Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FxYEnfI4_9D3UifliHI89JSpH10.roa
File: FxYEnfI4_9D3UifliHI89JSpH10.roa (raw, json)
Hash identifier: ny899yOgERO4ENgdDILnCfvuddpIBsExexz3PM9KBxc=
Subject key identifier: 17:16:04:9D:F2:38:FF:D0:F7:52:27:E5:88:72:3C:F4:94:A9:1F:5D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A07CCF059014B78A2C9BC24CC6E3825C7A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FxYEnfI4_9D3UifliHI89JSpH10.roa
Signing time: Mon 07 Sep 2026 16:58:57 +0000
ROA not before: Mon 07 Sep 2026 16:58:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210507
IP address blocks: 31.57.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:cf:05:90:14:b7:8a:2c:9b:c2:4c:c6:e3:82:5c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 7 16:58:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1716049df238ffd0f75227e588723cf494a91f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:ef:9b:6b:e5:58:0f:69:d1:87:70:b1:2c:
8f:5a:b4:10:2c:b5:79:2c:1d:81:e0:80:7f:ec:22:
80:c0:a2:8a:e2:da:d0:18:93:3f:2f:f8:12:5d:c3:
e7:b5:9c:ad:f4:9b:d8:9c:c5:81:e7:21:6f:fe:28:
8c:4a:b8:ed:43:54:0c:79:14:19:3b:85:f9:a1:eb:
6c:5c:42:9f:2f:a9:98:50:a5:a4:a4:c4:51:f2:90:
08:ab:39:2f:dd:38:b3:88:33:98:d1:94:10:f1:fc:
e6:f2:1a:29:57:ae:1d:66:65:b8:f3:30:47:b0:2c:
bf:05:66:45:e4:0c:c4:a7:31:4c:b0:e4:51:70:8b:
0e:d6:e7:15:cb:a8:93:d3:1f:dc:ec:37:28:28:ae:
ae:fe:72:1c:54:ff:b0:53:c4:ea:e8:a1:5a:a2:75:
be:57:ee:88:3b:48:78:58:71:4d:c9:40:65:84:7b:
a9:f9:77:b6:03:19:d6:8e:78:cb:ea:77:2f:31:e2:
65:36:57:b7:f5:c1:aa:7c:91:87:db:fe:44:3e:7e:
aa:54:cf:2a:0b:62:03:9b:2b:67:ef:26:e2:0a:db:
35:c3:85:44:be:03:42:f2:c2:ee:69:39:4a:88:96:
1d:f0:09:a5:92:c9:90:df:08:5f:b3:21:ab:c9:35:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:16:04:9D:F2:38:FF:D0:F7:52:27:E5:88:72:3C:F4:94:A9:1F:5D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FxYEnfI4_9D3UifliHI89JSpH10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.137.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:2b:2d:94:50:56:d1:b6:06:6f:41:e5:ec:d3:6d:0b:27:ff:
f0:20:66:17:67:1d:13:c1:32:90:7c:42:cc:24:ca:c3:de:4c:
d2:5c:e7:f1:d2:77:82:8f:47:42:03:d3:dd:33:f1:26:ad:a3:
e8:64:39:e4:73:8b:0d:77:1e:f8:77:a7:8d:c6:d4:07:4f:47:
44:64:58:88:50:47:a9:9f:02:ae:06:29:9d:eb:eb:c9:6b:97:
05:79:f4:4f:dc:3b:e1:5d:fb:87:9d:17:c4:b6:d6:11:f7:7e:
2a:eb:64:cf:1c:89:5e:b5:aa:a7:9a:1d:cd:e7:2a:bf:e2:e8:
b2:0e:bc:bd:48:6f:9f:28:8f:38:62:32:45:f3:45:b6:c9:55:
3b:92:f2:aa:33:52:ea:07:79:c3:c6:6d:74:c9:be:fa:d4:2d:
73:75:a3:30:92:96:94:a2:35:76:cb:e1:e5:85:41:32:14:5b:
e2:c2:f1:46:1d:34:c9:d0:86:74:4d:af:16:55:29:90:a0:02:
78:e4:00:d8:2b:e9:70:48:19:7a:1c:4e:1c:b7:49:3d:ec:04:
38:45:da:39:6f:e3:bb:04:ea:ee:50:f3:8c:f3:7b:ae:0c:e5:
38:ed:07:08:c8:1d:f7:39:2e:98:71:3f:41:e9:82:ba:1e:bf:
1f:0d:da:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:27:28 2026 by rpki-client