Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2SsklkJpxX4ShhYdHBY53t2ofpA.roa
File: 2SsklkJpxX4ShhYdHBY53t2ofpA.roa (raw, json)
Hash identifier: zEmfkqV+2h/LRYhIH1Xl0upkXqPTs2lA3LYPMdKlYVY=
Subject key identifier: D9:2B:24:96:42:69:C5:7E:12:86:16:1D:1C:16:39:DE:DD:A8:7E:90
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A19372F5903C333B3A1C23A545E9957280
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2SsklkJpxX4ShhYdHBY53t2ofpA.roa
Signing time: Sat 31 Oct 2026 19:32:26 +0000
ROA not before: Sat 31 Oct 2026 19:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218499
IP address blocks: 31.56.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:72:f5:90:3c:33:3b:3a:1c:23:a5:45:e9:95:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 31 19:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d92b24964269c57e1286161d1c1639dedda87e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c7:04:02:c4:ec:63:77:d9:d9:36:89:86:eb:
60:79:7d:2a:79:1a:90:b3:cf:3c:bf:72:01:8d:f3:
a0:25:60:91:61:07:38:22:55:5e:55:dd:74:4b:03:
47:91:37:00:7b:63:be:0b:f8:76:32:7a:a6:b8:87:
49:76:cc:63:a7:98:cf:25:2b:3a:92:37:50:0e:41:
70:39:38:8d:bd:88:82:32:0b:f3:61:1a:ae:d1:0b:
7f:fa:54:64:ee:e7:82:51:e5:9b:74:2f:7d:43:ad:
b0:73:15:33:d9:8a:f9:41:bf:6b:07:ff:fe:08:b1:
1e:ab:d6:a3:6e:75:e3:08:78:d1:04:cc:36:61:9a:
93:67:f2:d8:e5:6c:84:91:ba:83:f1:49:f5:7a:93:
ab:c0:4d:34:4c:9c:9e:3f:99:de:18:af:dd:94:82:
04:6e:bb:54:bf:c6:0b:d6:75:f4:64:56:10:90:03:
c9:86:8f:da:8c:62:32:7c:31:21:c4:71:4b:da:a9:
a2:0c:cc:eb:f7:1b:6e:c0:2a:36:a0:07:29:74:55:
b7:0c:01:c7:80:97:20:1e:d9:a4:ee:cf:4b:ef:74:
9a:17:a4:96:39:74:bc:b5:e9:b1:bc:b2:67:64:72:
f3:03:dc:9c:02:b7:c8:04:12:7a:aa:88:d0:8e:8b:
0c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2B:24:96:42:69:C5:7E:12:86:16:1D:1C:16:39:DE:DD:A8:7E:90
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2SsklkJpxX4ShhYdHBY53t2ofpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.122.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3e:82:23:ec:31:4d:60:87:48:c1:5a:76:fc:43:4b:35:b5:
a1:50:59:2e:23:cb:74:fb:79:fe:34:06:bc:1b:d1:8b:ec:51:
59:85:17:e3:61:d6:51:38:f1:b0:d6:e2:00:09:15:72:e2:f9:
62:5a:f9:9c:d0:4d:89:99:ec:d1:a6:2b:da:0c:bb:23:73:b6:
8a:09:d7:c3:27:f1:01:c5:ae:28:62:14:83:d8:4c:1f:cd:28:
f9:43:cf:c6:07:38:df:12:17:69:ca:f5:e5:76:98:27:86:f2:
d6:da:dc:1f:58:c9:88:c2:20:b6:36:e9:3b:e7:10:37:1f:64:
00:f1:a9:5c:c4:17:0d:03:86:38:c1:67:db:9b:f4:69:ec:61:
41:3c:00:3f:9e:e8:66:8b:a0:ff:7c:4b:40:c6:a7:31:7e:59:
a8:dc:51:17:d1:8c:76:a4:d7:34:20:22:16:f9:15:91:00:d6:
51:b2:02:97:17:61:eb:33:89:7c:2a:9e:09:ef:02:a0:07:2c:
8b:c4:e2:58:a4:66:2a:c4:4b:c5:39:74:4e:e3:49:f1:9b:fb:
33:c4:62:92:1c:83:16:22:fa:85:9a:bb:c5:00:ba:a9:0d:67:
3f:9a:1d:f0:25:7e:a9:2c:80:04:40:e8:68:b1:09:d1:a9:18:
cb:02:2a:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGTcvWQPDM7OhwjpUXplXKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDMxMTkzMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTJiMjQ5NjQyNjljNTdlMTI4NjE2MWQxYzE2MzlkZWRkYTg3ZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5McEAsTsY3fZ2TaJhutgeX0qeRqQ
s888v3IBjfOgJWCRYQc4IlVeVd10SwNHkTcAe2O+C/h2MnqmuIdJdsxjp5jPJSs6
kjdQDkFwOTiNvYiCMgvzYRqu0Qt/+lRk7ueCUeWbdC99Q62wcxUz2Yr5Qb9rB//+
CLEeq9ajbnXjCHjRBMw2YZqTZ/LY5WyEkbqD8Un1epOrwE00TJyeP5neGK/dlIIE
brtUv8YL1nX0ZFYQkAPJho/ajGIyfDEhxHFL2qmiDMzr9xtuwCo2oAcpdFW3DAHH
gJcgHtmk7s9L73SaF6SWOXS8temxvLJnZHLzA9ycArfIBBJ6qojQjosMdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNkrJJZCacV+EoYWHRwWOd7dqH6QMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMlNza2xrSnB4WDRTaGhZZEhCWTUzdDJvZnBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzh6MA0G
CSqGSIb3DQEBCwUAA4IBAQByPoIj7DFNYIdIwVp2/ENLNbWhUFkuI8t0+3n+NAa8
G9GL7FFZhRfjYdZROPGw1uIACRVy4vliWvmc0E2JmezRpivaDLsjc7aKCdfDJ/EB
xa4oYhSD2EwfzSj5Q8/GBzjfEhdpyvXldpgnhvLW2twfWMmIwiC2Nuk75xA3H2QA
8alcxBcNA4Y4wWfbm/Rp7GFBPAA/nuhmi6D/fEtAxqcxflmo3FEX0Yx2pNc0ICIW
+RWRANZRsgKXF2HrM4l8Kp4J7wKgByyLxOJYpGYqxEvFOXRO40nxm/szxGKSHIMW
IvqFmrvFALqpDWc/mh3wJX6pLIAEQOhosQnRqRjLAior
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:23:08 2026 by rpki-client