Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oeoZhPajUlQYozip4PXjA0l4Y_M.roa
File: oeoZhPajUlQYozip4PXjA0l4Y_M.roa (raw, json)
Hash identifier: MLJ18PVLmS/LrM5RIQAg/BG6TeRD4K63UqGqRLNJfbQ=
Subject key identifier: A1:EA:19:84:F6:A3:52:54:18:A3:38:A9:E0:F5:E3:03:49:78:63:F3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E59F1C7DD8996174AD9DAB4B547AFE331
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oeoZhPajUlQYozip4PXjA0l4Y_M.roa
Signing time: Sun 24 May 2026 12:24:38 +0000
ROA not before: Sun 24 May 2026 12:24:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204116
IP address blocks: 31.56.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:59:f1:c7:dd:89:96:17:4a:d9:da:b4:b5:47:af:e3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 24 12:24:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1ea1984f6a3525418a338a9e0f5e303497863f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:09:9a:2d:70:0b:08:f7:b8:c6:37:f6:9f:
de:58:b5:18:00:3a:15:6a:f0:86:45:5f:92:27:f8:
f4:df:9f:85:8c:52:fc:a4:b0:47:1d:18:35:c6:4c:
9b:99:53:f9:9e:77:88:02:4a:29:41:5c:d6:ab:05:
93:5d:11:08:b2:70:11:f3:b5:6d:d8:4a:f8:9f:c2:
46:07:29:7b:a8:49:d2:a1:69:e9:0d:9c:c3:32:6d:
4e:37:a8:6f:54:89:37:a7:19:e0:34:f6:a4:33:ff:
43:49:93:cc:63:5e:e9:7b:7c:24:9b:88:26:92:7a:
86:66:8d:ee:15:9e:fa:7c:ea:3e:b3:15:2d:c0:55:
60:26:18:10:7d:49:3b:8a:96:70:d7:3d:68:4d:63:
0b:9f:4a:a4:6c:75:6f:a4:f3:9e:f2:13:75:09:a2:
a6:c9:77:88:12:06:e2:59:b2:c1:0e:a8:9c:93:39:
e5:a7:cb:f4:ac:79:ba:bb:96:26:67:da:87:14:1a:
8e:60:92:d3:aa:24:0b:62:7d:5f:69:32:44:0e:41:
00:28:e5:31:e2:14:12:67:07:09:52:bf:ad:cb:8e:
9f:70:f2:25:d8:cb:a2:5e:e8:e8:18:3d:0b:80:f6:
3b:17:a2:78:15:14:6b:23:66:9b:52:77:2e:5f:3c:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EA:19:84:F6:A3:52:54:18:A3:38:A9:E0:F5:E3:03:49:78:63:F3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oeoZhPajUlQYozip4PXjA0l4Y_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.61.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b0:e9:62:60:42:e2:d8:1f:ae:7b:c2:a5:bb:13:88:07:71:
25:a6:48:f6:f0:25:4b:80:6c:43:ab:f9:47:dc:24:35:46:39:
7f:98:0a:41:ff:fb:ad:ec:65:7a:3b:7d:0c:a9:ab:16:78:be:
8f:c0:68:cc:e5:3c:bd:66:15:3b:75:f3:72:ae:79:d7:a1:3a:
fd:cc:41:11:f8:3a:d7:a0:3e:ce:dd:e9:42:9a:52:eb:8f:d4:
cb:4c:40:95:d0:e9:e9:2b:78:86:2d:1c:eb:ff:3d:b7:cf:55:
a0:0a:50:c1:3d:13:14:0c:ea:d5:ab:4f:65:78:b3:42:42:15:
cd:75:1a:57:2c:23:93:91:9c:52:35:a2:89:a2:6d:79:ae:d0:
e5:d9:f9:57:b0:f1:78:d7:f5:81:74:0e:3c:5e:54:74:f9:3c:
7b:e7:dd:07:49:aa:bc:1b:47:db:a6:40:1f:99:b3:f3:43:0f:
e0:af:38:ab:77:22:bc:a0:bd:55:5b:dc:bc:7e:95:33:88:50:
1e:99:9c:cf:f4:9c:3d:d1:c3:d6:7d:b4:b2:46:c4:92:b0:1b:
e2:3b:69:08:ba:7f:6e:90:fd:c4:89:eb:77:57:51:0d:e5:83:
07:a6:c8:e3:15:57:a4:50:02:e0:d9:cc:83:a6:8c:a9:35:b1:
04:b5:fb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:56:17 2026 by rpki-client