Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D8zT0wlOFFrOsv2VS0H3_ien3ig.roa
File: D8zT0wlOFFrOsv2VS0H3_ien3ig.roa (raw, json)
Hash identifier: Cmoa0pGKqdzM1mjjnTve8GfYGuoG4iPn8WXvUWO5kcA=
Subject key identifier: 0F:CC:D3:D3:09:4E:14:5A:CE:B2:FD:95:4B:41:F7:FE:27:A7:DE:28
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A06886D50DA4E1623ECA8CAC52082BC1C5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D8zT0wlOFFrOsv2VS0H3_ien3ig.roa
Signing time: Thu 03 Sep 2026 18:27:41 +0000
ROA not before: Thu 03 Sep 2026 18:27:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197974
IP address blocks: 31.56.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:86:d5:0d:a4:e1:62:3e:ca:8c:ac:52:08:2b:c1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 3 18:27:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fccd3d3094e145aceb2fd954b41f7fe27a7de28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:48:36:73:f6:67:bb:2f:0a:8b:e9:ad:92:
ce:64:7d:66:49:47:17:05:28:ee:45:5e:5b:87:af:
96:f0:2b:46:71:5f:3e:1f:e6:9f:ae:a6:72:42:79:
c7:90:b6:51:25:d1:1d:bd:ba:da:24:e4:71:b6:ae:
2a:93:36:42:d9:90:19:3b:39:0d:85:97:da:75:cb:
c3:67:97:70:44:af:c4:cd:82:e6:db:f3:d9:93:a6:
eb:6a:80:60:af:72:81:81:5d:71:37:cf:42:a3:0d:
b9:90:14:1f:68:38:f3:58:c0:8d:90:a6:d1:91:e9:
37:3e:4a:f8:70:db:99:30:0b:9e:d9:0b:ee:5b:6e:
88:1a:a2:ae:3d:b9:54:f5:47:ae:aa:31:9f:42:14:
49:30:10:c2:bb:0f:43:ee:ca:71:e7:5a:68:f7:6c:
9c:fc:05:1a:42:fa:3a:10:e4:c5:91:6e:13:79:cb:
80:f1:1c:9d:47:51:32:68:94:b2:44:17:8a:ba:eb:
4b:27:ff:54:1c:45:ae:5f:84:f0:00:a2:58:5c:1a:
d2:d8:4a:1c:6d:d5:da:4e:ea:36:1a:2c:8c:35:38:
e2:56:c7:ef:07:11:be:87:74:69:ff:60:f0:44:9d:
66:69:34:b7:df:f8:e9:c0:25:86:0c:20:20:45:7c:
43:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CC:D3:D3:09:4E:14:5A:CE:B2:FD:95:4B:41:F7:FE:27:A7:DE:28
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D8zT0wlOFFrOsv2VS0H3_ien3ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.54.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:90:d4:a2:6a:df:7f:9c:92:09:2b:68:57:76:da:c1:b1:df:
40:93:74:66:b4:20:20:ba:75:fb:f0:37:73:da:ea:c2:6c:c1:
fe:00:94:ad:3d:93:91:48:2f:98:b2:1f:b6:08:f5:c2:08:d6:
a1:69:71:08:4f:8c:63:47:6a:3c:44:e0:75:d1:06:fd:1d:90:
6d:1c:6d:31:95:25:db:08:19:a3:8d:30:d1:31:0f:b7:e3:5d:
54:c0:76:fe:fb:2a:bc:56:2b:70:78:e9:f4:5c:5d:00:34:78:
9d:4b:0e:5e:f0:41:79:21:92:ba:a3:4f:51:56:b3:42:b2:92:
e7:3d:00:cc:fd:35:41:ab:7b:29:e2:d5:b9:84:1a:38:67:87:
8f:c1:f8:f2:66:98:91:62:23:8d:de:2f:87:4e:16:89:08:7e:
86:12:ac:a7:9d:be:21:26:af:b1:32:39:88:ef:65:4b:31:00:
0f:0b:93:88:20:f7:dc:75:84:fd:e1:b4:7e:13:b7:38:1a:40:
7f:73:08:ba:ee:59:7b:3b:43:de:07:7b:8b:fb:0d:1c:99:89:
24:87:a1:eb:ca:86:71:1a:61:da:45:97:7e:b8:2d:33:8c:28:
4d:e8:8a:87:be:92:78:17:72:8f:53:18:44:54:46:55:b0:51:
0a:f0:50:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBohtUNpOFiPsqMrFIIK8HFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTAzMTgyNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmNjZDNkMzA5NGUxNDVhY2ViMmZkOTU0YjQxZjdmZTI3YTdkZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTRINnP2Z7svCovprZLOZH1mSUcX
BSjuRV5bh6+W8CtGcV8+H+afrqZyQnnHkLZRJdEdvbraJORxtq4qkzZC2ZAZOzkN
hZfadcvDZ5dwRK/EzYLm2/PZk6braoBgr3KBgV1xN89Cow25kBQfaDjzWMCNkKbR
kek3Pkr4cNuZMAue2QvuW26IGqKuPblU9UeuqjGfQhRJMBDCuw9D7spx51po92yc
/AUaQvo6EOTFkW4TecuA8RydR1EyaJSyRBeKuutLJ/9UHEWuX4TwAKJYXBrS2Eoc
bdXaTuo2GiyMNTjiVsfvBxG+h3Rp/2DwRJ1maTS33/jpwCWGDCAgRXxDHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA/M09MJThRazrL9lUtB9/4np94oMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRDh6VDB3bE9GRnJPc3YyVlMwSDNfaWVuM2lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHzg2MA0G
CSqGSIb3DQEBCwUAA4IBAQClkNSiat9/nJIJK2hXdtrBsd9Ak3RmtCAgunX78Ddz
2urCbMH+AJStPZORSC+Ysh+2CPXCCNahaXEIT4xjR2o8ROB10Qb9HZBtHG0xlSXb
CBmjjTDRMQ+3411UwHb++yq8VitweOn0XF0ANHidSw5e8EF5IZK6o09RVrNCspLn
PQDM/TVBq3sp4tW5hBo4Z4ePwfjyZpiRYiON3i+HThaJCH6GEqynnb4hJq+xMjmI
72VLMQAPC5OIIPfcdYT94bR+E7c4GkB/cwi67ll7O0PeB3uL+w0cmYkkh6HryoZx
GmHaRZd+uC0zjChN6IqHvpJ4F3KPUxhEVEZVsFEK8FAo
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:17 2026 by rpki-client