Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/45kCUcvDkh2HponQluPN9Dp9heg.roa
File: 45kCUcvDkh2HponQluPN9Dp9heg.roa (raw, json)
Hash identifier: 6i3zWhfreCBhtv2IM3qprpvJR/OBgGNvn9MXNMqKrhs=
Subject key identifier: E3:99:02:51:CB:C3:92:1D:87:A6:89:D0:96:E3:CD:F4:3A:7D:85:E8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0A4EA3AB3446FCF4E3454683909E8C17C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/45kCUcvDkh2HponQluPN9Dp9heg.roa
Signing time: Tue 15 Sep 2026 11:53:28 +0000
ROA not before: Tue 15 Sep 2026 11:53:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56683
IP address blocks: 31.56.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:ea:3a:b3:44:6f:cf:4e:34:54:68:39:09:e8:c1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 15 11:53:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3990251cbc3921d87a689d096e3cdf43a7d85e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:17:06:91:6f:5e:c1:15:d2:01:b8:eb:d0:
b8:cf:e5:cd:6f:d6:1d:8c:ed:bc:9f:2c:cb:e0:6a:
3c:19:af:27:ea:c9:72:54:bd:97:34:f9:fe:75:f5:
52:18:75:28:da:ab:3a:ac:70:72:9f:08:53:07:1a:
1b:19:cf:65:8e:3b:9e:f1:90:87:52:85:3f:87:61:
c4:d6:91:ed:39:fa:72:a6:f7:09:00:e1:c5:66:e7:
07:53:42:b8:9a:98:60:31:96:f8:a0:6c:b8:83:e5:
ae:61:67:2f:e1:3a:9c:4e:a1:75:5e:6d:dc:78:51:
c0:98:e4:27:9b:0a:37:26:6c:3a:d3:b8:a3:3b:e8:
cb:fe:1c:cb:cd:33:2d:77:e5:5c:b3:a6:3a:81:bd:
b7:45:f6:4e:d6:bb:f6:6d:40:8a:ab:0e:07:ca:de:
f2:cf:54:20:81:8a:d8:da:2b:e8:bd:06:06:d3:2b:
6c:c8:18:12:15:14:26:2b:da:ba:50:df:32:2d:05:
ff:8c:46:3e:01:11:ec:f9:bc:65:98:ad:00:a3:18:
18:b5:4b:6f:b4:e4:c8:42:ea:9e:11:82:de:79:fa:
d5:8f:9d:1d:22:73:d1:49:89:1e:1a:1d:25:27:d5:
a6:e9:d6:e8:06:7b:4b:d8:95:c8:5f:99:dd:8e:79:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:99:02:51:CB:C3:92:1D:87:A6:89:D0:96:E3:CD:F4:3A:7D:85:E8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/45kCUcvDkh2HponQluPN9Dp9heg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d2:fa:a6:85:ea:80:a2:dd:c0:b0:bb:80:c4:40:0a:b9:5b:
17:f5:eb:db:02:65:83:5b:52:3b:24:24:e0:6e:9e:cc:c3:1b:
cc:65:5e:e9:d1:76:bb:49:54:af:ca:6f:c2:e1:2c:f9:42:45:
47:5c:1a:4c:bf:26:04:db:cc:aa:9c:77:0a:d6:85:2b:3d:a3:
41:7a:1f:b3:72:52:75:2a:97:db:96:e4:e6:d6:36:ce:7d:4b:
93:e5:6e:5f:21:ec:5f:69:32:3c:a6:fd:af:41:4f:8d:64:2b:
7f:e6:c6:06:53:1e:0b:75:cd:b1:45:89:3a:82:f1:0b:d2:ef:
3a:f7:dc:bc:94:ec:4e:a3:da:5a:13:c7:3d:26:3d:bb:bf:f0:
28:f9:49:44:ea:c4:57:1f:75:7e:8a:94:84:bb:e7:8c:69:2d:
fc:17:f7:18:79:63:41:f9:11:00:1c:60:40:fa:6d:72:eb:82:
07:94:4a:c7:6e:69:6b:eb:92:f9:0d:67:40:6c:0d:eb:ce:1a:
e9:93:43:c0:cd:8e:6c:c3:e2:ec:f0:9e:a3:01:8f:9a:4d:79:
b4:ab:7c:44:b4:50:74:56:2b:c6:2a:d5:b6:17:08:34:c3:a3:
34:18:d2:56:60:19:a0:19:cc:9d:5e:c3:e0:79:3b:7e:db:0f:
11:4a:64:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCk6jqzRG/PTjRUaDkJ6MF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTE1MTE1MzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzk5MDI1MWNiYzM5MjFkODdhNjg5ZDA5NmUzY2RmNDNhN2Q4NWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArikXBpFvXsEV0gG469C4z+XNb9Yd
jO28nyzL4Go8Ga8n6slyVL2XNPn+dfVSGHUo2qs6rHBynwhTBxobGc9ljjue8ZCH
UoU/h2HE1pHtOfpypvcJAOHFZucHU0K4mphgMZb4oGy4g+WuYWcv4TqcTqF1Xm3c
eFHAmOQnmwo3Jmw607ijO+jL/hzLzTMtd+Vcs6Y6gb23RfZO1rv2bUCKqw4Hyt7y
z1QggYrY2ivovQYG0ytsyBgSFRQmK9q6UN8yLQX/jEY+ARHs+bxlmK0AoxgYtUtv
tOTIQuqeEYLeefrVj50dInPRSYkeGh0lJ9Wm6dboBntL2JXIX5ndjnnrPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOOZAlHLw5Idh6aJ0JbjzfQ6fYXoMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNDVrQ1VjdkRraDJIcG9uUWx1UE45RHA5aGVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzg8MA0G
CSqGSIb3DQEBCwUAA4IBAQBP0vqmheqAot3AsLuAxEAKuVsX9evbAmWDW1I7JCTg
bp7MwxvMZV7p0Xa7SVSvym/C4Sz5QkVHXBpMvyYE28yqnHcK1oUrPaNBeh+zclJ1
KpfbluTm1jbOfUuT5W5fIexfaTI8pv2vQU+NZCt/5sYGUx4Ldc2xRYk6gvEL0u86
99y8lOxOo9paE8c9Jj27v/Ao+UlE6sRXH3V+ipSEu+eMaS38F/cYeWNB+REAHGBA
+m1y64IHlErHbmlr65L5DWdAbA3rzhrpk0PAzY5sw+Ls8J6jAY+aTXm0q3xEtFB0
VivGKtW2Fwg0w6M0GNJWYBmgGcydXsPgeTt+2w8RSmQp
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:28 2026 by rpki-client