Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9INJWIir-O92xztdKfTXHhwh7SY.roa
File: 9INJWIir-O92xztdKfTXHhwh7SY.roa (raw, json)
Hash identifier: 1RWaQE04RtxAUwCxXxbr++cTgU79lz+MtsEtEMoEmHc=
Subject key identifier: F4:83:49:58:88:AB:F8:EF:76:C7:3B:5D:29:F4:D7:1E:1C:21:ED:26
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0BA77CD89FE3D9879AA8722A7B8AAF6FE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9INJWIir-O92xztdKfTXHhwh7SY.roa
Signing time: Sat 19 Sep 2026 16:20:08 +0000
ROA not before: Sat 19 Sep 2026 16:20:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36680
IP address blocks: 31.56.19.0/24 maxlen: 24
31.57.184.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:77:cd:89:fe:3d:98:79:aa:87:22:a7:b8:aa:f6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 19 16:20:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f483495888abf8ef76c73b5d29f4d71e1c21ed26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:7b:ba:af:26:1e:04:71:f9:99:54:d7:1c:
9a:c8:f4:f1:a1:d6:67:46:59:2f:9e:3f:de:b1:7c:
54:d1:35:84:7f:ec:03:9f:72:ea:4f:a9:04:c4:f6:
10:cf:69:38:b5:8a:ec:fd:5c:37:af:0e:bc:6b:ad:
58:01:12:76:40:dc:02:f9:3b:8a:28:3d:fc:d4:4f:
44:46:91:7a:86:e3:af:5a:3a:32:6c:26:ef:75:7e:
8e:95:ac:8d:8a:2e:f4:9e:13:b7:f8:91:24:d6:4b:
94:11:95:09:33:40:b6:59:fa:f8:10:bd:42:b1:db:
79:df:04:25:e3:b9:c1:98:eb:43:6d:91:45:51:25:
ec:8b:71:00:96:07:e0:52:ff:32:88:57:e5:4a:04:
aa:01:cb:4f:6e:c9:41:a4:91:49:c2:77:56:f0:59:
98:e0:76:55:ce:ec:5a:23:61:1b:4c:0b:26:c5:a4:
ae:56:12:7e:b1:2d:3a:59:51:9b:4f:8c:89:39:ba:
14:0c:bc:f1:85:fe:f7:89:54:32:61:bc:94:92:50:
23:c8:a3:dd:3f:ef:8f:58:dd:35:b6:4a:c0:8f:3b:
ae:72:f3:30:88:2b:50:53:5b:a2:e7:12:81:f2:71:
a0:1f:ed:00:41:74:eb:87:91:2e:9d:f6:ed:02:29:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:83:49:58:88:AB:F8:EF:76:C7:3B:5D:29:F4:D7:1E:1C:21:ED:26
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9INJWIir-O92xztdKfTXHhwh7SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.19.0/24
31.57.184.0/24
31.57.216.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ef:6d:59:78:33:6f:87:fc:ce:fa:96:7b:fa:30:b6:ef:a3:
0f:e4:c3:90:4d:9d:e8:3c:77:f0:be:41:25:60:19:49:e2:c3:
5c:1f:4b:8a:03:ae:12:06:4b:45:31:0f:8e:31:f6:d0:5d:e2:
f6:c0:3e:c0:12:3e:66:1c:0f:1e:a9:77:a3:73:7a:2d:de:31:
84:62:8b:28:53:6a:2c:97:eb:75:74:1c:1b:7d:96:df:43:f4:
46:05:75:19:fd:ec:26:e7:33:6b:4e:60:88:15:cb:d5:43:f5:
09:94:1a:0b:dd:de:bd:d0:c0:23:df:92:10:a9:eb:98:3d:ae:
69:92:83:cd:80:51:b5:20:ec:d8:25:87:7f:e7:01:ab:5a:2f:
9f:f9:0c:78:83:a8:6d:d8:e8:3e:53:33:58:b7:b9:5b:55:da:
a7:71:54:ec:ed:11:10:c1:5b:1c:72:6a:2c:16:77:b5:7e:31:
a8:62:82:5b:4e:a9:03:3b:cf:c6:1c:43:f6:e2:b6:0e:a5:b5:
6c:a0:6b:49:eb:43:ba:bf:8b:80:47:46:63:e2:37:ef:06:ed:
b6:2e:6c:65:62:6b:32:d8:dd:28:2f:e0:87:58:ff:e0:ba:40:
6b:1d:60:38:ce:58:7a:36:de:db:8f:07:b4:c8:fd:b0:17:3c:
00:e6:36:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:35 2026 by rpki-client