Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8XfIJbPhUldu_In3jq0dvYHzeuY.roa
File: 8XfIJbPhUldu_In3jq0dvYHzeuY.roa (raw, json)
Hash identifier: 6YLNdxgldw3qlckKm1NmMevypDxc/2NYmyVAJLzlvdA=
Subject key identifier: F1:77:C8:25:B3:E1:52:57:6E:FC:89:F7:8E:AD:1D:BD:81:F3:7A:E6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A05442B57DB526DB255B2481A81CA3F397
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8XfIJbPhUldu_In3jq0dvYHzeuY.roa
Signing time: Sun 30 Aug 2026 20:00:53 +0000
ROA not before: Sun 30 Aug 2026 20:00:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 31.56.87.0/24 maxlen: 24
31.56.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:54:42:b5:7d:b5:26:db:25:5b:24:81:a8:1c:a3:f3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 30 20:00:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f177c825b3e152576efc89f78ead1dbd81f37ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:18:37:3d:1e:9f:90:c7:31:d5:11:2d:fd:
7a:60:64:d5:65:3a:55:8f:be:70:00:07:98:d4:ed:
4a:e2:02:a7:00:d7:1b:36:bc:6a:08:7e:ae:d3:b7:
92:50:83:66:4b:96:65:c3:2b:02:7a:5d:4b:a5:1c:
b6:6f:ad:b7:09:51:be:67:84:d7:61:72:de:20:69:
38:3a:a1:43:3a:39:d5:3f:29:c9:73:15:a8:50:2a:
31:46:24:32:2c:9f:24:8b:e8:0a:ed:4b:21:4c:5d:
b5:f1:8b:49:47:bc:59:33:b9:e1:e1:e2:04:ed:ff:
be:e1:c8:dc:8c:74:13:76:e9:03:96:ad:5b:a5:26:
ec:eb:45:9a:8d:29:bf:bd:01:c7:d4:b8:8f:6c:e2:
4d:67:bb:23:33:e1:ee:66:17:8d:c5:b7:be:c7:b8:
4f:44:58:98:e5:61:d0:a0:52:47:00:ce:3c:e9:9b:
69:e7:66:25:38:b7:2b:5b:51:cb:27:37:52:55:e8:
dc:64:6f:13:d7:66:0d:a5:fb:c2:07:03:d7:8e:8d:
d8:a8:90:c2:a0:5c:30:9f:67:c7:4b:3e:d0:ef:a5:
53:1d:f8:72:a5:cb:f4:1c:36:a7:2f:18:fc:bb:e5:
a5:b8:0f:fd:76:b8:30:fa:38:81:f1:f4:5f:a9:f3:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:77:C8:25:B3:E1:52:57:6E:FC:89:F7:8E:AD:1D:BD:81:F3:7A:E6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8XfIJbPhUldu_In3jq0dvYHzeuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.87.0/24
31.56.91.0/24
Signature Algorithm: sha256WithRSAEncryption
04:5f:f7:c1:27:56:66:13:46:c6:56:df:2e:7e:31:9d:39:8f:
3f:e3:93:15:ca:b1:c5:92:ba:96:63:c9:c0:6e:4f:3d:56:91:
4d:75:89:2a:24:f1:ee:bb:5d:29:2d:03:4f:2b:55:73:27:4d:
27:1d:15:29:f6:19:31:a8:41:75:4d:7e:80:0b:8f:56:10:93:
ee:76:56:47:e4:8b:d5:fd:7a:54:5f:61:87:62:fd:0e:50:e9:
0c:35:0e:ad:f2:6f:89:70:14:ae:bd:a3:9a:99:37:af:43:d1:
6e:85:fe:66:cb:8d:7a:35:f5:fb:20:46:aa:d4:fc:21:0b:05:
88:ba:ff:be:51:d7:78:eb:c6:0d:42:75:7c:9a:5e:d6:eb:af:
2e:8f:90:52:e1:74:00:63:fa:cd:02:11:76:b9:b8:6a:a6:c8:
43:91:f7:c6:59:79:68:42:04:6a:59:5b:a1:d5:00:22:b3:48:
05:da:c1:65:cb:de:3d:bd:2e:64:20:b6:48:a0:2e:12:8e:38:
84:e2:3b:a0:91:04:9d:39:ac:7c:28:89:91:b4:0d:ec:db:a4:
fd:e2:d2:07:32:ad:4a:88:f2:49:c4:e9:c0:56:d2:64:8e:22:
dc:27:30:0e:5c:66:25:b0:ad:03:db:a2:b5:4f:9e:ee:7d:06:
4e:e7:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:06:37 2026 by rpki-client