Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sKZ1gPcjET2j--1PJGmL1_FlD9g.roa
File: sKZ1gPcjET2j--1PJGmL1_FlD9g.roa (raw, json)
Hash identifier: WhPHsfkNpokPXJE94+79toSqV1lAAETUb2OCRqRbCq8=
Subject key identifier: B0:A6:75:80:F7:23:11:3D:A3:FB:ED:4F:24:69:8B:D7:F1:65:0F:D8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0142991B10580BEADCDA051F4D8022367
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sKZ1gPcjET2j--1PJGmL1_FlD9g.roa
Signing time: Tue 18 Aug 2026 09:17:43 +0000
ROA not before: Tue 18 Aug 2026 09:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31549
IP address blocks: 31.57.200.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 17:38:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:29:91:b1:05:80:be:ad:cd:a0:51:f4:d8:02:23:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 18 09:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0a67580f723113da3fbed4f24698bd7f1650fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:19:e9:e1:b9:2a:7f:61:c3:8e:36:c7:47:
19:73:7e:89:4f:be:b4:84:27:84:5e:f1:2b:4e:bc:
3b:eb:89:a8:8d:f0:b5:e5:14:23:53:be:c4:17:4b:
4e:cf:f0:01:d9:f6:52:c6:24:9d:38:8b:51:0f:27:
41:ac:10:d4:34:50:3b:d8:ae:cc:c1:42:17:2b:20:
1f:93:87:b3:cf:84:17:ca:4f:6d:1d:51:34:e7:5f:
43:f9:56:a3:4e:e7:ab:cd:05:42:da:ba:bb:66:f7:
33:7d:ac:fe:a7:94:cd:c9:64:75:75:7d:45:8b:80:
83:1b:7d:c7:19:42:69:b3:95:da:92:5b:7a:4b:47:
48:c4:52:a5:7f:5a:12:b8:75:38:5a:a7:0a:3b:9d:
ca:9e:a7:80:96:52:d4:31:63:f5:01:b8:50:7d:90:
78:f1:29:61:75:bf:35:e2:9e:7a:32:f1:86:64:a5:
f1:58:93:b9:8a:3d:9b:15:f3:a1:db:47:9f:84:8c:
8c:a8:79:fd:8b:e8:89:47:9f:26:82:1b:48:a0:ab:
a7:99:bc:9c:ab:6e:b1:c1:a7:4d:e9:ac:45:36:20:
84:c1:53:03:ae:db:ac:33:43:4d:4b:04:42:f6:9b:
95:86:65:e0:f3:23:89:27:17:e5:9d:75:48:7f:59:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A6:75:80:F7:23:11:3D:A3:FB:ED:4F:24:69:8B:D7:F1:65:0F:D8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sKZ1gPcjET2j--1PJGmL1_FlD9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.200.0/24
31.58.249.0/24
31.58.252.0/22
Signature Algorithm: sha256WithRSAEncryption
41:57:cb:5d:1d:c9:cf:25:bb:b9:b0:1e:ed:8b:5a:15:7d:0d:
cb:7f:6e:ad:09:64:f3:e7:e6:b0:20:b7:71:e6:fa:24:af:05:
05:2f:2a:02:24:08:c4:49:41:72:02:a0:72:30:e5:09:e4:8a:
70:61:7a:ab:fa:cc:66:52:5d:04:98:42:de:03:85:dc:04:71:
f5:8a:53:38:ec:cb:08:d2:47:96:4f:0d:fd:d5:37:53:d2:e7:
33:46:09:9f:28:ea:d9:f5:4d:b2:e9:10:66:79:19:ba:38:56:
96:c5:4c:b3:4e:25:b5:cd:a3:dc:d2:ae:72:d3:62:7e:fe:d8:
b1:50:81:9c:03:5e:2b:e5:b1:3a:bc:cf:6b:30:1d:26:2c:ca:
65:c3:2f:43:bc:69:29:7b:ca:79:ad:e2:b4:60:39:10:e9:6c:
d7:63:b3:9d:79:ae:76:12:4a:3b:ef:87:b4:2f:af:4c:6f:97:
5c:0c:e7:fd:99:a1:76:2c:17:10:63:d6:b3:d3:b4:fb:3e:1c:
0b:dd:49:58:d2:68:4e:32:6b:1a:1c:1b:e7:0f:0c:4f:5e:e4:
1a:7a:fe:81:02:aa:ec:c5:3a:a7:b3:71:cc:0f:62:93:a2:39:
61:64:45:cc:47:2f:65:29:8e:30:33:c8:55:00:a3:a7:b0:ce:
b2:20:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 01:19:18 2026 by rpki-client