Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y3mKtA0n5AN0rnHn0I4IOsfuQXE.roa
File: y3mKtA0n5AN0rnHn0I4IOsfuQXE.roa (raw, json)
Hash identifier: zjvWZTd1t0mJMFf4f1I5FW10wA2cPraw3P3dG+YC7mc=
Subject key identifier: CB:79:8A:B4:0D:27:E4:03:74:AE:71:E7:D0:8E:08:3A:C7:EE:41:71
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FB72EFB2B89D3E23E71544376F406A9DE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y3mKtA0n5AN0rnHn0I4IOsfuQXE.roa
Signing time: Fri 31 Jul 2026 07:58:57 +0000
ROA not before: Fri 31 Jul 2026 07:58:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219105
IP address blocks: 31.56.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:2e:fb:2b:89:d3:e2:3e:71:54:43:76:f4:06:a9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 31 07:58:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb798ab40d27e40374ae71e7d08e083ac7ee4171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:40:eb:5c:c0:db:f8:ae:ad:fb:31:ef:03:
92:64:48:d2:bd:f2:a7:9b:6b:23:a4:23:22:5c:7c:
2a:6d:ce:a3:5e:cf:ad:8c:0f:fb:03:04:ce:de:24:
ec:60:5e:be:34:0a:7e:21:98:55:ed:05:54:52:a2:
2a:68:0f:ce:a0:7f:8d:bd:c6:cd:3e:32:1b:45:a4:
bb:5f:86:49:91:c9:82:37:67:74:8d:cf:dc:11:04:
55:2f:0d:aa:ac:6e:9f:60:20:5c:b7:08:4f:c6:4c:
d8:22:51:b7:26:ff:9e:a9:a0:b9:cb:de:4f:36:e2:
47:7c:c2:63:09:25:f9:99:83:4c:52:53:9e:56:7a:
68:8f:1b:30:8a:6e:81:cb:a1:96:fb:da:58:b5:0c:
33:1b:a9:7d:81:8b:d9:70:94:fd:a1:56:df:b8:b5:
12:dd:ea:92:51:23:f3:1e:03:77:a4:d8:22:2a:ee:
4c:00:45:e6:55:56:a9:a9:ff:70:25:31:72:e7:e9:
52:69:fb:57:e4:75:be:12:e7:d3:17:95:24:0e:60:
8f:ab:b6:d7:4e:de:14:ec:34:95:c7:0e:81:c4:ee:
35:25:02:50:ea:4d:d4:45:d7:82:4f:90:11:40:25:
9d:e4:39:33:a5:8d:39:0f:f9:7f:b2:04:91:73:5a:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:79:8A:B4:0D:27:E4:03:74:AE:71:E7:D0:8E:08:3A:C7:EE:41:71
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y3mKtA0n5AN0rnHn0I4IOsfuQXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.192.0/24
Signature Algorithm: sha256WithRSAEncryption
88:51:86:bd:2d:69:12:34:02:ec:f6:12:ba:ae:30:be:aa:5a:
dc:85:ba:db:a8:21:0f:81:f1:23:cd:d6:79:11:7d:51:f7:6e:
ff:3e:4a:7c:54:2d:16:3c:87:d0:15:57:e1:37:43:98:76:9d:
c2:7c:65:6d:e5:81:56:10:29:f6:c8:70:60:a5:42:eb:4c:4f:
89:33:67:84:5b:85:ab:b6:e5:90:33:25:b2:0d:04:c5:13:2b:
0a:b3:83:9d:3e:e7:e3:9b:3f:6c:4e:27:38:ee:38:b9:aa:bf:
4f:ae:b6:b8:12:1c:6a:06:26:b1:9e:2f:d2:0d:3a:55:8b:91:
0f:f2:22:f8:51:d7:16:15:fb:8b:f9:c5:c7:68:94:52:4a:17:
c7:a0:f3:d7:d6:2a:68:f8:59:d8:28:ee:da:d2:0e:0c:8e:2e:
72:27:5b:bc:df:d1:45:6b:ac:e4:e6:c0:67:7d:e6:a6:d1:e1:
e7:75:e6:58:10:c5:8f:c4:8a:d7:1c:65:13:a7:e4:4d:d3:1f:
ff:5d:08:93:3c:91:4a:5f:61:68:c6:27:5f:52:02:06:05:ce:
19:e7:99:25:86:1f:c1:17:0a:23:7f:ff:bd:8c:5a:0c:3b:17:
f0:a2:5c:47:bc:cf:71:5d:e9:0a:ab:2a:37:e8:45:bf:75:83:
2a:a5:97:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:57 2026 by rpki-client