Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yDYZ2J71ZtV9lmHQUnZckgLnvlQ.roa
File: yDYZ2J71ZtV9lmHQUnZckgLnvlQ.roa (raw, json)
Hash identifier: LUS/isskOZjd8tcRUn8RMoh59swt3rKZter0xLMAgt4=
Subject key identifier: C8:36:19:D8:9E:F5:66:D5:7D:96:61:D0:52:76:5C:92:02:E7:BE:54
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E9E55EC3977BFED76384484B906785201
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yDYZ2J71ZtV9lmHQUnZckgLnvlQ.roa
Signing time: Sat 06 Jun 2026 19:08:11 +0000
ROA not before: Sat 06 Jun 2026 19:08:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33355
IP address blocks: 31.56.148.0/24 maxlen: 24
31.56.149.0/24 maxlen: 24
31.56.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9e:55:ec:39:77:bf:ed:76:38:44:84:b9:06:78:52:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 6 19:08:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c83619d89ef566d57d9661d052765c9202e7be54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:5f:74:54:a8:45:d2:3e:fb:ce:97:76:26:
99:f7:3d:61:45:f9:b0:70:36:f4:30:bd:19:58:06:
ae:07:31:b1:2e:71:9e:74:c8:79:54:59:b3:44:ae:
32:03:4b:6b:e8:a9:1d:93:86:56:c4:95:ae:04:b3:
9f:60:f2:c4:a1:a6:0f:19:49:45:22:b2:51:30:df:
6f:9d:1d:a5:3b:16:0c:48:95:59:cd:ad:ef:84:ae:
5c:1f:9f:9c:4e:4b:d5:f9:a4:13:d2:37:8f:44:0f:
18:47:47:05:bc:c7:93:1a:fb:b6:99:7e:eb:4b:a9:
29:1f:f4:01:a3:64:67:94:96:e4:e2:51:45:94:0a:
fb:08:9b:bc:d0:7c:81:27:4b:c0:11:d4:09:37:6c:
64:3f:31:11:c6:57:a8:97:85:eb:48:14:b2:2a:2a:
f4:28:94:31:6e:25:51:4e:68:ae:3a:72:94:8d:40:
6e:74:8c:02:f2:39:83:42:d7:be:4d:06:a8:57:f5:
99:80:0a:ae:9b:ae:9d:0c:7d:1d:d4:09:9d:a1:c7:
79:77:24:d7:eb:6f:de:c7:77:d9:a7:83:a3:09:34:
24:aa:5b:9d:0a:64:27:b0:ab:d0:67:e2:61:71:a7:
62:54:7c:e5:e5:32:ab:12:9f:5d:3b:1d:59:99:81:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:36:19:D8:9E:F5:66:D5:7D:96:61:D0:52:76:5C:92:02:E7:BE:54
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yDYZ2J71ZtV9lmHQUnZckgLnvlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.148.0-31.56.150.255
Signature Algorithm: sha256WithRSAEncryption
49:7a:a0:20:9b:6a:bb:9c:0d:47:96:1b:e2:6b:df:2d:ac:c0:
85:74:08:0a:7a:c6:99:e0:f2:e1:79:13:79:de:f4:ee:4d:40:
97:74:b7:cc:b2:7c:b8:ef:61:c9:51:8c:36:e2:ec:6a:b7:7b:
c2:2d:6b:49:65:13:35:b4:52:ad:fa:2e:15:6a:65:bf:c9:e4:
a8:41:78:06:c6:ba:6e:95:15:04:75:4b:af:9f:ca:03:cb:17:
78:1e:f8:07:38:bc:86:00:cc:c7:c0:bb:72:90:bc:46:cc:17:
63:0c:ba:2e:40:97:2d:40:df:e6:01:9c:38:35:02:a1:45:be:
bd:9e:eb:40:f0:ff:bc:e2:69:07:5c:ab:38:6a:1a:f6:bc:60:
92:d0:b5:0b:3e:43:f0:7b:92:1f:3d:ef:83:03:a6:e6:64:57:
08:3c:8a:7c:8e:bb:2b:2f:08:5a:02:9e:7a:87:61:8d:b8:cc:
6f:ff:ba:77:a2:3f:9c:ac:02:50:95:be:27:5a:49:8c:1b:83:
0e:28:c0:32:09:8b:af:39:df:d2:5d:0e:57:5c:5c:ed:57:7d:
60:88:b6:6b:39:1c:9e:89:5a:d3:73:3d:6b:3e:55:fb:9b:4d:
27:e6:fe:b9:50:4e:79:d8:01:37:7b:93:8e:a5:f4:70:6f:9c:
4f:ab:26:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 02:18:12 2026 by rpki-client