Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yn5DlUAnT-lGyLIPtIMOqwoDrGA.roa
File: yn5DlUAnT-lGyLIPtIMOqwoDrGA.roa (raw, json)
Hash identifier: +13gczQJpzpESQpWBT0cN+OP2o7Opxy3LZFk25zVj0Q=
Subject key identifier: CA:7E:43:95:40:27:4F:E9:46:C8:B2:0F:B4:83:0E:AB:0A:03:AC:60
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0F16BAE213FC60F2E57FD3CBC6910F798
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yn5DlUAnT-lGyLIPtIMOqwoDrGA.roa
Signing time: Wed 30 Sep 2026 08:26:01 +0000
ROA not before: Wed 30 Sep 2026 08:26:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 31.56.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 14:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:6b:ae:21:3f:c6:0f:2e:57:fd:3c:bc:69:10:f7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 30 08:26:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca7e439540274fe946c8b20fb4830eab0a03ac60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:4d:33:25:43:e9:5e:0c:1a:71:da:51:91:
99:c1:3f:07:fb:5b:f7:3a:ce:ce:0a:63:99:d3:c3:
73:3c:1c:fb:9a:fc:68:94:9e:d7:e5:23:5c:f1:05:
c2:8e:5f:5e:27:f4:c0:aa:eb:3d:03:95:97:bc:69:
5c:03:8e:41:7c:2c:c5:98:29:53:fb:3b:d1:29:5e:
91:13:fc:78:db:1f:b6:26:44:79:23:6a:3c:15:40:
f7:31:d5:a0:a5:4c:5b:a7:cf:38:64:22:f8:22:31:
d8:f1:b5:42:93:70:a1:da:b1:6d:43:44:76:2e:fe:
c4:ac:6c:63:54:e4:01:8b:4c:05:df:12:95:f0:41:
06:bb:00:dc:e2:0d:68:dd:5c:47:ef:57:09:24:ab:
1a:9d:e7:17:cc:1b:4f:d4:7e:9e:61:bf:88:00:a5:
cf:07:8a:a3:bc:ae:a1:4a:4f:e8:bf:83:9d:b0:72:
9a:cb:77:df:ad:6a:15:0a:23:66:9c:79:cb:ff:17:
c0:59:3c:a0:44:b7:fb:48:c7:c5:b1:e7:40:ed:89:
f2:d7:10:e5:d0:79:81:c3:fc:cc:b6:11:aa:86:33:
18:c7:99:c6:f5:b4:5e:59:75:f8:b0:52:8f:b3:c1:
cc:ba:d3:fb:8b:83:3f:d1:6c:8f:6e:f2:d5:e7:e3:
2e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7E:43:95:40:27:4F:E9:46:C8:B2:0F:B4:83:0E:AB:0A:03:AC:60
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yn5DlUAnT-lGyLIPtIMOqwoDrGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
Signature Algorithm: sha256WithRSAEncryption
06:f6:80:bb:ca:4e:75:7b:34:3e:d9:ca:33:d2:79:e9:2b:4b:
83:7e:2e:d1:46:6f:2b:e5:44:97:76:1a:84:d3:2b:00:81:5c:
9a:61:1c:70:80:81:8f:00:c0:03:8d:77:44:1e:1d:7a:ae:72:
3b:7d:a6:41:3c:67:4d:ea:35:18:66:3f:25:3b:61:ab:99:c6:
93:28:0b:c5:83:c9:15:a3:3a:c5:03:20:2f:06:f9:41:8e:7a:
1b:59:8c:37:02:77:bd:cf:ac:3c:74:5e:24:1a:c3:d3:fa:95:
19:9f:50:e1:43:ff:5a:0a:79:17:50:d5:29:cf:8a:ba:ad:e3:
75:e5:49:d6:e4:29:3a:9a:06:a5:9c:20:4d:6b:99:5e:15:e6:
de:81:d0:21:a0:3d:3f:c2:17:c2:71:e5:7b:a3:fc:6f:28:6b:
4b:f3:b5:ce:25:0c:e8:5c:59:02:90:fb:77:48:30:3d:54:e7:
c2:a8:63:11:01:b5:8c:1e:90:d7:f6:4e:0f:9a:48:9d:82:76:
54:67:67:45:c0:fa:6c:b6:e8:5e:86:a8:16:e6:80:e1:52:ef:
ae:dc:3a:55:22:e8:43:2a:91:33:51:c7:49:f8:3b:88:b5:c0:
54:a9:d0:03:11:33:42:b3:c8:46:f5:07:df:eb:1d:88:2a:2a:
6c:5f:d4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:23:57 2026 by rpki-client