Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BnD8-CAAQK9Lx4snTzOzDJCIvos.roa
File: BnD8-CAAQK9Lx4snTzOzDJCIvos.roa (raw, json)
Hash identifier: 3J6lmH2wdzwwLWMjOA2sAygZXP+wfgbhoT0FmSo3DjU=
Subject key identifier: 06:70:FC:F8:20:00:40:AF:4B:C7:8B:27:4F:33:B3:0C:90:88:BE:8B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A042060CE768C0FD89564421940622FD4D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BnD8-CAAQK9Lx4snTzOzDJCIvos.roa
Signing time: Thu 27 Aug 2026 07:01:27 +0000
ROA not before: Thu 27 Aug 2026 07:01:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 31.57.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:06:0c:e7:68:c0:fd:89:56:44:21:94:06:22:fd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 27 07:01:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0670fcf8200040af4bc78b274f33b30c9088be8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:4d:39:d7:65:90:24:15:76:6f:7a:4e:7e:
4b:d1:d2:f2:77:73:79:98:64:0c:57:8a:a1:c3:5f:
ac:96:c8:23:ed:52:ec:fe:43:9f:03:aa:b9:72:b2:
89:28:98:c4:5b:4b:fe:6a:7c:4a:4f:d3:93:7c:f7:
ec:b9:4e:5c:17:a0:4b:21:bd:cb:9a:af:d9:bc:79:
8f:4a:43:e6:27:cd:87:70:91:81:3b:03:28:01:e6:
84:fa:39:4c:34:94:20:48:48:63:19:52:18:5b:44:
1b:0f:9f:0d:9e:b0:14:d6:4f:14:5f:c7:0c:3d:36:
9a:ab:54:db:17:a1:a9:27:89:81:9e:54:d3:7c:18:
3d:dd:4e:c1:74:88:42:b2:cb:51:8f:4f:ad:79:4e:
90:fb:47:08:4a:19:e9:a2:aa:4e:10:16:c6:73:1b:
9d:d3:6a:bb:51:45:61:4e:bb:a4:e8:31:ec:b2:5e:
b5:ce:5a:54:db:77:3a:6a:39:e7:6e:bd:77:dc:71:
fb:30:43:f7:6a:4c:42:6b:f1:5d:fc:cc:96:d9:c0:
30:12:98:e3:20:54:9b:60:a7:16:04:cf:2f:ce:78:
56:02:34:f5:f3:45:19:c3:0d:a3:46:8b:37:59:81:
ef:a2:9c:f0:af:db:d0:0e:0b:1c:89:c8:5a:d5:60:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:70:FC:F8:20:00:40:AF:4B:C7:8B:27:4F:33:B3:0C:90:88:BE:8B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BnD8-CAAQK9Lx4snTzOzDJCIvos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.7.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2e:d2:0d:2d:a7:9d:06:ac:9e:05:e3:36:c3:93:fa:e5:67:
a0:e0:0d:9d:b2:b4:5c:24:d4:1f:f0:45:58:3d:c7:b7:92:88:
fc:ed:f4:50:f9:d0:30:c9:65:ee:c4:1d:f3:08:cd:a9:1a:50:
d0:53:34:3c:bb:68:47:a5:5d:65:44:a7:a8:84:ad:ca:58:c2:
91:7b:ac:4f:8b:17:b8:fe:3b:cd:e4:1b:08:6d:91:26:b7:c8:
b7:76:c5:00:63:b6:db:4d:52:b6:74:2a:e2:dd:16:e2:28:b1:
96:3b:c5:fe:5f:85:9f:bf:60:d8:55:6a:b0:33:d0:5b:cc:1d:
9f:fb:72:18:bd:0b:60:6d:c8:96:4e:a2:4e:4d:40:ca:cc:7b:
bb:14:83:1b:2b:76:0f:22:11:fe:15:5d:49:a2:b9:73:8f:5a:
39:8e:35:97:b6:d5:3d:10:83:68:bb:b8:d7:89:0f:29:6c:2f:
ef:98:04:b8:05:a8:15:b8:d2:f2:0b:db:e9:c5:d9:ca:e9:9d:
52:ef:97:e5:4a:e1:7b:fb:4b:3a:a5:5c:ff:53:01:76:4f:09:
a5:aa:ba:fb:00:c7:eb:ea:33:f3:4b:40:98:99:79:69:26:ea:
c9:b7:05:0e:a6:bb:1b:35:15:f4:dc:34:0a:45:95:8f:1f:c5:
0d:23:7c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:06 2026 by rpki-client