Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nxzHm1s0tKhRCsH-epXea3EtQrA.roa
File: nxzHm1s0tKhRCsH-epXea3EtQrA.roa (raw, json)
Hash identifier: wp9T1QWmUj0wTrbc55s0dN14UFc2gelbu5v8QxapWkY=
Subject key identifier: 9F:1C:C7:9B:5B:34:B4:A8:51:0A:C1:FE:7A:95:DE:6B:71:2D:42:B0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E84FC0006A78DA297D19EEB81E446965F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nxzHm1s0tKhRCsH-epXea3EtQrA.roa
Signing time: Mon 01 Jun 2026 20:59:28 +0000
ROA not before: Mon 01 Jun 2026 20:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209373
IP address blocks: 31.56.209.0/24 maxlen: 24
217.60.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:fc:00:06:a7:8d:a2:97:d1:9e:eb:81:e4:46:96:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 1 20:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f1cc79b5b34b4a8510ac1fe7a95de6b712d42b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:05:a3:4f:8e:5c:1d:c3:0f:34:ed:c3:56:
39:af:33:bd:0e:7b:ac:b0:48:78:7c:16:b3:bc:b5:
00:6c:df:3e:be:a6:e2:b6:c2:50:1e:1d:36:2c:ac:
b8:cb:7e:33:40:84:71:26:7b:b5:42:3d:6d:f1:73:
d8:a4:08:ae:8a:0e:da:8b:64:23:73:9a:45:71:4e:
18:01:a7:c2:21:bf:c6:c2:47:79:06:7b:03:7a:90:
5f:12:21:22:f7:44:7e:4f:80:74:ee:48:52:b0:83:
d4:2f:b7:5b:fd:e7:b3:64:9c:8f:dd:10:c6:53:e4:
df:1e:68:26:9f:d4:09:65:0f:37:b0:3a:ab:88:6e:
39:71:c4:f4:16:19:2a:56:42:78:b8:52:c0:c8:d3:
d9:38:a3:95:e8:d6:f9:19:a2:3d:53:73:f3:86:a5:
8c:38:95:59:d3:cf:eb:81:f5:5a:07:e9:c0:e0:1a:
88:d8:e9:a6:ba:11:82:a7:3c:77:98:66:95:5b:c6:
5a:7f:b4:82:aa:aa:c6:01:6b:9a:b3:fc:04:f8:01:
a4:41:44:f9:af:3b:11:14:8e:1c:ab:75:5d:97:f4:
42:49:eb:ac:54:0b:05:0f:44:c9:58:c6:67:83:27:
e2:4a:00:cc:5b:e7:4c:f6:60:bb:be:a6:9a:27:fa:
e1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1C:C7:9B:5B:34:B4:A8:51:0A:C1:FE:7A:95:DE:6B:71:2D:42:B0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nxzHm1s0tKhRCsH-epXea3EtQrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.209.0/24
217.60.195.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fe:6b:62:87:9c:ef:6d:3e:46:1f:12:04:7b:cd:2e:37:bc:
1c:4b:75:93:e5:2b:9d:71:e5:31:4b:d5:17:cc:fd:70:97:b1:
23:52:c7:67:78:e0:a5:20:ed:ba:0d:0e:f1:c7:3e:b5:a1:29:
14:f9:6e:6c:17:80:a6:c9:d3:2f:81:91:f8:22:2c:b8:19:a5:
bc:91:26:fc:7d:bb:01:3f:47:cd:41:34:6b:14:8f:f2:3c:1f:
7a:b9:13:a7:62:46:67:1a:6d:59:d1:f7:97:a3:5a:71:8e:83:
36:3c:a2:53:e6:18:03:3c:d0:05:3b:07:ed:43:c2:33:86:4d:
ee:e5:9e:f5:b9:98:bb:d9:54:05:05:9f:0a:7a:63:a4:01:7d:
ef:c5:7d:31:1f:f5:71:47:81:3e:e6:6a:30:5a:2b:ba:8d:03:
04:c5:7a:75:99:aa:8e:cd:ce:6d:25:8e:c7:83:f0:e3:24:d9:
58:95:47:21:cf:17:31:20:09:ef:41:e7:c4:4e:b0:d5:1d:a3:
35:a4:95:49:bb:21:d4:e6:40:0d:79:f1:c6:30:c3:4a:2f:9e:
6b:b4:3b:a1:e1:11:69:09:ac:12:f8:4c:4f:ca:70:e1:51:98:
ee:a3:10:2e:e3:f7:1f:5c:3a:ac:4c:c6:65:a3:2c:07:69:35:
f7:2a:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 17:04:25 2026 by rpki-client