Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pWFU0JFE297EnG_7d2JN1BP8Q08.roa
File: pWFU0JFE297EnG_7d2JN1BP8Q08.roa (raw, json)
Hash identifier: 3JWBgQ7zKNT4vGK1QGYNnA5kBJ4VsgXPR7p2kHFde1s=
Subject key identifier: A5:61:54:D0:91:44:DB:DE:C4:9C:6F:FB:77:62:4D:D4:13:FC:43:4F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E34895CAA04D9C8954A812449FA0F24E0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pWFU0JFE297EnG_7d2JN1BP8Q08.roa
Signing time: Sun 17 May 2026 06:04:37 +0000
ROA not before: Sun 17 May 2026 06:04:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51031
IP address blocks: 31.56.66.0/24 maxlen: 24
31.57.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:34:89:5c:aa:04:d9:c8:95:4a:81:24:49:fa:0f:24:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 17 06:04:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a56154d09144dbdec49c6ffb77624dd413fc434f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:ae:6d:52:16:a3:2c:e4:4f:a1:68:06:ea:
1b:75:ca:77:5b:7b:ee:3c:83:d1:3e:31:cc:13:0b:
dd:37:1f:51:ea:df:85:87:b3:84:95:53:55:8f:b2:
91:8f:ce:6a:ce:fb:7a:4a:e0:a4:7c:e5:12:7b:28:
11:90:36:90:de:5e:c7:18:2e:6d:98:57:44:24:38:
b3:71:76:92:f9:aa:0e:81:17:f4:c6:3f:a6:ba:65:
f6:37:fd:e3:bb:23:0e:fc:d9:08:3a:9c:8b:1c:39:
ab:66:aa:ac:cd:cd:91:b6:aa:c7:68:ca:12:4d:09:
05:65:2a:37:fe:0b:32:45:84:b4:5a:a1:26:cb:dc:
7b:76:cb:3d:41:c5:27:78:1d:12:45:93:06:75:0f:
e9:cc:cc:a6:09:76:3f:01:d7:c0:7f:c1:2d:99:2d:
9a:ae:a8:06:a6:f5:13:32:48:d8:10:f4:5f:b4:d6:
5c:6f:80:bd:5a:d1:13:7b:ce:70:6b:c0:cd:08:2c:
e4:1c:34:1d:e9:63:61:c4:f0:90:19:70:66:c4:85:
51:39:94:3a:ed:39:88:8c:d6:88:f8:92:bf:60:a5:
3c:7e:1d:96:af:a4:81:88:04:18:f8:f9:fa:0e:99:
54:64:db:d7:7f:0e:ad:cf:5b:ff:a5:d8:fb:39:ee:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:61:54:D0:91:44:DB:DE:C4:9C:6F:FB:77:62:4D:D4:13:FC:43:4F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pWFU0JFE297EnG_7d2JN1BP8Q08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.66.0/24
31.57.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:70:b5:9b:5c:b1:6d:09:48:33:33:75:f1:11:5b:54:5a:ee:
ec:82:29:a2:9e:cc:93:11:42:85:46:12:e6:95:03:c2:d8:03:
12:8f:52:5b:30:cf:42:07:9e:f6:bf:d3:df:b7:33:63:a8:76:
d3:96:aa:0b:c8:c2:78:d3:12:98:44:23:e4:bb:f8:a2:c4:77:
c2:82:c6:8e:f1:3e:72:db:81:54:a2:53:66:83:c2:8e:d2:60:
0f:84:b3:c0:7a:c7:5e:9b:32:9b:ed:8e:ff:f4:87:45:e2:04:
8e:32:39:7b:42:d6:c9:94:29:05:e7:f7:94:fd:31:e4:1a:78:
4e:9b:a8:a7:27:17:07:0a:7a:cc:7b:19:c5:64:cd:9e:26:60:
75:53:10:e0:5b:65:ef:64:08:d7:78:76:a1:a1:56:6d:fa:18:
fd:88:4e:a3:e3:3b:6d:da:01:bd:79:63:4e:2d:1b:67:8e:bc:
c6:5c:b0:67:44:77:79:b7:2a:07:9f:46:07:c3:86:ee:04:52:
31:d1:50:ea:1c:c5:ed:a3:70:d2:66:f8:26:65:64:73:ff:0e:
f3:fa:28:fc:79:50:c1:b8:42:59:f6:5f:44:56:17:1f:f6:e7:
4d:ba:8a:84:0b:f9:35:15:f7:c0:c5:ed:88:ca:da:32:bc:42:
71:bd:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:55:17 2026 by rpki-client