Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ygCpgChyx6LZge5rUuLwjasCUE8.roa
File: ygCpgChyx6LZge5rUuLwjasCUE8.roa (raw, json)
Hash identifier: yslQUTfdXEWnYXCm78T+ecQbKb6LrvxLRg1GWaMXzAg=
Subject key identifier: CA:00:A9:80:28:72:C7:A2:D9:81:EE:6B:52:E2:F0:8D:AB:02:50:4F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FF208D35AD3382E37B740B256308A7C58
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ygCpgChyx6LZge5rUuLwjasCUE8.roa
Signing time: Tue 11 Aug 2026 18:14:52 +0000
ROA not before: Tue 11 Aug 2026 18:14:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218986
IP address blocks: 31.56.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:08:d3:5a:d3:38:2e:37:b7:40:b2:56:30:8a:7c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 11 18:14:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca00a9802872c7a2d981ee6b52e2f08dab02504f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:22:20:c1:3f:43:6f:c4:3f:54:a5:8e:f3:
0b:b6:a8:23:12:b1:3d:e6:34:86:04:24:b5:30:82:
af:5e:22:89:88:b5:f7:03:66:23:80:db:6e:69:be:
b1:af:94:b2:ef:2a:cf:76:61:57:5f:25:18:e8:68:
a0:a6:1e:45:28:c7:a3:7d:8c:c9:50:cd:37:92:54:
53:d6:b4:73:a5:34:69:7f:da:d5:e8:3f:f0:99:af:
99:40:d3:54:09:4c:3b:93:32:22:f4:16:d7:de:17:
09:6b:8a:32:d6:d8:71:e0:13:84:ad:df:04:77:ce:
14:4e:d6:9d:b1:ca:25:2b:6b:a2:1c:d2:ed:3f:23:
ed:00:3d:84:ca:a9:b7:c9:3d:4a:51:67:c0:d7:3b:
fb:1b:a6:3d:20:0f:31:e1:4d:bf:85:cd:ad:f9:e2:
6d:3e:b7:31:6b:84:92:00:57:8c:e9:f8:60:80:f4:
02:a0:f1:87:1b:9c:0c:e9:7a:54:f4:b8:0b:20:10:
09:d2:ec:1b:01:f4:28:44:2b:fb:39:d5:dd:1b:3a:
36:cc:62:39:9c:4d:f9:8e:5c:59:0a:1d:06:11:90:
5b:fc:ce:33:3b:72:fe:70:c6:d0:13:78:1e:ba:3c:
c4:5f:f9:b6:68:d4:b8:10:59:59:30:6e:82:56:cc:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:00:A9:80:28:72:C7:A2:D9:81:EE:6B:52:E2:F0:8D:AB:02:50:4F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ygCpgChyx6LZge5rUuLwjasCUE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/23
Signature Algorithm: sha256WithRSAEncryption
70:21:3b:f0:e9:7d:de:60:82:32:f7:c9:7e:f0:72:32:27:c0:
97:1f:c5:0a:a4:2e:6a:3f:de:da:f0:4c:31:96:72:25:9e:d5:
2c:a3:ba:d0:02:ef:c5:98:ea:ed:70:16:1f:a7:cd:e7:ed:82:
28:c7:12:0a:a0:47:61:ac:8e:87:36:17:12:d6:0c:1c:f6:69:
98:bf:ac:25:00:42:d3:6d:62:7d:1c:bc:1a:aa:bc:a4:22:ff:
b5:e6:d7:d9:9f:4c:89:d3:8c:bb:d4:cc:49:24:40:87:0e:35:
d6:b8:81:db:ed:78:de:30:9b:7c:b3:1f:f3:56:09:e3:f7:3b:
d3:33:59:65:33:e4:a9:da:f9:61:9d:bd:ee:31:ab:e2:f6:e7:
00:36:2c:9f:1f:3a:85:b4:e1:a0:97:e2:78:ac:8a:cb:0a:e0:
cb:9e:e4:fa:18:f2:6c:ca:2a:ae:59:fe:94:f2:b7:3c:50:6c:
08:d3:65:66:c3:f6:50:52:62:0f:c8:bf:c9:bb:8f:c4:11:52:
af:6c:a3:c7:1e:f2:4e:36:4e:ce:38:a7:5a:22:68:64:e9:50:
84:15:96:71:93:9b:86:30:c8:99:86:4c:8e:77:ea:f1:77:90:
ec:f1:93:54:22:9b:c2:0c:da:8d:48:89:ec:76:4e:ae:ed:66:
a1:82:53:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:33 2026 by rpki-client