Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MCcr47bXZ567DTFnNHbKh-XGLRA.roa
File: MCcr47bXZ567DTFnNHbKh-XGLRA.roa (raw, json)
Hash identifier: ZLnBr1qPz6bDKyg78XaCRd77QbwIriH1WBWjVnTXUqM=
Subject key identifier: 30:27:2B:E3:B6:D7:67:9E:BB:0D:31:67:34:76:CA:87:E5:C6:2D:10
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EA7FA2E254F13684CD6FE16D83B8C4BD4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MCcr47bXZ567DTFnNHbKh-XGLRA.roa
Signing time: Mon 08 Jun 2026 16:04:11 +0000
ROA not before: Mon 08 Jun 2026 16:04:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41171
IP address blocks: 31.57.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:fa:2e:25:4f:13:68:4c:d6:fe:16:d8:3b:8c:4b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 8 16:04:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30272be3b6d7679ebb0d31673476ca87e5c62d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:11:f2:33:4b:24:9f:60:b5:4d:78:68:6d:
6b:4b:b5:9d:ef:28:e4:02:02:20:62:28:b3:26:24:
c7:95:a7:ec:38:0d:e7:7f:e3:b8:d1:fa:d6:6a:42:
ee:dc:fd:f0:62:a6:93:27:ac:9a:e7:23:40:09:db:
5d:e8:ba:58:71:21:01:f9:07:f7:6d:c7:e3:6d:22:
11:04:f5:cd:38:bb:da:78:ba:8b:ea:57:3f:69:e0:
03:ca:e0:c5:ee:f1:16:d7:f2:9d:97:38:61:ed:d2:
b7:22:16:70:be:bd:1a:16:af:b5:df:23:ef:fa:b6:
3d:42:08:29:d8:77:2c:5b:10:7c:f2:c7:83:c1:d1:
bc:8d:53:8e:9c:d2:34:04:3c:cf:49:eb:d0:33:62:
6b:f3:d3:a3:bd:7c:5a:28:68:ae:65:f9:02:22:1b:
f6:77:66:74:06:2e:72:0e:a6:9f:4f:aa:7d:50:0e:
41:ce:91:53:28:ef:ff:dc:40:69:01:42:8b:87:d0:
25:12:f2:78:0c:a1:b8:56:35:db:d2:48:b3:56:08:
c3:36:b3:43:3c:d4:19:2e:ba:75:66:b5:fb:6b:c9:
40:64:28:ee:4d:4b:da:42:1a:58:5a:5e:32:1a:52:
f8:3e:a6:bc:1a:46:d9:ae:cf:3d:3c:f1:d2:49:76:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:27:2B:E3:B6:D7:67:9E:BB:0D:31:67:34:76:CA:87:E5:C6:2D:10
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MCcr47bXZ567DTFnNHbKh-XGLRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.102.0/24
Signature Algorithm: sha256WithRSAEncryption
57:46:67:b8:f0:c0:6f:1c:84:8f:dd:90:59:03:5c:b8:52:63:
81:33:d1:fd:c2:26:4a:22:0d:e8:38:f4:3e:32:81:a7:39:2d:
59:e1:11:09:d2:30:dd:d6:66:16:1b:73:cb:24:42:2d:c4:14:
f5:e8:76:4f:7e:56:7e:08:b7:09:ef:9f:2c:55:3e:7d:78:3f:
8c:b4:9a:a3:e6:f7:8a:ed:8a:ff:a1:6e:ce:70:31:54:db:68:
c1:fb:13:8a:bf:c6:a0:40:4b:d8:d7:c6:7f:c3:00:4c:a7:bf:
30:dd:93:8a:b4:57:dd:92:31:5f:ca:6b:5f:04:89:8a:55:56:
f2:4d:77:5e:4b:05:ec:d9:43:9b:e6:ff:0b:3f:33:13:f4:ee:
54:7b:ef:dc:3e:35:9a:6d:19:e5:90:65:45:4d:cf:a0:81:85:
c5:ef:db:be:6a:52:c4:9a:8f:96:55:d4:e4:f7:54:e8:da:99:
b2:ba:5e:03:c9:9f:b8:17:1c:58:ed:ce:30:2a:80:e7:cb:93:
85:bd:cf:98:cb:a4:dd:60:05:35:62:09:68:b5:e0:53:71:a4:
d4:d7:64:5b:f3:24:0e:ba:69:00:20:ba:3c:d1:89:95:98:2c:
8d:2b:17:d3:6d:e2:74:f7:9c:b3:77:34:fc:ec:8c:0d:22:9c:
04:6b:41:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:46 2026 by rpki-client