Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ljKb2EkVB0i1FZ59QqMp0CbAbUs.roa
File: ljKb2EkVB0i1FZ59QqMp0CbAbUs.roa (raw, json)
Hash identifier: BHrIvsJ8xBMsbSktPxQ/IzyjpsxDLk9uDWQh2Mc08NY=
Subject key identifier: 96:32:9B:D8:49:15:07:48:B5:15:9E:7D:42:A3:29:D0:26:C0:6D:4B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F3DE9456656517DC59EA9523D35FA92E9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ljKb2EkVB0i1FZ59QqMp0CbAbUs.roa
Signing time: Tue 07 Jul 2026 18:48:45 +0000
ROA not before: Tue 07 Jul 2026 18:48:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216022
IP address blocks: 31.56.241.0/24 maxlen: 24
31.57.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:e9:45:66:56:51:7d:c5:9e:a9:52:3d:35:fa:92:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 7 18:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96329bd849150748b5159e7d42a329d026c06d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:2d:2a:68:4c:6e:8a:0f:a0:c8:9b:49:43:
31:73:3f:eb:70:e8:b7:08:e2:44:bd:1c:29:70:2c:
9b:6f:c9:9c:64:5e:6e:07:93:33:da:ed:55:ac:5a:
f8:74:b0:02:24:22:d1:75:62:9e:ca:03:fe:cf:5b:
26:b9:ce:c8:a1:1d:10:55:80:c5:bb:bc:93:07:c9:
d7:eb:a5:b5:e0:45:5a:a0:53:d6:11:f8:5d:5e:e9:
1b:76:d5:f6:f0:95:c0:bf:7b:d4:cc:de:0b:74:90:
70:0c:9e:87:bc:27:ce:38:eb:2a:6a:43:9b:84:04:
b8:28:17:28:3a:56:e6:70:95:fa:94:6c:e4:a8:0a:
db:83:1e:67:84:99:3b:4a:53:45:e5:22:63:fd:e4:
3d:f2:40:0a:76:d8:09:cc:6b:c0:bf:fb:16:61:da:
6f:6b:08:f6:40:1e:07:b8:5a:5b:06:ad:ce:08:e2:
3c:4c:fb:65:4e:57:06:46:51:5a:12:fc:52:fa:a6:
51:de:c8:b7:eb:26:8b:ad:04:65:9c:d6:ac:27:b9:
ee:32:d9:f6:25:1d:4b:b8:4d:8d:c1:a5:1c:f6:8e:
1f:3d:e8:b3:fb:19:1f:d5:39:0b:35:43:52:96:e9:
8d:ae:16:ad:d5:07:c8:1c:20:89:41:ef:cc:20:dd:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:32:9B:D8:49:15:07:48:B5:15:9E:7D:42:A3:29:D0:26:C0:6D:4B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ljKb2EkVB0i1FZ59QqMp0CbAbUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.241.0/24
31.57.244.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ed:22:b3:60:95:3c:6f:41:1b:42:ca:76:34:af:cf:b3:25:
5b:a3:76:e0:25:0b:e9:bd:59:5f:ca:70:27:26:d3:cd:e6:bc:
98:fe:cf:74:c3:cb:ec:53:21:d8:29:b4:9b:81:8c:f8:11:94:
5f:73:7a:8d:0c:c6:3b:b0:e4:56:f4:60:14:86:dc:60:7e:05:
32:06:62:fe:a6:6d:47:e3:af:eb:96:a3:96:57:5c:ae:bb:86:
11:77:8f:ca:7c:1b:fc:9b:73:66:88:4f:de:af:1d:b0:06:34:
c4:b7:3d:f8:de:f1:59:e6:fa:cd:46:a8:c8:9c:b2:26:05:5d:
41:32:e1:ab:01:df:f4:06:09:57:7c:1e:63:58:ad:87:88:cc:
39:e3:12:70:d5:e9:34:79:8c:a1:7d:85:e5:e6:3d:72:f7:b1:
16:88:d4:b6:31:c1:f2:e7:28:31:f8:dc:d5:0e:e0:57:7b:e4:
7a:a3:9f:c9:eb:8f:35:71:e0:37:0f:81:75:95:32:7e:e3:90:
6d:9f:e3:07:62:d3:4b:cf:8f:b6:fe:6e:3c:56:a8:32:78:1d:
c3:b1:11:b9:f5:e5:05:a1:33:31:db:2a:ed:d1:0d:d5:69:c9:
f5:b3:ed:49:5c:f7:b8:3f:2e:a0:3f:35:c0:de:41:c0:88:ba:
b4:ec:f8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:28 2026 by rpki-client