Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Jzjndv-_dQA61saHKhh3b_vYpWo.roa
File: Jzjndv-_dQA61saHKhh3b_vYpWo.roa (raw, json)
Hash identifier: QlGbBPS5FQLOIhqFIhLo8FMGU6MH1jCw+vbuetrQ0hU=
Subject key identifier: 27:38:E7:76:FF:BF:75:00:3A:D6:C6:87:2A:18:77:6F:FB:D8:A5:6A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E9D6C775F8DD7BE9187A65FFB9596E06B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Jzjndv-_dQA61saHKhh3b_vYpWo.roa
Signing time: Sat 06 Jun 2026 14:53:11 +0000
ROA not before: Sat 06 Jun 2026 14:53:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203075
IP address blocks: 31.56.79.0/24 maxlen: 24
31.56.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:6c:77:5f:8d:d7:be:91:87:a6:5f:fb:95:96:e0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 6 14:53:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2738e776ffbf75003ad6c6872a18776ffbd8a56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:91:12:60:7c:7a:d1:2f:9e:aa:bd:8f:36:
a9:d0:ff:89:69:30:44:e4:19:a2:1e:9b:14:ea:61:
83:31:7c:ca:df:22:13:a9:b6:2d:83:39:5c:56:cd:
89:69:24:e5:e6:84:5f:c2:a5:30:e6:c9:35:91:77:
8f:05:72:ae:e6:82:e4:e6:3c:2d:9e:70:cf:f5:07:
1b:34:23:df:fa:48:5b:ce:c2:f7:9d:91:f2:ea:0e:
72:de:13:d9:ea:7d:80:6e:42:5b:c9:ac:26:fd:fe:
1a:ac:d3:61:39:ac:92:ba:67:71:9d:2b:3f:94:16:
22:ba:2c:d6:94:0b:00:aa:b7:2a:d6:ef:db:b4:f9:
fb:81:e9:96:df:1d:d2:92:57:75:70:26:0e:c0:04:
e6:01:19:3d:6c:d5:3f:85:7f:33:21:ce:46:6b:78:
5d:e0:42:c5:57:ac:c9:7e:dc:f2:ce:bd:69:40:55:
6e:02:13:92:7d:6f:20:c5:17:34:1a:21:39:08:7a:
d1:b6:d5:49:4c:45:e7:b7:a8:1e:4a:b1:d7:56:6d:
ca:96:ce:85:de:18:2d:8f:43:c5:af:80:b6:60:b4:
6e:1b:ae:00:16:0e:77:46:49:6f:6a:05:42:d8:67:
fa:7a:1f:00:24:ae:ac:0d:76:1e:ce:db:29:fc:07:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:38:E7:76:FF:BF:75:00:3A:D6:C6:87:2A:18:77:6F:FB:D8:A5:6A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Jzjndv-_dQA61saHKhh3b_vYpWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.79.0/24
31.56.142.0/24
Signature Algorithm: sha256WithRSAEncryption
56:64:39:ff:f9:71:c4:f0:da:b9:2d:36:88:c0:77:43:db:16:
a9:26:06:f8:ee:13:42:ad:02:bf:2d:00:db:90:30:72:7b:32:
23:6c:a9:48:3a:9b:13:18:d4:b0:5c:52:c1:77:f2:84:61:16:
4e:7d:af:6d:ad:73:f9:72:da:02:69:9f:d8:8e:b5:2b:36:4f:
ec:5b:d8:8e:0e:41:61:b6:6b:3b:fa:4c:6e:c0:82:7e:07:da:
5b:43:da:a1:ff:16:03:96:6e:ce:5d:d7:29:48:98:34:68:82:
84:8e:56:4b:45:28:d0:cc:a8:58:d1:62:9f:d4:91:79:4d:ad:
b8:3d:0d:fd:13:2d:6c:3d:2a:b4:4d:2f:80:7a:7b:90:00:25:
69:ba:2e:0e:b6:97:90:bb:bb:3c:cf:9f:4c:ea:9b:cb:e3:36:
4f:77:1b:b4:b4:ba:6a:f2:b2:75:e6:48:1f:fe:82:48:ee:9e:
c2:8c:8d:f9:02:53:af:00:15:ab:d2:25:44:b2:71:c5:62:30:
d5:39:d9:c3:22:04:92:65:b3:79:95:ca:47:eb:53:e1:99:c8:
5a:5f:f0:40:b2:6a:77:c4:81:83:0e:e2:c8:6d:e5:88:24:c6:
05:ab:b6:c8:05:31:9d:6a:59:36:c0:d5:30:5c:e3:c4:ef:31:
17:53:85:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:10 2026 by rpki-client