Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6VaaBsuTFDH5qfA6NCzwsw15V28.roa
File: 6VaaBsuTFDH5qfA6NCzwsw15V28.roa (raw, json)
Hash identifier: pzyHoiaGu0kAyr/Zj/xUVQs0yGwJN4i21hqq8zzovDc=
Subject key identifier: E9:56:9A:06:CB:93:14:31:F9:A9:F0:3A:34:2C:F0:B3:0D:79:57:6F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A07CCF047F5D73527DC9D0DAD96966DE1D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6VaaBsuTFDH5qfA6NCzwsw15V28.roa
Signing time: Mon 07 Sep 2026 16:58:56 +0000
ROA not before: Mon 07 Sep 2026 16:58:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205245
IP address blocks: 31.57.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:cf:04:7f:5d:73:52:7d:c9:d0:da:d9:69:66:de:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 7 16:58:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9569a06cb931431f9a9f03a342cf0b30d79576f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:c3:d0:ac:b8:31:b1:59:77:5f:e7:b9:46:
81:59:76:a9:96:a4:2a:29:36:88:c4:d6:ac:a2:f6:
46:90:f9:4f:04:4a:df:0c:2c:61:66:2b:10:e6:77:
be:a0:96:5b:66:cf:d6:50:7b:71:a7:ff:72:9d:2a:
06:99:02:c3:40:eb:d5:fe:9f:21:12:bb:91:b7:ec:
16:c5:c0:79:c3:1e:f2:88:54:16:81:36:a1:70:0c:
6f:57:c9:bd:5e:39:84:0e:4b:63:7a:8b:f1:5f:26:
ca:ce:48:ea:38:c5:80:a4:3a:b2:a8:ec:4f:7e:bc:
34:eb:e6:11:55:46:21:e6:93:1c:39:9a:22:c5:dc:
86:7d:ef:5d:b7:b4:3d:75:3f:fb:6b:f7:67:84:4f:
2a:ff:43:97:1b:09:99:bd:08:e5:20:af:38:92:42:
8c:e1:25:d7:e1:f0:ac:df:c2:12:bf:bc:46:ec:55:
3b:51:46:0e:f9:1c:b7:56:a8:14:0c:99:c3:ae:84:
04:fa:da:d5:5d:25:b3:f1:85:9e:41:1a:16:9b:a9:
db:41:10:0c:d3:4f:c5:fe:28:a8:17:86:bd:2c:8a:
cf:3f:05:5a:50:91:9b:99:84:1f:5a:16:63:a8:7e:
91:39:fd:c8:4f:be:fa:bb:73:ba:36:c6:64:16:2d:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:56:9A:06:CB:93:14:31:F9:A9:F0:3A:34:2C:F0:B3:0D:79:57:6F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6VaaBsuTFDH5qfA6NCzwsw15V28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.138.0/24
Signature Algorithm: sha256WithRSAEncryption
23:70:84:dd:d1:1f:1e:9b:a2:02:f2:72:e6:98:a5:d4:5b:41:
12:af:0e:7e:f5:c8:48:00:a6:bd:da:23:c8:f3:74:10:4c:45:
aa:4a:3d:7b:ec:50:50:91:41:41:48:9c:42:e3:e9:ae:0f:f9:
dd:54:7e:ec:77:e8:90:6a:27:0c:d7:8d:4a:f0:fe:7c:72:b0:
cf:eb:a3:26:b4:60:db:58:4f:37:ef:3f:3a:10:c6:6c:f7:65:
5b:73:86:67:f5:d7:ff:cf:51:48:14:58:a6:d1:70:eb:36:50:
df:ca:41:39:89:84:17:b8:e9:6c:db:19:74:f0:98:17:65:3f:
2f:5e:22:a0:2b:72:e2:cc:5d:3e:0a:3e:bb:14:85:b7:da:91:
63:58:de:53:12:69:83:ec:13:8c:52:62:eb:a0:51:84:da:7d:
6a:82:34:27:7e:76:bf:ae:01:c1:b9:bc:9f:04:ed:05:09:fb:
ce:f4:cf:44:38:e8:a1:f0:44:a3:48:bd:ca:d9:8f:6b:c4:d1:
48:cb:3e:de:cf:c7:b6:44:40:21:3c:ec:e0:14:fa:4c:a7:7c:
fd:ba:6a:bc:91:6c:e7:d3:01:a0:74:02:7a:b2:84:84:44:5d:
a2:19:fd:98:7c:c1:35:66:0a:1f:fa:b8:e3:33:8f:ab:cd:70:
8d:12:da:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:53 2026 by rpki-client