Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vVZ1YsBQhBe6-Ya8EI6sG-_rJx0.roa
File: vVZ1YsBQhBe6-Ya8EI6sG-_rJx0.roa (raw, json)
Hash identifier: YUmjYc5qh/u+KOamhs2fc0iwU84qtOG1YrqPaazM+t8=
Subject key identifier: BD:56:75:62:C0:50:84:17:BA:F9:86:BC:10:8E:AC:1B:EF:EB:27:1D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FAF7DF77939BEE6428ECE20BB748823D8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vVZ1YsBQhBe6-Ya8EI6sG-_rJx0.roa
Signing time: Wed 29 Jul 2026 20:08:15 +0000
ROA not before: Wed 29 Jul 2026 20:08:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 31.56.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:7d:f7:79:39:be:e6:42:8e:ce:20:bb:74:88:23:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 29 20:08:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd567562c0508417baf986bc108eac1befeb271d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:6d:4b:eb:63:f3:51:92:59:b7:52:45:49:
7f:0c:88:9f:b2:6e:7c:08:34:74:9a:2c:b4:a8:33:
8c:e8:5d:4d:a8:9d:32:f7:c8:8d:6e:a9:84:b1:bc:
64:de:b2:c7:c3:3f:81:ea:54:a3:59:e9:bf:18:c2:
aa:e4:a2:52:c5:14:05:b4:fe:c8:fb:0c:90:af:90:
71:92:29:3c:1d:4b:6c:18:80:e6:cf:b6:b1:cc:2d:
65:2b:3b:57:a8:15:2f:72:0b:9b:ec:8f:e1:90:7a:
fc:41:c7:ca:22:63:ee:98:d1:cf:9a:53:82:ff:b9:
91:49:dc:fd:db:64:1e:f6:87:aa:97:a2:8d:87:53:
38:2d:1b:16:b0:8a:14:b9:1b:3f:11:88:54:28:9e:
dc:91:08:46:8a:26:81:f1:ea:69:7f:84:a8:44:d9:
a0:33:f3:23:68:08:a5:d3:b9:95:88:2a:42:36:ca:
70:77:ea:34:de:9b:78:a2:bc:81:06:a6:83:25:98:
64:a2:0d:30:17:d7:d5:d1:71:78:0b:fc:b0:e5:c5:
07:72:1c:89:f7:55:be:6f:7a:45:7d:ff:1f:07:b3:
6a:8f:82:a2:0f:b7:a7:bf:94:91:59:e5:6d:c2:ed:
38:18:2e:c3:3f:05:98:02:fe:60:25:7f:e9:04:55:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:56:75:62:C0:50:84:17:BA:F9:86:BC:10:8E:AC:1B:EF:EB:27:1D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vVZ1YsBQhBe6-Ya8EI6sG-_rJx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.239.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:27:7f:1d:c5:8a:20:79:fa:5a:52:92:da:ae:d8:12:48:bf:
66:20:75:79:8d:54:8f:fd:c1:8a:6d:3a:8a:80:58:65:fb:bf:
b8:82:6a:f0:18:fd:82:90:53:84:1b:21:09:1b:11:2c:cb:ec:
1d:4e:81:13:6b:b9:a2:f9:c4:f0:4e:be:ed:15:3b:e7:83:8f:
36:83:30:8c:9e:f2:0c:f4:bb:3e:57:b4:52:5b:10:da:18:d6:
e8:a3:ed:18:f1:17:73:a8:06:ab:3c:96:ed:68:c2:86:a0:2d:
ff:bd:8f:af:2c:33:43:f7:67:e6:87:34:59:5a:62:67:42:91:
24:83:ca:40:8e:d9:11:59:c0:c0:b4:d1:08:73:c0:00:69:8a:
6c:cc:3c:09:32:71:e8:e1:3b:e3:df:de:42:7d:3b:24:98:09:
b6:f5:4a:0f:13:5a:8c:e0:44:4e:1f:d6:79:6c:71:92:54:21:
e4:67:79:13:5d:f7:65:88:77:d5:3e:a2:92:7f:a6:47:80:d0:
a7:72:fb:8f:71:6b:52:19:a6:1d:c7:bb:a0:f5:13:f7:c8:75:
e8:77:ba:06:7c:71:0d:b8:31:ff:66:6e:68:d4:c4:fb:7c:04:
cc:d8:89:1b:57:ac:49:33:66:f6:0c:d6:99:9d:a7:09:83:db:
29:bd:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:06:00 2026 by rpki-client