Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-tQg_eZ6R9eKFN8gj0qASUzpP4.roa
File: 1-tQg_eZ6R9eKFN8gj0qASUzpP4.roa (raw, json)
Hash identifier: bv9pACc1cEWWA9ytDEDwCbdj2n7XrQfa8HLhCC+I8WU=
Subject key identifier: D7:EB:50:83:F7:99:E9:1F:5E:28:53:7C:82:3D:2A:01:25:33:A4:FE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D95348BC32B0CBB25FE44E3B48E664807
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-tQg_eZ6R9eKFN8gj0qASUzpP4.roa
Signing time: Thu 16 Apr 2026 07:32:22 +0000
ROA not before: Thu 16 Apr 2026 07:32:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154410
IP address blocks: 31.56.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:34:8b:c3:2b:0c:bb:25:fe:44:e3:b4:8e:66:48:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 16 07:32:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7eb5083f799e91f5e28537c823d2a012533a4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:00:f7:e8:5f:ac:ea:46:67:e4:cc:0a:39:
d6:1f:25:6f:dc:70:a6:6a:fc:6e:a5:5a:cb:b4:3e:
7c:9f:5b:12:d3:d0:7a:cd:b7:07:8a:b9:19:d4:4b:
f5:c1:30:9c:48:1c:a4:dc:fe:61:0b:b2:fe:78:63:
f1:56:11:14:0a:f3:86:28:5b:19:1e:d6:c3:17:4b:
c8:80:25:8f:41:8a:16:e1:a7:72:82:f4:2a:89:24:
38:b7:f8:99:57:0e:d9:35:c2:fb:79:ac:ce:91:3e:
5a:67:1e:f3:91:a5:9f:25:ba:75:10:da:e9:30:dd:
94:94:27:18:e2:0c:ee:32:53:50:26:f9:9b:01:a2:
40:b4:2b:32:f3:5e:83:01:cd:c2:e2:03:e7:1f:c1:
f7:51:50:2d:d0:f6:94:b7:68:1b:1f:0d:3c:09:11:
2a:4a:3e:e8:73:5f:2b:36:f1:e4:a7:33:56:26:6a:
8a:65:e9:0b:4c:a9:4a:c4:26:8d:0f:63:51:3d:84:
d9:dc:48:19:6d:cd:ef:e3:ae:c5:03:63:e5:dc:af:
2f:fc:9f:43:9f:22:14:fa:ef:37:a1:e3:fa:b3:2b:
c2:19:55:fc:d7:66:e9:e7:b9:ef:be:1a:f2:de:ae:
44:bf:fd:3d:94:50:0a:79:0c:c8:a7:4f:f3:88:a6:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EB:50:83:F7:99:E9:1F:5E:28:53:7C:82:3D:2A:01:25:33:A4:FE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-tQg_eZ6R9eKFN8gj0qASUzpP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:7c:37:b2:bc:42:61:e6:b2:df:13:5e:47:68:31:9c:88:39:
21:fb:ae:de:bf:b0:7f:e2:6b:0d:10:73:20:9c:df:24:15:25:
d3:fb:75:fd:f0:62:e8:6f:d3:a2:c7:98:b9:ea:63:d6:ae:7b:
7f:79:1d:be:a6:cb:7c:34:eb:ea:54:f1:85:dd:4a:92:c4:50:
93:ce:0e:da:9a:c3:e3:5d:0f:28:33:42:ef:3b:4d:38:99:9e:
c3:77:e3:7a:7b:08:a4:69:df:c1:9f:04:61:c5:13:a2:1b:a2:
d2:5b:78:9c:b8:8f:66:42:45:b8:8c:4e:b9:aa:93:25:87:93:
f7:fc:b3:26:d6:c5:c2:8a:ef:0c:26:64:2d:69:1b:6a:46:fc:
92:37:4d:8b:81:16:fd:94:e4:de:10:c4:7c:5a:d0:8d:33:eb:
9a:ee:dc:ec:02:10:d8:e2:38:67:7d:dd:03:46:7b:df:d6:54:
f6:f7:4e:65:fb:db:3a:43:26:2f:68:16:04:60:2d:20:81:be:
ef:79:19:cd:2c:c4:0a:79:23:20:6e:1e:5f:3f:44:8f:d2:b8:
65:3b:6e:fc:58:0b:1c:58:41:88:85:ad:cc:a3:7a:bf:ff:cb:
b0:fc:b9:f5:43:76:18:ef:db:c4:49:8b:37:89:a0:58:9a:fb:
d1:7e:54:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:59:40 2026 by rpki-client