Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vys6-nocZ1QYnLwDySrwCv3-3LU.roa
File: vys6-nocZ1QYnLwDySrwCv3-3LU.roa (raw, json)
Hash identifier: y33HsmmTKuLSW43RTuVPZzxRsz8sWbjvBbI3Qi7fbsE=
Subject key identifier: BF:2B:3A:FA:7A:1C:67:54:18:9C:BC:03:C9:2A:F0:0A:FD:FE:DC:B5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E50C1014836208811A30A6792EA8EA177
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vys6-nocZ1QYnLwDySrwCv3-3LU.roa
Signing time: Fri 22 May 2026 17:34:46 +0000
ROA not before: Fri 22 May 2026 17:34:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 31.56.152.0/24 maxlen: 24
31.58.155.0/24 maxlen: 24
31.59.254.0/24 maxlen: 24
31.59.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:c1:01:48:36:20:88:11:a3:0a:67:92:ea:8e:a1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 22 17:34:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf2b3afa7a1c6754189cbc03c92af00afdfedcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:2f:f0:60:1b:2f:be:6d:09:c0:23:72:14:
15:58:3d:35:6c:1c:85:de:83:0a:6a:5c:95:17:7b:
f7:77:6b:4a:d0:e5:11:eb:67:43:2d:40:ed:8f:04:
b7:80:10:62:cf:e2:e0:3a:8f:c9:69:15:8a:64:5f:
ad:e3:c5:21:8e:e5:38:e3:8e:dc:0a:38:78:f5:93:
16:76:d7:85:16:fd:7e:2d:97:33:68:12:ab:bc:9c:
d2:bb:86:92:fc:7a:28:1f:78:21:3a:2e:44:d9:18:
c7:66:57:9b:3b:9c:11:50:65:51:b4:bd:88:e6:0d:
58:f7:21:ff:4c:f1:6f:68:53:2a:b9:e6:52:45:55:
81:d2:f1:6c:35:8c:51:9a:9c:41:ee:8a:4b:48:5b:
b4:d2:67:2b:c4:cf:04:20:4c:7a:9b:8d:31:89:f9:
91:a8:c4:28:63:2e:6f:ce:82:11:db:7d:da:4c:86:
21:71:b0:33:b6:43:50:70:1d:98:d6:1a:c3:3d:69:
d0:a1:ef:2c:bc:2e:bd:42:25:45:ed:ae:47:c5:de:
ea:f4:1a:80:32:1e:9e:8b:23:e7:82:97:93:f5:2c:
71:f4:70:cd:c6:ba:c7:61:3d:d4:7b:bd:0e:ee:5b:
1f:80:dc:bd:1d:e6:a8:bd:d1:6c:08:2e:c8:9e:4c:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2B:3A:FA:7A:1C:67:54:18:9C:BC:03:C9:2A:F0:0A:FD:FE:DC:B5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vys6-nocZ1QYnLwDySrwCv3-3LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.152.0/24
31.58.155.0/24
31.59.254.0/23
Signature Algorithm: sha256WithRSAEncryption
36:8e:d0:8f:f4:5b:43:ea:dd:86:49:8b:fe:40:b4:82:9f:41:
bf:12:db:5c:bf:e8:b5:19:a9:1e:82:7f:19:cf:15:6f:e8:1d:
07:6f:f7:da:0d:92:c0:d4:8a:ec:96:e3:de:f9:2c:b5:19:c2:
0b:ee:f7:33:7e:18:6c:01:52:a4:21:8e:42:be:3a:09:48:1e:
49:47:fe:62:ab:31:8e:49:9a:76:31:84:e2:1f:73:66:5a:03:
e0:c0:94:a1:ff:ac:36:29:48:cb:57:40:4a:99:c1:9f:05:2f:
9a:55:c7:04:01:cf:bb:2c:a7:35:e4:2d:c8:8f:61:ee:06:62:
dd:53:31:7a:3e:9b:88:55:c0:f0:cb:57:e9:35:d1:a1:e5:6d:
5c:ff:a3:90:2d:8c:4c:83:50:67:d4:4f:12:c5:cb:8f:d2:2d:
cf:07:e8:94:21:5a:09:0a:ea:c9:1c:ca:d0:54:04:d7:db:b9:
2a:78:ad:7e:dc:d2:ea:3c:08:23:bd:41:53:3b:a2:2b:14:fa:
ca:ee:74:58:aa:2b:c9:c7:13:77:5b:29:d8:a2:4e:dd:08:b1:
13:27:94:fb:43:b6:7e:75:9a:c1:c6:46:db:96:19:35:2a:21:
27:55:98:d1:47:20:71:ed:4b:d8:8b:5a:3f:20:40:f1:e2:6e:
d2:b9:f1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:55:30 2026 by rpki-client