Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I6tRTM2rVz6uwLoU_ZNQKc-Amc0.roa
File: I6tRTM2rVz6uwLoU_ZNQKc-Amc0.roa (raw, json)
Hash identifier: cIesRRmL799B2k1FlIIYZkpo+azksJqc4833CNHJm/4=
Subject key identifier: 23:AB:51:4C:CD:AB:57:3E:AE:C0:BA:14:FD:93:50:29:CF:80:99:CD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E9E56D5350D6DD8BA75FEF1E385E149F5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I6tRTM2rVz6uwLoU_ZNQKc-Amc0.roa
Signing time: Sat 06 Jun 2026 19:09:11 +0000
ROA not before: Sat 06 Jun 2026 19:09:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63793
IP address blocks: 31.56.97.0/24 maxlen: 24
31.59.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9e:56:d5:35:0d:6d:d8:ba:75:fe:f1:e3:85:e1:49:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 6 19:09:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23ab514ccdab573eaec0ba14fd935029cf8099cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:2b:21:91:f3:bd:e2:a2:87:e0:b8:4b:f0:
1a:60:5c:3a:b4:5b:f3:3e:17:87:aa:85:08:7f:61:
1c:52:72:2e:d3:35:dc:6a:78:bb:21:4d:29:32:37:
99:4d:79:61:1d:ae:08:00:61:4b:53:00:e7:52:e5:
1a:f8:02:03:ad:14:33:7b:6b:03:0e:47:d9:22:31:
b2:67:c6:86:a7:f5:f7:b9:2b:cf:14:10:d0:5e:c1:
91:da:76:fa:3c:82:75:cb:c2:ec:dd:25:9c:15:2c:
89:70:93:60:1c:88:46:be:6a:ec:9b:a5:bb:3e:1d:
d9:1e:99:35:05:a1:4c:8d:7d:1d:07:80:60:e9:56:
c6:f9:90:54:36:02:1e:55:d7:e4:03:7b:88:6c:c1:
06:5f:7e:6c:2c:45:b8:bd:67:91:8d:6e:3b:8c:96:
6c:e8:b3:c0:d5:0e:4f:6b:c7:ed:b7:f2:cb:be:58:
4d:67:ab:ed:67:ea:be:6e:0f:db:d4:9b:09:a0:e2:
24:d8:a7:fc:2e:20:7d:86:6d:07:ec:6f:4e:c1:81:
34:1c:43:10:cf:47:87:2f:7a:e8:6f:82:32:df:e7:
83:c8:b5:e7:eb:d3:96:2d:d6:1e:ff:29:c3:36:d8:
ca:ab:e0:a3:02:ad:77:70:c8:f5:8f:34:c5:22:3b:
60:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AB:51:4C:CD:AB:57:3E:AE:C0:BA:14:FD:93:50:29:CF:80:99:CD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I6tRTM2rVz6uwLoU_ZNQKc-Amc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.97.0/24
31.59.74.0/24
Signature Algorithm: sha256WithRSAEncryption
57:cb:86:66:f9:34:63:68:59:17:e1:88:25:14:fe:f6:82:ad:
8b:e8:3b:6a:8a:c1:60:f9:4a:e0:8e:e3:c7:6f:1a:4f:e4:a7:
6d:61:21:c9:0b:c2:f0:f2:e8:77:b3:e5:ae:04:0d:d8:6a:4c:
99:f6:b6:09:7e:ff:b0:76:df:20:0d:a8:ce:86:48:bc:54:93:
2a:ed:82:69:78:65:0e:7b:6d:10:20:60:d0:33:88:5f:ea:9f:
3d:f4:50:2d:38:6e:d2:d4:76:c4:06:a8:ce:a7:03:d9:c1:5b:
3e:2b:57:b8:26:50:ae:c1:81:e7:2e:7b:ed:9e:c0:e1:6d:71:
10:62:44:ac:9a:2e:29:0b:31:d3:d6:b8:9b:55:6a:8b:93:fe:
2b:c8:ad:fd:f8:f7:89:84:2a:75:88:1e:d0:47:92:32:e0:80:
8a:53:ff:e8:b3:c4:1d:82:e6:08:00:a2:e5:7b:6d:b6:41:d8:
ad:2d:16:73:e3:60:98:84:f7:4d:cd:a7:56:e0:b1:e7:25:1c:
b7:46:9e:ab:93:89:ec:cc:85:ad:eb:f1:cf:25:2c:54:e4:17:
f2:b0:77:47:e8:35:7a:d7:b0:59:64:42:95:c2:d9:9a:a6:b8:
89:c0:d0:76:ad:d2:d6:7f:92:65:de:55:ae:3c:a5:93:80:e1:
08:9d:da:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:23:03 2026 by rpki-client