Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2ozlH5P0NsyK6Gpj7xUwBh21XSc.roa
File: 2ozlH5P0NsyK6Gpj7xUwBh21XSc.roa (raw, json)
Hash identifier: PINFi65a6aFgmpGFQWwqtzLDickLFDnHq1IwIdLvAmg=
Subject key identifier: DA:8C:E5:1F:93:F4:36:CC:8A:E8:6A:63:EF:15:30:06:1D:B5:5D:27
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0635665F2D596AD4EF07DBF6CCDC8B952
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2ozlH5P0NsyK6Gpj7xUwBh21XSc.roa
Signing time: Wed 02 Sep 2026 18:16:41 +0000
ROA not before: Wed 02 Sep 2026 18:16:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 31.56.192.0/24 maxlen: 24
31.57.50.0/24 maxlen: 24
31.57.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:56:65:f2:d5:96:ad:4e:f0:7d:bf:6c:cd:c8:b9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 2 18:16:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da8ce51f93f436cc8ae86a63ef1530061db55d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:ce:74:c3:82:13:c2:da:48:54:f4:fb:d2:
e3:73:ed:36:8a:a4:00:d6:e5:21:21:7f:3a:e9:58:
a1:6a:94:33:e2:bc:27:e7:e2:38:92:b1:1a:a1:0b:
72:83:cc:08:ee:5d:1d:19:8a:a6:af:78:25:7d:05:
ac:08:4e:43:ed:1a:82:38:5d:52:a4:41:ec:81:b4:
94:4a:b4:1a:1c:55:fd:42:b3:c1:51:e7:e2:bf:f9:
1b:84:af:39:22:1f:11:81:30:bd:bc:51:14:96:ed:
ec:4b:00:f4:a9:52:e9:36:46:12:58:29:e2:5b:33:
2f:4f:61:a4:69:b9:aa:bb:ea:14:cc:23:23:2a:b8:
4a:be:1d:6f:8b:2d:c5:ea:a7:27:e7:5e:9e:3f:3a:
e7:f0:ae:48:36:6f:b9:d1:e8:f5:e8:83:b0:4c:6c:
15:9d:58:65:63:aa:88:f7:0f:a7:b6:8f:02:b6:1b:
f6:2b:46:a0:31:b3:3b:70:c4:c5:9d:f7:4c:47:c9:
5a:05:3e:00:83:ee:23:89:28:68:be:49:98:23:0e:
13:31:a7:4b:2c:fc:7e:a2:be:b0:e3:68:98:01:5c:
98:ef:31:7d:76:54:64:db:8f:17:8b:ba:3e:65:ec:
22:6d:f9:03:da:14:95:d4:2d:ac:f3:7e:e5:a8:63:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8C:E5:1F:93:F4:36:CC:8A:E8:6A:63:EF:15:30:06:1D:B5:5D:27
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2ozlH5P0NsyK6Gpj7xUwBh21XSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.192.0/24
31.57.50.0/24
31.57.60.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ab:ee:8d:5b:6d:32:c3:af:52:e1:36:91:68:ac:95:bd:0f:
c5:66:91:04:9e:40:15:2d:be:25:51:c6:fd:15:51:ef:00:ff:
0c:73:b7:90:89:3e:e8:cb:83:8e:42:99:25:d7:b6:42:6f:08:
8d:ac:92:d6:72:f0:93:aa:0c:b1:e7:bd:39:8e:24:82:16:43:
3e:ab:39:2e:21:d1:42:75:46:e8:2b:82:3b:4b:67:aa:42:c3:
87:07:ab:87:b8:95:a4:66:0d:01:fe:36:09:e1:ca:5e:dc:3f:
f2:b0:67:5d:34:9a:2c:48:d2:4a:23:0b:a1:b1:ae:32:bc:8b:
54:bb:cd:9c:88:af:80:30:ac:9b:80:20:64:49:97:f4:6d:b2:
9e:40:18:77:5e:23:97:67:29:5e:c2:ca:86:98:3e:8e:6b:e7:
61:38:39:00:3e:ca:65:da:c5:58:f7:36:3a:5e:bc:be:77:c0:
2e:a9:e9:c6:32:ac:ca:54:62:24:6b:9b:52:ea:ac:0a:d2:bb:
0f:a5:6a:4c:df:01:76:67:60:d3:1f:eb:73:b1:ee:e6:bd:2b:
ea:c5:df:f5:8b:fd:31:5d:0a:5e:a2:51:53:82:f3:18:2d:a2:
14:1b:d8:84:7e:c8:7b:73:cc:52:d4:7b:69:91:ba:53:26:62:
09:45:aa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:02:18 2026 by rpki-client