Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/H4QdAwHlgNkGLan5Ps3bQ7qRB8E.roa
File: H4QdAwHlgNkGLan5Ps3bQ7qRB8E.roa (raw, json)
Hash identifier: yZwGHMBOQKZgbKmTU2t+EcBJcKBXNlyBlz9RqD4V5rk=
Subject key identifier: 1F:84:1D:03:01:E5:80:D9:06:2D:A9:F9:3E:CD:DB:43:BA:91:07:C1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A08AD77235EFCB0611CBA1199608CD427A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/H4QdAwHlgNkGLan5Ps3bQ7qRB8E.roa
Signing time: Thu 10 Sep 2026 10:22:50 +0000
ROA not before: Thu 10 Sep 2026 10:22:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219064
IP address blocks: 31.56.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:d7:72:35:ef:cb:06:11:cb:a1:19:96:08:cd:42:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 10 10:22:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f841d0301e580d9062da9f93ecddb43ba9107c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:0b:06:09:59:19:af:ca:1b:49:07:9c:e1:
24:41:68:58:d0:95:29:85:93:8c:d3:c3:fa:27:6a:
87:8f:c6:fb:2d:b4:29:7d:d6:86:c4:24:51:10:14:
ea:9b:97:2f:aa:86:b1:b0:37:be:76:e0:f4:2c:92:
82:21:4a:9c:79:df:88:7d:20:15:b2:cf:26:3a:6b:
35:2a:f1:f1:5a:59:01:ee:fb:9a:ea:db:a7:06:4d:
83:8f:81:51:86:24:82:6c:d2:9d:b3:e9:4a:a3:bf:
10:f2:1c:8a:4e:2d:00:f5:7d:35:c8:a4:e1:1f:3e:
56:fd:6d:d5:08:e8:39:28:ae:6a:b2:b8:11:7c:1c:
3e:4e:1d:c1:ca:c5:75:d0:39:10:d6:4d:ad:f6:c5:
15:1e:08:cc:b0:33:67:37:0d:25:05:15:31:32:17:
47:8e:b5:42:e5:c8:85:3c:ef:2f:33:af:e4:98:af:
d7:9c:8b:e6:b9:79:de:b4:45:58:49:ad:13:6c:d7:
cd:20:72:20:2d:44:ae:2c:ae:97:ab:5f:a8:3a:97:
1e:a2:a4:9c:d8:0a:35:e4:df:d7:48:c8:9c:c0:f4:
12:42:4a:ed:b6:bd:c3:29:f2:fe:88:c7:a9:b2:c0:
31:0f:64:f1:11:ec:86:b9:58:c2:f5:7b:7e:9c:b3:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:84:1D:03:01:E5:80:D9:06:2D:A9:F9:3E:CD:DB:43:BA:91:07:C1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/H4QdAwHlgNkGLan5Ps3bQ7qRB8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.184.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:ba:0b:e8:84:e1:47:9d:95:c1:85:42:47:e9:d7:3b:4d:f5:
8d:58:13:4e:fa:c2:28:fd:32:d6:b1:26:54:a1:26:2d:ce:dc:
42:08:4f:88:e8:26:5b:f3:aa:90:e0:0d:02:07:a2:56:4f:0a:
a3:6d:8a:cd:df:09:eb:60:41:47:63:20:de:2e:71:09:dd:5f:
22:b8:3d:c1:ab:48:20:ee:2f:7c:70:6e:1f:b2:c1:17:ed:44:
a0:d3:dd:b8:a2:68:ef:5f:6e:17:11:4e:d1:1c:40:b9:d3:de:
6b:b4:6d:51:4a:ac:38:ad:2a:a6:5b:82:6a:12:91:67:63:38:
a4:dd:66:75:d5:98:63:ad:d6:81:d6:e1:4a:6e:ea:2c:a6:9b:
64:2c:65:bb:67:d4:12:7c:ea:29:2b:42:a2:30:6b:f8:29:c9:
00:a8:6d:e0:a7:e4:56:a8:37:59:a4:b2:5b:b6:59:be:6d:8a:
d5:61:e5:e0:c2:8b:f3:52:83:50:5a:49:39:53:e4:81:bf:6c:
48:25:7a:8c:48:4b:fa:7a:57:93:81:57:7e:44:38:96:ad:92:
2c:1a:18:35:76:43:64:c9:e1:2f:a1:ce:45:95:b5:fe:38:24:
21:b7:af:2d:a1:50:95:87:99:2c:3c:12:23:28:6a:98:95:f0:
ab:e4:05:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:50:42 2026 by rpki-client