Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HHnmZGffFE0dH8JLIrb2H1FlfVY.roa
File: HHnmZGffFE0dH8JLIrb2H1FlfVY.roa (raw, json)
Hash identifier: caxR6iXDkmDMlpm2DoK1EHFk9hTtKmj5oDjWRTYj/Xw=
Subject key identifier: 1C:79:E6:64:67:DF:14:4D:1D:1F:C2:4B:22:B6:F6:1F:51:65:7D:56
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C491451A7A742930F2A7175B1A3A248DD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HHnmZGffFE0dH8JLIrb2H1FlfVY.roa
Signing time: Tue 10 Feb 2026 19:43:14 +0000
ROA not before: Tue 10 Feb 2026 19:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201784
IP address blocks: 31.57.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:49:14:51:a7:a7:42:93:0f:2a:71:75:b1:a3:a2:48:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 10 19:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c79e66467df144d1d1fc24b22b6f61f51657d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:1c:81:09:c3:5f:1f:0d:21:6e:1d:f5:c6:
2b:aa:f1:44:88:86:ba:69:95:4e:6f:bf:eb:86:f4:
34:7b:e6:53:76:8f:11:e0:9b:4a:01:ad:19:c3:52:
6d:4f:06:c9:b5:71:ab:91:77:cb:94:64:3b:f2:2f:
a0:dd:5d:5f:d5:6c:53:57:2c:07:7a:59:28:7a:ea:
7a:a1:f8:1b:74:81:9d:ed:ba:42:75:ce:0f:b0:22:
74:e4:b5:fe:ab:37:8d:8d:fa:5e:1d:ce:30:88:f1:
c5:3f:8d:02:61:82:8d:da:84:0b:46:0a:2c:f3:6e:
3f:34:ea:6d:6d:b7:43:c2:d0:a6:48:d3:0c:6c:9b:
a0:17:3b:47:39:38:96:d2:60:8d:2b:de:c6:6b:16:
90:4e:d0:7c:b1:36:a6:cc:4b:97:87:e3:f3:8b:0a:
cc:3b:39:77:e6:86:79:ba:9a:98:ad:2d:da:fd:ad:
f0:45:fd:37:2d:60:8b:0d:00:10:d9:6a:41:9a:82:
de:2f:02:37:55:86:36:0b:57:13:cb:a3:54:01:83:
15:76:71:d4:10:57:57:ca:a3:cf:46:ac:95:8c:ac:
6d:30:88:85:0c:ba:99:51:4a:c6:46:b1:97:52:4a:
61:3e:f3:4b:c2:9c:9c:f6:59:5d:38:94:4e:8f:bd:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:79:E6:64:67:DF:14:4D:1D:1F:C2:4B:22:B6:F6:1F:51:65:7D:56
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HHnmZGffFE0dH8JLIrb2H1FlfVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.168.0/23
Signature Algorithm: sha256WithRSAEncryption
35:21:c5:d6:ff:15:5f:f3:85:90:7e:be:62:7c:95:14:49:04:
0f:fd:0a:0e:25:d4:19:05:d9:e6:70:c3:f2:db:4b:02:df:b8:
b9:b2:1f:ba:25:a6:3d:6e:ea:0c:68:87:06:ff:fe:ab:c1:1b:
83:92:66:20:93:d4:81:c4:92:c2:3f:36:8a:b6:22:42:c4:e4:
f2:3f:06:7b:c3:0f:4d:76:34:d4:e3:8f:f0:43:c4:4c:0d:8a:
54:04:a4:cb:83:0d:60:db:f9:51:e9:02:be:74:27:25:9b:63:
87:b4:59:9c:6f:a9:3f:72:9c:f5:4f:b4:58:5b:5a:23:1d:db:
1c:8f:ad:72:bc:61:d3:f1:d3:30:4b:30:38:10:fa:ce:03:f4:
30:e5:2f:b5:eb:90:ea:22:ca:48:71:b1:e5:f7:d7:93:d7:33:
9f:88:cc:81:1f:bb:8d:7e:ae:05:d8:04:b2:77:2f:20:84:9c:
ec:3e:3e:d1:df:85:8f:ea:98:ff:70:8a:45:5c:0d:e5:61:4a:
9d:2a:c5:2c:1d:ee:72:2d:2c:57:62:04:46:e7:c2:03:65:31:
02:37:c1:33:25:0b:1d:7f:8a:68:c9:ed:34:48:4f:5e:d5:1a:
78:a5:7b:9b:36:31:82:73:49:b5:93:59:02:43:bb:f9:82:e3:
2b:58:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:56:50 2026 by rpki-client