Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fAUDVcs-KTe06wQcMOvog5oulO4.roa
File: fAUDVcs-KTe06wQcMOvog5oulO4.roa (raw, json)
Hash identifier: QKKBWBEGieVf0m9jNjDjHcuv1U0PJ+Gd2aVbF36mQ34=
Subject key identifier: 7C:05:03:55:CB:3E:29:37:B4:EB:04:1C:30:EB:E8:83:9A:2E:94:EE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A01FDFB2EA9ADF75196E042BF83E40A80F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fAUDVcs-KTe06wQcMOvog5oulO4.roa
Signing time: Thu 20 Aug 2026 15:52:29 +0000
ROA not before: Thu 20 Aug 2026 15:52:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 31.56.57.0/24 maxlen: 24
31.56.217.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.66.0/24 maxlen: 24
31.57.115.0/24 maxlen: 24
31.58.63.0/24 maxlen: 24
31.59.96.0/24 maxlen: 24
31.59.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:df:b2:ea:9a:df:75:19:6e:04:2b:f8:3e:40:a8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 20 15:52:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c050355cb3e2937b4eb041c30ebe8839a2e94ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:0f:a5:81:26:72:5f:32:d4:70:44:ee:1c:
b4:d9:9a:28:88:ae:fd:af:8d:54:d6:2d:de:d4:0b:
3e:d6:91:48:72:8a:c2:f9:10:67:9c:72:2e:6a:bd:
e8:63:67:be:1b:d8:17:46:98:98:fd:b1:e0:38:19:
9e:fc:cd:9b:86:5d:9f:8d:90:d5:5f:a2:01:83:db:
d2:3d:c3:87:1f:f8:71:dd:5e:05:02:0d:ae:2a:d3:
7d:dd:67:e1:93:be:16:c1:f2:b6:bd:cc:ee:7a:a3:
43:2b:18:55:52:fb:cd:7a:f7:ec:1f:5e:8a:7a:35:
8a:c5:87:39:83:d5:d1:1d:e0:1c:cc:8c:93:68:66:
fe:b7:50:a7:ed:94:27:a5:61:8d:7c:fc:fc:93:62:
03:63:24:3f:c9:1d:d9:87:95:20:5a:e3:90:b5:e2:
23:95:5b:45:06:bb:93:be:94:e4:a3:a4:bf:80:7b:
21:90:6e:c7:21:9b:8c:6d:52:1f:4b:1a:67:f2:ef:
ad:7a:93:ce:c8:75:db:70:eb:da:ee:6f:68:d9:1e:
3c:b0:ef:c0:d8:de:c3:ab:5a:21:7f:72:5d:31:fb:
e3:3d:f2:8c:ea:e8:3e:f2:2a:af:fe:84:2c:b1:82:
e2:73:8a:ed:7d:2b:26:e2:62:59:02:48:71:64:9f:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:05:03:55:CB:3E:29:37:B4:EB:04:1C:30:EB:E8:83:9A:2E:94:EE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fAUDVcs-KTe06wQcMOvog5oulO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.57.0/24
31.56.217.0/24
31.57.9.0/24
31.57.66.0/24
31.57.115.0/24
31.58.63.0/24
31.59.96.0/24
31.59.117.0/24
Signature Algorithm: sha256WithRSAEncryption
01:44:24:0b:e3:d6:14:39:eb:9e:85:97:5a:9d:09:db:8b:6f:
92:09:7a:20:7d:ae:4e:76:40:fc:96:b8:a0:dd:ab:8f:9b:60:
4f:53:ba:8d:96:b3:e5:63:75:cb:9e:3e:56:9f:e3:7d:6e:f2:
67:d3:40:5b:45:24:44:f8:9e:19:17:14:5a:06:e0:c5:9a:fe:
0f:7a:d9:f6:c9:4f:35:10:45:46:24:3f:f7:2a:0d:e1:5f:f8:
a3:9a:4b:43:48:a9:9e:c9:9a:8a:b9:ca:67:fd:17:58:51:02:
f9:04:2d:fc:8c:a3:f5:10:b0:ea:bc:60:41:77:47:17:6b:18:
fe:7f:05:61:4f:64:3f:31:56:19:40:8d:bb:67:10:52:b1:05:
93:06:ef:3a:ee:c5:da:87:07:d8:1a:be:9b:e9:0e:9c:69:c4:
de:31:3c:c0:65:a5:03:f9:5d:ac:88:04:ec:99:51:10:2c:97:
99:76:9a:d5:bc:22:5c:29:bf:35:30:13:5f:f5:3d:79:b1:c9:
f3:af:21:c2:15:7b:1a:35:22:0d:6a:3d:a6:0f:6c:89:bd:0a:
3c:ae:dd:55:32:b2:51:12:3b:43:96:60:5b:58:e9:c6:0a:65:
a4:b0:f2:03:c1:4c:b9:75:bd:21:61:bd:4f:d4:80:bb:25:0f:
58:79:91:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:41 2026 by rpki-client