Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v_6d9zUTdTWyxDtH5EtCMPAmbiQ.roa
File: v_6d9zUTdTWyxDtH5EtCMPAmbiQ.roa (raw, json)
Hash identifier: tND4xbjDFLilG2bKMo7KDjQ59sl2eyV9kXmEpvWLlrs=
Subject key identifier: BF:FE:9D:F7:35:13:75:35:B2:C4:3B:47:E4:4B:42:30:F0:26:6E:24
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FAEC072A50F9B4D2E150E338A4A86B95F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v_6d9zUTdTWyxDtH5EtCMPAmbiQ.roa
Signing time: Wed 29 Jul 2026 16:41:15 +0000
ROA not before: Wed 29 Jul 2026 16:41:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213501
IP address blocks: 31.56.52.0/24 maxlen: 24
31.56.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:c0:72:a5:0f:9b:4d:2e:15:0e:33:8a:4a:86:b9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 29 16:41:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bffe9df735137535b2c43b47e44b4230f0266e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:02:bb:99:3a:4f:39:df:e6:bb:2d:d9:49:
1a:01:90:01:2a:fe:19:61:3e:94:bc:3f:c2:27:59:
49:fa:02:01:6d:d1:e5:01:c8:e1:d7:76:38:8c:0a:
e3:0d:80:92:de:f1:40:56:20:2f:1a:f5:fd:cd:15:
23:6c:67:e5:96:e1:c7:d2:a5:09:cf:55:c4:89:9e:
83:78:c3:f4:8f:7b:ef:c3:62:9d:24:4e:87:dc:82:
57:a9:cc:f6:ba:d3:b9:f5:bf:f3:fb:26:78:77:41:
4a:77:8d:92:04:ca:d0:54:5d:7d:93:79:97:a4:1a:
8b:86:4d:16:74:d9:c4:0c:98:f6:b4:06:0e:1a:ac:
a4:48:10:83:6d:63:7d:92:d0:ac:03:ca:37:f1:9f:
ac:68:78:02:a9:5e:87:cf:80:3b:75:d1:37:1e:2a:
f5:41:cf:73:e7:a1:39:51:6e:15:1b:9a:ce:9e:d2:
12:33:9e:fa:03:65:ec:c0:84:7a:1d:38:e2:1e:b7:
de:40:d5:4d:6f:25:24:6a:58:b8:ab:5e:6f:69:9a:
eb:77:e9:38:b8:3c:7d:37:91:10:53:5e:c1:98:16:
8b:d0:f9:56:a3:20:f6:c5:43:f7:89:53:00:3c:c3:
76:f7:95:e7:7f:db:a4:4c:a6:4f:b5:95:91:d9:ee:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FE:9D:F7:35:13:75:35:B2:C4:3B:47:E4:4B:42:30:F0:26:6E:24
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v_6d9zUTdTWyxDtH5EtCMPAmbiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/23
Signature Algorithm: sha256WithRSAEncryption
53:82:d7:86:0c:83:52:55:47:1d:52:33:de:61:4b:24:55:a1:
b0:d0:0e:56:3c:d3:de:22:d8:4b:74:15:8d:2a:27:8e:c9:e8:
c0:91:c1:75:f3:74:95:c9:55:66:71:d3:1b:85:ad:b0:92:f2:
29:d9:68:6f:ab:b8:1b:b7:e4:f3:a4:42:9a:f0:c3:ac:12:b7:
0c:ee:aa:aa:82:b5:96:c1:d8:7d:b2:fe:22:20:7c:a8:a6:65:
c1:f4:9d:b7:0c:05:28:06:a1:80:52:b9:54:e6:86:03:2a:df:
13:9f:3c:01:45:0e:f1:11:30:be:c6:f4:3a:dd:ab:26:cb:5a:
b0:c7:5f:c5:5d:7a:57:98:17:8f:44:f2:b3:0b:48:3c:4e:f7:
22:39:d5:a1:34:bc:01:c3:69:2a:6f:f6:7f:4c:ee:a4:02:15:
f8:bf:6f:4a:1a:cd:89:37:71:68:bd:7b:6f:de:55:18:86:6b:
a1:bc:16:b5:b7:cc:2a:24:a5:2d:9b:59:28:9c:be:2e:9f:7d:
ce:55:78:53:c5:f2:29:59:ea:58:17:b8:36:fa:07:15:79:5f:
5e:fd:1f:a7:af:a2:64:0b:83:bc:3f:a7:7a:ee:ac:21:93:8f:
f9:0f:7b:b9:d1:42:fb:20:02:c7:ff:c4:66:e1:84:e9:dd:9f:
13:97:35:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 03:02:29 2026 by rpki-client