Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mXkfKwOVLxBThTOszBpttG-wLqw.roa
File: mXkfKwOVLxBThTOszBpttG-wLqw.roa (raw, json)
Hash identifier: HHav6ZaiZ9iqpca7xLOj8eWSHFKbbnKvt0j63Lupxq0=
Subject key identifier: 99:79:1F:2B:03:95:2F:10:53:85:33:AC:CC:1A:6D:B4:6F:B0:2E:AC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FFB8F708D44F8647859187DCF5AA8C6CF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mXkfKwOVLxBThTOszBpttG-wLqw.roa
Signing time: Thu 13 Aug 2026 14:38:29 +0000
ROA not before: Thu 13 Aug 2026 14:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135636
IP address blocks: 31.56.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:8f:70:8d:44:f8:64:78:59:18:7d:cf:5a:a8:c6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 13 14:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99791f2b03952f10538533accc1a6db46fb02eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:f9:8f:cc:7f:e6:df:f7:12:8f:81:a7:88:
fa:8a:c9:bd:75:c2:0a:97:43:e7:3f:6d:d1:f8:0f:
01:b2:b2:d0:65:ee:4e:11:84:43:9e:b3:91:44:d2:
f1:82:3c:4e:10:30:76:18:76:83:b5:76:25:3f:6d:
06:7d:bc:bb:16:7b:6d:f0:1e:d6:f4:9d:51:91:ab:
77:e3:06:b4:b8:0d:5d:3f:d3:57:3c:a9:bd:ab:9c:
b0:4b:0e:c6:68:66:c7:0f:bd:4e:bd:de:57:9e:b5:
08:99:db:12:a5:f1:5f:af:00:7f:98:5b:81:2c:4a:
d4:c5:e8:dd:79:55:28:f0:f1:a7:83:aa:5a:4c:cd:
8b:9b:38:11:a3:a3:f6:d0:aa:c8:f5:c3:63:bb:b2:
5c:aa:45:20:d1:db:aa:a1:c9:8f:7d:da:d1:b2:cf:
d3:6f:67:49:e7:37:bf:30:47:01:88:f9:96:10:18:
9d:97:21:63:f5:0f:95:c6:4a:84:76:60:b0:03:06:
ca:fd:27:da:77:ee:06:fe:57:7f:14:e8:e4:fc:7b:
9d:6f:b3:14:91:e7:77:a0:21:4d:39:19:6b:ae:f0:
f0:55:dd:f1:8b:18:a1:ae:5e:58:af:89:47:3a:09:
cf:64:86:7e:af:ef:94:f0:94:b4:78:ed:62:f9:d4:
73:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:79:1F:2B:03:95:2F:10:53:85:33:AC:CC:1A:6D:B4:6F:B0:2E:AC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mXkfKwOVLxBThTOszBpttG-wLqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.148.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a2:33:87:33:32:39:e7:ef:be:3e:e2:99:04:68:a5:e6:2a:
d7:44:e5:d8:7e:28:b9:02:c8:3a:08:c1:09:cc:ab:07:ce:76:
70:6e:7e:d6:4b:cb:c5:7d:d5:94:20:fb:2a:f2:84:14:d3:36:
7e:c5:e1:ef:cb:4a:35:91:a8:f5:b9:e5:c7:8f:08:34:f7:cc:
76:6c:4a:16:88:35:f1:6e:e7:56:f7:95:96:02:27:14:24:0e:
a4:79:47:44:31:ba:4c:b2:49:ca:e4:25:1a:96:71:50:72:dd:
91:4b:71:e5:ad:ec:4b:fc:4e:96:cc:5b:7e:77:e8:49:85:ad:
61:0b:e4:f7:c1:8f:80:40:bd:07:9c:91:e0:06:dd:12:ca:c5:
34:ca:fa:41:7c:b7:60:02:ef:9e:3f:c1:97:4d:b7:ae:01:d6:
25:93:bc:eb:26:a1:f0:07:d8:3d:c8:c9:8a:c3:b2:99:e0:9f:
66:47:47:33:2e:dd:34:e4:d6:bf:c4:9f:cb:81:31:e6:0f:ca:
1d:a5:90:51:aa:fc:ec:cb:f3:d3:94:90:ca:55:66:b2:52:ce:
2b:45:d2:e9:20:08:83:c6:18:98:65:a9:a4:47:98:58:87:76:
b5:12:22:4c:36:4e:06:f7:87:4d:5e:ff:81:51:c0:0a:d6:93:
a0:ce:d4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:23 2026 by rpki-client