Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4jNNkoCMk2LPWb-gtsH_FRGTtas.roa
File: 4jNNkoCMk2LPWb-gtsH_FRGTtas.roa (raw, json)
Hash identifier: 27FlHOaFt0XmET5GKD1sQm4kGdjYBxvuZtF3bjWFnto=
Subject key identifier: E2:33:4D:92:80:8C:93:62:CF:59:BF:A0:B6:C1:FF:15:11:93:B5:AB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D91D70764673E331B0BECF427A934E7B6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4jNNkoCMk2LPWb-gtsH_FRGTtas.roa
Signing time: Wed 15 Apr 2026 15:51:21 +0000
ROA not before: Wed 15 Apr 2026 15:51:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26769
IP address blocks: 31.57.45.0/24 maxlen: 24
31.57.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:d7:07:64:67:3e:33:1b:0b:ec:f4:27:a9:34:e7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 15 15:51:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2334d92808c9362cf59bfa0b6c1ff151193b5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4f:0f:3f:ac:66:37:83:2a:a1:e2:8d:bf:f8:
91:68:fc:64:7b:a6:14:98:d3:c5:22:ca:55:a7:2e:
8e:f4:90:ff:f8:51:c2:14:20:c8:be:ef:c8:22:af:
97:fd:01:24:b6:35:08:83:68:50:af:b7:c8:10:3f:
b6:b9:28:9e:5c:4d:a1:fd:9e:a3:b8:4a:e3:9f:c4:
7c:92:bc:ff:57:c9:40:8d:5a:a4:67:06:75:b6:82:
4a:53:95:f2:cd:ea:15:19:3d:6f:0f:89:7c:59:68:
68:5c:c8:0d:be:ae:d6:71:4e:69:1c:e7:b3:87:69:
0c:0e:15:ca:4c:4e:3f:8f:cf:ba:bd:ca:81:b7:a2:
ab:fe:54:5c:ce:f9:a6:19:f1:b7:2d:eb:dc:f5:32:
8b:cb:98:a0:0a:19:3b:56:55:9c:51:57:5f:3f:af:
16:5c:fc:f8:1f:37:4a:fd:19:74:86:66:24:4b:f8:
db:e3:6d:1c:ce:98:2e:ad:f0:05:37:a6:b3:66:00:
68:83:2f:15:ec:b8:35:05:35:db:7c:bb:93:cf:7f:
59:ae:6b:58:81:d4:45:97:e9:ad:7d:23:4a:5a:ef:
63:88:05:90:06:ba:7c:c4:e1:68:0d:d5:13:77:d1:
4b:0e:07:1a:4d:b4:0c:9c:13:b5:f3:af:91:a0:b1:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:33:4D:92:80:8C:93:62:CF:59:BF:A0:B6:C1:FF:15:11:93:B5:AB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4jNNkoCMk2LPWb-gtsH_FRGTtas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.45.0/24
31.57.160.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b6:79:a0:8f:0b:6e:f7:a2:3d:61:ef:43:63:58:5a:d5:09:
8d:79:57:f0:3e:d6:df:91:c3:42:18:a8:f7:20:d8:e1:fc:45:
d9:e5:ba:73:ae:ba:a6:9d:7e:16:dc:56:f1:4d:08:58:eb:d2:
bd:ed:3f:12:a4:8d:3a:4f:17:d0:5a:eb:4e:53:c6:e5:a7:7d:
fd:18:c3:16:1a:92:e5:eb:9e:d1:bb:7b:c8:0c:bc:c4:1f:80:
99:c9:c1:a8:9f:3e:36:2d:16:df:0e:c2:e6:fd:8b:24:f5:2a:
88:02:85:1b:c1:9c:2e:4d:93:91:f1:14:cd:ba:a6:7f:3c:de:
ab:18:81:c1:5a:a1:35:8d:ff:13:72:b0:de:a6:08:7f:45:12:
91:ad:21:05:aa:f2:7b:6b:b9:e0:82:6a:30:f5:e7:f3:8e:e3:
5f:9d:6d:d8:85:f4:9b:01:b0:16:49:e0:f0:dd:be:c3:b6:b3:
a7:82:77:fb:89:c4:2f:f1:92:ed:6a:2d:46:02:ba:4a:88:3d:
2d:ad:3e:5e:af:e8:a4:da:73:55:8f:94:50:cd:01:f0:f9:cc:
7c:76:6c:9e:03:90:02:13:e0:ed:34:36:c2:ba:36:a7:49:7d:
d2:9f:38:ab:18:14:63:e0:00:a5:80:51:8d:bf:7f:d4:8a:99:
1c:12:c0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:53:56 2026 by rpki-client