Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/053Az_8hPmjJunXXK2bpMzSgKiU.roa
File: 053Az_8hPmjJunXXK2bpMzSgKiU.roa (raw, json)
Hash identifier: heH3Dv2NKJR/4sF6y+5UsI8Ct7naicbuvUtHVhKmTRU=
Subject key identifier: D3:9D:C0:CF:FF:21:3E:68:C9:BA:75:D7:2B:66:E9:33:34:A0:2A:25
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A18C0DC68249A798C08E0210ABA29C0E56
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/053Az_8hPmjJunXXK2bpMzSgKiU.roa
Signing time: Fri 30 Oct 2026 09:04:35 +0000
ROA not before: Fri 30 Oct 2026 09:04:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 31.56.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:0d:c6:82:49:a7:98:c0:8e:02:10:ab:a2:9c:0e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 30 09:04:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d39dc0cfff213e68c9ba75d72b66e93334a02a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:9d:23:9c:e5:0d:dd:f9:b1:22:2d:85:ae:
7a:e8:b2:74:ec:b2:71:f2:c8:d6:fe:5f:b2:ef:d4:
40:4d:d7:5b:76:08:7b:be:66:1d:64:ed:56:60:13:
7f:96:6f:2a:ff:fe:fd:54:2b:70:19:59:e4:2e:96:
64:e3:df:d4:d9:f2:e5:16:42:18:19:c9:06:41:60:
a8:10:ae:3e:13:49:43:42:28:e6:9d:71:16:0b:30:
1e:07:ea:21:d3:23:03:78:b0:0d:23:a9:71:00:59:
18:97:d4:f5:8d:f2:63:03:ba:a5:a7:7c:7e:cd:21:
cc:22:b7:09:38:7d:1e:c1:4a:da:4a:09:a3:a5:56:
7b:18:56:81:5c:9f:42:20:21:b2:39:80:99:d4:e8:
e3:7c:1c:a1:2f:04:ba:e6:19:00:42:db:c5:6c:93:
2a:1b:9e:a6:15:38:34:28:a0:f7:4c:9d:e6:67:07:
4f:3f:54:25:d7:20:fe:ce:1f:c9:84:b6:2d:94:02:
be:4a:d4:3b:08:ea:3b:01:6a:e4:e8:f7:00:a5:3f:
24:dc:e9:86:c6:a6:3d:2f:c4:b7:76:81:30:e1:68:
47:3c:1e:07:42:38:f9:11:a6:31:e1:2e:b1:0d:38:
b1:e4:fb:42:80:c8:90:5e:68:17:88:eb:2a:15:e1:
d0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9D:C0:CF:FF:21:3E:68:C9:BA:75:D7:2B:66:E9:33:34:A0:2A:25
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/053Az_8hPmjJunXXK2bpMzSgKiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.10.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:32:b3:cb:11:2a:b3:8d:38:df:b6:0f:c7:ef:e5:c3:15:ca:
b1:c5:a6:87:9f:bf:dc:36:9a:2f:ef:70:f6:75:a6:17:11:ff:
a8:0e:ef:86:1e:53:cc:3f:72:2c:97:2d:cf:6a:e9:cc:1e:bb:
2e:b7:53:31:40:c0:c4:1f:88:9c:72:2f:c2:56:a4:3b:d9:6a:
47:af:91:2f:99:e4:93:1c:57:6d:11:f6:b3:4f:36:63:78:7a:
47:88:d3:79:6d:85:cb:52:85:1a:4c:4b:ae:a6:2e:ba:3c:ec:
d9:fa:1b:a0:73:54:1a:5f:16:de:cf:8f:8b:21:a4:c6:55:82:
d8:6f:49:4c:25:b1:73:77:85:79:15:5d:72:9f:c9:9b:c9:8d:
7c:bf:21:34:34:13:03:2e:cf:c7:44:3d:8b:5d:ec:39:35:c2:
da:f4:a7:6e:bb:b2:67:74:16:61:47:69:d7:50:5e:bf:d6:58:
2e:59:37:44:30:ec:71:7a:5c:64:24:93:84:62:0b:27:03:9d:
aa:ea:d6:d5:4d:17:6a:65:6e:77:00:d1:60:9e:83:4d:3d:c6:
60:32:72:53:50:e0:c7:57:0c:db:a8:1a:82:2a:ba:eb:47:d8:
af:f1:db:fb:d8:6a:25:0f:c3:1e:f2:55:a7:32:93:7c:df:2a:
26:8d:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 06:39:30 2026 by rpki-client