Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/phND0KMEjIPaHX2dU0HugD_6tLM.roa
File: phND0KMEjIPaHX2dU0HugD_6tLM.roa (raw, json)
Hash identifier: nKdI1MVCHXL4C3CdVSQELmSO0gxMMLiPAB/uEBMGcYc=
Subject key identifier: A6:13:43:D0:A3:04:8C:83:DA:1D:7D:9D:53:41:EE:80:3F:FA:B4:B3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A153F6184F53C7D64B03165795467A9B51
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/phND0KMEjIPaHX2dU0HugD_6tLM.roa
Signing time: Mon 19 Oct 2026 11:39:59 +0000
ROA not before: Mon 19 Oct 2026 11:39:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218986
IP address blocks: 31.56.52.0/23 maxlen: 24
31.56.52.0/24 maxlen: 24
31.56.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:f6:18:4f:53:c7:d6:4b:03:16:57:95:46:7a:9b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 19 11:39:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a61343d0a3048c83da1d7d9d5341ee803ffab4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:48:ce:57:ad:7d:b3:6b:b3:c5:4f:51:17:
91:98:16:4d:40:ad:3d:c3:e2:66:86:7f:ca:13:52:
d9:de:4b:24:c8:b4:de:c0:11:cd:4c:b9:6e:0f:84:
ab:7b:b8:d1:d5:4b:53:0b:24:94:d8:28:fb:1e:45:
81:b8:c2:29:7d:32:df:9d:1c:10:99:44:62:0d:a7:
0a:0f:94:62:d9:87:7a:48:33:a7:a4:7f:51:05:8d:
e1:03:dd:ed:ca:b3:52:e7:5e:f3:0a:e5:07:fd:73:
17:cc:63:fc:79:87:74:81:b8:4a:ff:8b:51:da:7f:
ae:e7:5a:3f:97:89:cc:37:d0:2a:8c:27:b8:1d:68:
d5:0c:d3:a1:f4:a5:72:ed:58:ac:e7:b3:a1:d4:3d:
4c:de:60:60:c4:72:7c:c8:02:f3:f7:ab:38:a0:00:
1d:32:47:91:34:24:cb:f8:49:eb:d7:48:91:5c:c9:
a7:f1:5d:e5:02:98:6e:ee:29:56:57:78:4f:59:48:
c2:a1:c5:fd:75:5a:a4:bf:42:b7:b9:ad:cf:f7:77:
da:60:2a:df:05:0a:3c:07:28:69:f6:03:00:ae:c3:
24:79:16:6d:97:b1:7c:e2:62:43:9a:df:f9:a0:77:
fb:aa:fb:f7:bb:08:75:8d:76:5b:2a:43:d8:1e:14:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:13:43:D0:A3:04:8C:83:DA:1D:7D:9D:53:41:EE:80:3F:FA:B4:B3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/phND0KMEjIPaHX2dU0HugD_6tLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/23
Signature Algorithm: sha256WithRSAEncryption
62:86:6f:15:70:e2:9c:7c:69:42:fd:66:f5:0b:a8:6b:d9:2a:
e2:60:ca:46:d2:01:08:a6:ed:ec:85:c3:5a:87:09:0d:7f:bf:
1f:c5:75:c8:bf:86:fc:ee:a7:36:e8:8a:c2:48:df:6d:4c:38:
29:86:20:63:cf:f6:db:43:98:b9:25:46:d9:f7:d6:59:3e:b5:
97:d1:ce:3d:1c:8f:60:ca:2e:09:10:32:6b:2a:44:89:5e:ca:
79:f0:3c:37:95:e8:67:5f:7e:7a:62:5c:22:e9:54:66:2c:1f:
c6:57:9c:27:91:5b:51:bd:d7:9f:21:b8:eb:fa:46:74:cf:0d:
bc:9a:07:b0:f5:45:c6:de:cd:77:a0:4f:b0:6e:94:21:9b:49:
bb:6a:60:66:66:4f:b9:9f:ca:8e:95:d0:8f:1b:b6:e1:43:57:
ff:e9:bd:b4:08:b3:55:69:ab:4b:10:08:a8:64:11:7d:27:47:
15:a5:11:7d:3d:4a:c7:c2:95:b4:3c:75:fa:af:24:8b:5e:53:
5c:ec:ae:10:eb:aa:cf:95:cd:e8:c9:91:b7:97:66:aa:43:01:
70:98:b4:2e:1f:83:fc:bf:6f:37:92:ee:b9:bd:c0:fe:74:36:
1e:24:32:e9:c0:37:a8:c0:49:3c:46:3d:24:80:ee:a9:97:2f:
9d:b7:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:49:59 2026 by rpki-client