48:3d:0e:
be:b5:f9:07:b7:26:99:4b:ea:75:34:b6:34:1c:70:8e:4b:f2:
92:e9:f1:77:79:69:6e:59:58:00:e8:3e:7a:6e:9e:12:72:a7:
a3:2e:45:0e:49:9c:be:5d:96:03:25:07:f0:b0:d6:8a:e5:e4:
85:2d:f2:b0:d2:6e:85:e0:8b:c5:48:d5:b0:6a:2d:bd:0e:9f:
ff:07:31:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:01 2026 by rpki-client