Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NH4a10da1IO2Is5DsvZoS4xUN9U.roa
File: NH4a10da1IO2Is5DsvZoS4xUN9U.roa (raw, json)
Hash identifier: ZWa3DjqrtQn3CeMZrvHEHVLMd4dCY7sygv88G1drl98=
Subject key identifier: 34:7E:1A:D7:47:5A:D4:83:B6:22:CE:43:B2:F6:68:4B:8C:54:37:D5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D7216FA3CA6B53A6AEE7C8D3EC8108345
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NH4a10da1IO2Is5DsvZoS4xUN9U.roa
Signing time: Thu 09 Apr 2026 11:53:21 +0000
ROA not before: Thu 09 Apr 2026 11:53:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397563
IP address blocks: 31.57.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:16:fa:3c:a6:b5:3a:6a:ee:7c:8d:3e:c8:10:83:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 9 11:53:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=347e1ad7475ad483b622ce43b2f6684b8c5437d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:e1:e8:55:ee:44:7a:2f:ff:7f:82:6d:c1:
63:cb:c1:29:65:cb:9c:fd:a3:01:ed:18:c4:ab:c0:
6f:89:b0:90:38:dd:be:7a:ee:7e:b9:20:39:7d:1c:
37:40:27:16:a1:ef:90:b9:4d:7b:ac:23:67:63:09:
06:b1:4a:f6:1b:c7:b4:70:36:3f:34:d5:58:6a:85:
42:8e:85:19:e7:c6:78:1d:98:fb:6f:c0:79:a3:f7:
73:54:7b:25:22:e0:1f:96:5a:e3:18:29:56:55:a9:
08:90:54:ce:52:92:1f:1e:08:a7:91:02:b4:dd:93:
99:22:1d:5a:00:9e:cd:58:51:23:c8:b2:98:8d:24:
02:ca:b5:dc:af:f3:a8:08:80:0d:b7:e0:07:fe:c8:
65:4f:51:9c:f8:d9:01:a1:bc:86:a4:c1:af:58:06:
04:4f:12:74:48:36:80:84:7e:8f:4d:83:60:6d:12:
23:4c:04:e2:d7:55:e2:36:16:77:20:55:06:d9:33:
cf:ba:73:d4:b5:cd:9d:24:ea:41:a8:1e:24:5d:f3:
e2:6c:49:23:87:7d:a6:8f:ec:70:f6:c6:65:e6:75:
b3:52:33:29:63:5f:56:c4:25:74:d7:e9:64:1c:ca:
98:e9:6e:00:54:10:b6:91:92:9a:73:b5:c2:41:8c:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7E:1A:D7:47:5A:D4:83:B6:22:CE:43:B2:F6:68:4B:8C:54:37:D5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NH4a10da1IO2Is5DsvZoS4xUN9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.142.0/24
Signature Algorithm: sha256WithRSAEncryption
72:8d:d5:44:8b:9a:66:69:a5:e5:bf:a2:50:5a:46:3d:f4:1f:
c6:e4:8b:45:93:f3:9a:c0:61:58:9c:3c:2d:ed:e7:27:bb:d3:
b8:36:cb:ae:e3:fa:74:f9:85:5a:9a:9b:cf:73:96:42:ec:be:
53:2d:36:d1:f1:fa:dc:56:f8:0b:be:51:e3:7b:bd:25:d1:52:
66:aa:46:c6:a8:8f:a3:0c:61:08:bc:68:a4:9b:41:a0:30:af:
e1:2e:47:c1:73:45:50:4d:c6:70:41:f5:f2:8c:80:aa:c8:3d:
dd:de:68:bf:ce:9e:11:bf:12:72:61:7c:f5:d3:21:c7:df:fb:
20:08:c3:bf:d9:97:52:07:4a:88:a0:48:9a:9e:16:6a:6c:33:
a8:7d:1b:ac:c7:42:88:76:9c:08:ac:16:7b:b8:bd:a2:d0:2c:
1b:33:8e:50:83:1a:3b:c6:08:75:27:63:49:47:85:40:fb:ca:
74:d6:09:4b:27:cf:6e:1a:1b:f1:1f:8a:bf:1c:21:d2:8d:5e:
ff:4f:f6:17:b1:89:23:7f:e2:5f:95:fc:46:83:24:48:00:0f:
94:d5:5b:b6:73:7a:66:2d:db:79:bd:31:0e:36:b1:31:7c:72:
60:fa:f6:bb:c6:2f:92:05:28:32:ab:84:c1:f4:ef:e8:00:dc:
ce:f2:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:22:23 2026 by rpki-client