Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uu6Tzzwk-0wug6UNeQeE-vBDFZc.roa
File: uu6Tzzwk-0wug6UNeQeE-vBDFZc.roa (raw, json)
Hash identifier: h7MLXlIIfdaOcxTwDkpvzQPFcPFYBXpqFTqPj/Mg2/8=
Subject key identifier: BA:EE:93:CF:3C:24:FB:4C:2E:83:A5:0D:79:07:84:FA:F0:43:15:97
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F3DE94614BCC5B92AEDFBE537E5AE7D0F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uu6Tzzwk-0wug6UNeQeE-vBDFZc.roa
Signing time: Tue 07 Jul 2026 18:48:45 +0000
ROA not before: Tue 07 Jul 2026 18:48:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 31.56.35.0/24 maxlen: 24
31.58.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:e9:46:14:bc:c5:b9:2a:ed:fb:e5:37:e5:ae:7d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 7 18:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=baee93cf3c24fb4c2e83a50d790784faf0431597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:1c:43:25:33:68:36:ff:91:e4:d3:7a:2d:
56:76:40:c1:81:12:30:66:b0:5f:1f:99:27:49:43:
2b:eb:6d:02:f6:c0:74:30:2e:d0:0b:ba:47:af:c2:
b5:83:e6:e3:05:ba:ff:ed:69:a4:53:f1:0b:67:3f:
c2:59:f1:41:73:d6:2e:f3:a0:70:75:e0:c7:66:ee:
c2:9b:b8:65:b2:ca:cf:d6:6a:e1:45:b6:53:86:74:
4f:28:2d:27:71:64:34:a6:e7:ad:ff:c3:a1:40:f1:
48:55:4a:3d:23:c2:ba:99:9d:9f:52:fd:96:43:15:
de:27:dd:34:05:ba:77:ef:84:0a:b6:6c:7a:e7:46:
4c:2d:61:8d:3f:68:a5:df:45:b5:83:f2:a5:be:b8:
be:5d:98:cb:3c:08:11:07:18:f0:7a:5b:3c:74:a2:
78:ca:8f:ec:5a:6b:78:bb:dd:17:f6:97:fe:2c:60:
f2:cf:1b:f2:f8:63:2f:dc:4d:15:b3:0f:7a:66:63:
65:59:29:0a:c6:4a:49:ec:3f:d2:29:6f:b7:1c:96:
d1:47:7a:a7:09:27:96:e4:68:2a:95:ba:7e:93:6a:
5d:f8:3a:98:e2:c2:60:bb:05:d9:60:df:33:9d:dc:
f4:89:ab:0e:b6:c6:43:43:c1:27:64:f8:a6:78:fc:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EE:93:CF:3C:24:FB:4C:2E:83:A5:0D:79:07:84:FA:F0:43:15:97
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uu6Tzzwk-0wug6UNeQeE-vBDFZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.35.0/24
31.58.37.0/24
Signature Algorithm: sha256WithRSAEncryption
87:fc:d1:a4:33:a4:18:08:a0:a8:d5:5b:1c:8d:e9:15:00:48:
a5:83:11:2c:55:2b:32:11:0d:b4:1c:a3:61:f0:6c:6d:69:12:
fe:60:d5:2b:f5:c1:38:be:4d:30:cd:44:b2:95:1b:76:c8:59:
73:c2:f9:3a:16:10:ce:03:32:3d:ae:11:04:fb:d1:a5:06:29:
de:4f:01:83:35:17:c1:a9:ff:2e:db:85:04:49:a7:7c:07:bb:
60:81:69:ee:7c:e1:05:45:a1:50:39:1a:c8:34:f4:c8:e2:43:
4d:ab:1f:d4:f2:e5:b8:44:98:e1:60:d5:65:67:e0:45:3a:45:
b4:72:5d:0b:80:90:b8:8b:3a:e2:bc:ed:52:7c:7a:df:37:6b:
1e:08:1d:77:9c:73:69:2a:99:49:29:49:cd:9a:f1:7b:79:db:
a7:76:88:72:f8:96:64:f1:f0:ef:cf:c3:3e:95:42:e1:7f:22:
a7:bd:77:27:f8:11:8f:98:24:d8:87:97:c9:79:bd:57:4d:fe:
aa:f3:2c:28:8f:93:36:8d:9a:86:25:3a:60:24:17:b8:86:41:
21:ec:71:18:51:f2:14:c8:54:d6:97:4c:d2:5f:88:9f:9f:9f:
cf:f3:b8:0b:fc:65:12:d0:0f:82:23:95:b0:14:9e:86:c9:86:
32:f9:0c:2a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ896UYUvMW5Ku375Tflrn0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzA3MTg0ODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWVlOTNjZjNjMjRmYjRjMmU4M2E1MGQ3OTA3ODRmYWYwNDMxNTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojMcQyUzaDb/keTTei1WdkDBgRIw
ZrBfH5knSUMr620C9sB0MC7QC7pHr8K1g+bjBbr/7WmkU/ELZz/CWfFBc9Yu86Bw
deDHZu7Cm7hlssrP1mrhRbZThnRPKC0ncWQ0puet/8OhQPFIVUo9I8K6mZ2fUv2W
QxXeJ900Bbp374QKtmx650ZMLWGNP2il30W1g/Klvri+XZjLPAgRBxjwels8dKJ4
yo/sWmt4u90X9pf+LGDyzxvy+GMv3E0Vsw96ZmNlWSkKxkpJ7D/SKW+3HJbRR3qn
CSeW5Ggqlbp+k2pd+DqY4sJguwXZYN8zndz0iasOtsZDQ8EnZPimePzFbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLruk888JPtMLoOlDXkHhPrwQxWXMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdXU2VHp6d2stMHd1ZzZVTmVRZUUtdkJERlpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzgjAwQA
HzolMA0GCSqGSIb3DQEBCwUAA4IBAQCH/NGkM6QYCKCo1VscjekVAEilgxEsVSsy
EQ20HKNh8GxtaRL+YNUr9cE4vk0wzUSylRt2yFlzwvk6FhDOAzI9rhEE+9GlBine
TwGDNRfBqf8u24UESad8B7tggWnufOEFRaFQORrINPTI4kNNqx/U8uW4RJjhYNVl
Z+BFOkW0cl0LgJC4izrivO1SfHrfN2seCB13nHNpKplJKUnNmvF7edundohy+JZk
8fDvz8M+lULhfyKnvXcn+BGPmCTYh5fJeb1XTf6q8ywoj5M2jZqGJTpgJBe4hkEh
7HEYUfIUyFTWl0zSX4ifn5/P87gL/GUS0A+CI5WwFJ6GyYYy+Qwq
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:27 2026 by rpki-client