Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ufP20SPnMVqC5eKUIESE3n847-k.roa
File: ufP20SPnMVqC5eKUIESE3n847-k.roa (raw, json)
Hash identifier: vk3B86ht7x+YTJSLcfHBT8dYzuPB+Elx7fWHHFWk26E=
Subject key identifier: B9:F3:F6:D1:23:E7:31:5A:82:E5:E2:94:20:44:84:DE:7F:38:EF:E9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F27232F7A385BDE25A8AA853B6EBAA48E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ufP20SPnMVqC5eKUIESE3n847-k.roa
Signing time: Fri 03 Jul 2026 08:40:45 +0000
ROA not before: Fri 03 Jul 2026 08:40:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209854
IP address blocks: 31.57.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:23:2f:7a:38:5b:de:25:a8:aa:85:3b:6e:ba:a4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 3 08:40:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9f3f6d123e7315a82e5e294204484de7f38efe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:b0:9d:b6:d7:20:a8:e0:26:cb:84:7e:68:
4b:a8:d5:4a:65:3f:dd:7a:d4:c0:fb:8b:f4:96:15:
9f:2b:7f:34:90:29:66:3a:45:d6:c5:57:3a:1d:a3:
1e:bf:69:ab:9c:ee:ba:fd:fc:1e:7a:6c:c2:fa:aa:
95:29:4b:93:69:10:da:50:05:fc:a7:a4:1d:c2:c7:
9d:7f:66:b7:e9:d7:1b:28:cd:20:99:c2:1b:41:10:
70:50:00:20:73:70:51:f1:6e:56:27:20:f1:29:6b:
9d:07:83:d2:e1:e9:97:87:c7:5f:4c:c2:9e:29:92:
61:9e:ce:5b:b6:08:13:e9:17:80:f1:ab:51:96:92:
a5:45:ad:be:65:92:82:6e:bd:ea:1b:e7:e3:ea:92:
b0:4c:49:b0:64:f6:3b:ba:93:de:9d:5b:d6:66:93:
ac:09:ff:ab:7b:93:cf:9e:ff:09:56:14:32:66:75:
65:fd:11:63:62:bc:6d:3e:81:bb:72:1e:97:af:e2:
0e:19:21:16:64:72:44:b2:38:8b:dd:50:72:c5:fb:
e1:c9:4e:de:36:93:bb:41:9a:1e:23:a7:09:09:8e:
f9:c7:4d:a9:f5:bd:c0:e1:43:58:77:de:c9:92:1e:
21:44:b0:d9:a2:79:ba:40:0e:34:3a:78:d4:fe:f4:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F3:F6:D1:23:E7:31:5A:82:E5:E2:94:20:44:84:DE:7F:38:EF:E9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ufP20SPnMVqC5eKUIESE3n847-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.4.0/24
Signature Algorithm: sha256WithRSAEncryption
73:0b:50:37:d8:b0:dc:11:f8:07:e9:13:3e:94:89:2d:39:c4:
00:1d:df:43:88:b4:86:0d:50:be:41:08:14:51:1f:e6:45:34:
2d:18:13:42:b6:fe:4e:f1:d1:95:da:27:33:83:77:0e:99:df:
f4:77:db:d0:7e:eb:1d:d3:6f:7a:55:72:0d:f2:f2:29:d0:aa:
a4:6e:47:4b:eb:ab:2d:b0:94:d4:47:9d:b6:9a:7b:b7:6d:04:
a0:77:31:fb:5e:9d:4f:c5:73:b2:31:a2:26:c1:74:09:1c:e7:
f3:26:98:76:c1:1e:49:aa:e4:15:d3:95:cc:52:63:83:be:cf:
10:77:b2:20:df:b9:76:d0:69:9a:04:57:15:a5:5d:2f:00:82:
f4:08:70:a3:ec:fb:05:b9:5a:9f:c4:74:44:1c:6f:41:27:a5:
22:98:13:bf:77:28:fc:2a:49:99:24:71:87:2e:0b:ca:73:9f:
8c:96:55:40:bc:15:e2:6f:5b:cd:cd:77:a6:42:e3:3f:ce:68:
cb:65:0f:3d:3f:e9:0f:ec:fa:d2:2d:23:c8:e2:cc:c1:1d:a6:
de:2f:29:92:af:0a:64:52:2a:46:1b:e4:fd:4d:db:42:1f:7e:
83:88:ed:63:55:8b:c2:27:da:ab:24:87:82:58:00:68:6f:cb:
05:ce:0d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:33 2026 by rpki-client