Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w3h6-tsdD6nJuvF3w67LqXQsE6c.roa
File: w3h6-tsdD6nJuvF3w67LqXQsE6c.roa (raw, json)
Hash identifier: xOLFTEPI+0ZiShU3EtEAdOD31lDZt0IUcv2d5QaF6Hs=
Subject key identifier: C3:78:7A:FA:DB:1D:0F:A9:C9:BA:F1:77:C3:AE:CB:A9:74:2C:13:A7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0E9099BA918B54986119E66B66EA9EE6F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w3h6-tsdD6nJuvF3w67LqXQsE6c.roa
Signing time: Mon 28 Sep 2026 17:21:56 +0000
ROA not before: Mon 28 Sep 2026 17:21:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 31.56.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:09:9b:a9:18:b5:49:86:11:9e:66:b6:6e:a9:ee:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 28 17:21:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3787afadb1d0fa9c9baf177c3aecba9742c13a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:ec:0b:00:b3:0f:4b:73:05:1a:a7:3c:46:
ee:f7:69:b3:38:8e:71:ff:97:6a:60:fb:2c:d3:be:
1f:d4:df:22:a7:94:33:15:e9:b5:20:2f:89:ff:d4:
ee:45:57:a9:6a:f2:64:be:81:b3:f4:c5:eb:e8:9d:
61:99:22:68:11:d0:97:5a:1e:3b:50:d6:db:3a:0f:
66:a4:14:a6:5b:5b:b8:b6:3e:0f:93:d5:cd:b0:ac:
e6:03:e0:a5:9a:61:6d:93:42:1e:ef:bc:28:7e:a7:
55:2d:38:cf:da:1f:88:e8:4b:1f:85:a6:49:88:33:
3f:09:42:64:3f:b4:b1:0d:48:6c:6e:1f:72:e4:e7:
87:e3:6f:77:ef:df:3a:c4:f8:2a:3d:6c:5a:0c:52:
dd:6f:a1:92:86:b9:82:b7:64:06:f2:a3:30:9c:6d:
be:90:f1:5b:fd:e1:96:70:f8:93:9f:b4:c3:d1:89:
e4:19:63:7b:43:ee:db:63:50:de:35:4b:b2:c5:ae:
e6:df:e5:ad:35:ce:dc:fb:b5:27:95:bd:3c:70:c8:
16:87:f9:31:44:51:78:45:61:0a:72:1a:d6:31:a6:
18:8e:fd:66:99:7f:db:2a:a3:06:de:e8:d6:5d:9e:
79:4d:1b:7e:36:85:be:70:f3:e1:81:f6:25:86:97:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:78:7A:FA:DB:1D:0F:A9:C9:BA:F1:77:C3:AE:CB:A9:74:2C:13:A7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w3h6-tsdD6nJuvF3w67LqXQsE6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.144.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e2:e9:f6:28:d8:e5:63:d0:e8:a2:c7:2c:bf:c1:a3:39:00:
8b:7f:e5:a1:43:0f:3d:1e:31:c5:52:ba:a2:37:b5:68:50:c8:
de:2b:5d:bf:59:9b:41:84:e3:fc:d4:5f:52:b9:8e:13:8e:b2:
26:74:e0:02:73:b7:8f:28:11:a5:27:d2:50:e4:3c:c0:1d:d3:
8e:33:36:e0:93:43:c5:98:65:08:1a:dc:9f:0e:32:6c:b6:1e:
db:4b:89:36:30:d8:52:e0:0a:e3:cc:0f:b8:23:1a:6c:d8:68:
e8:c7:88:df:2d:55:52:20:37:f2:85:08:ea:fb:5c:32:61:d2:
26:24:70:84:ff:ac:da:e0:2e:a5:6c:2e:2a:18:9b:78:17:23:
eb:f7:26:25:1d:9b:37:4c:df:01:a4:3e:08:0a:49:bf:4a:6a:
92:e9:d2:44:b8:89:c5:ca:2e:ef:e3:d2:3f:0d:d8:cd:33:3b:
f2:90:8d:3a:e8:80:61:5d:0d:64:03:bb:db:36:1c:9a:72:ef:
6a:a6:cc:e2:33:3b:35:34:9c:1f:97:31:54:a9:eb:af:64:95:
93:1a:7c:d2:16:05:35:9e:18:6b:5b:4a:27:c1:be:b3:8c:59:
e1:9d:fe:fc:c6:cc:57:b3:ca:fe:49:8c:95:22:6c:e6:12:ae:
db:79:26:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:01:56 2026 by rpki-client