Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NkHsWJ9a1PKtBgjex2zGB_AT6y8.roa
File: NkHsWJ9a1PKtBgjex2zGB_AT6y8.roa (raw, json)
Hash identifier: qNa6hhEdbMtwtK8Bkb8ZzLmZ9U8oFqi5DEwiYBgpFKs=
Subject key identifier: 36:41:EC:58:9F:5A:D4:F2:AD:06:08:DE:C7:6C:C6:07:F0:13:EB:2F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E9E57C1AD9F5D01A86D59C6ACA93AC5CC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NkHsWJ9a1PKtBgjex2zGB_AT6y8.roa
Signing time: Sat 06 Jun 2026 19:10:11 +0000
ROA not before: Sat 06 Jun 2026 19:10:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400308
IP address blocks: 31.56.143.0/24 maxlen: 24
31.56.162.0/24 maxlen: 24
31.59.201.0/24 maxlen: 24
31.59.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9e:57:c1:ad:9f:5d:01:a8:6d:59:c6:ac:a9:3a:c5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 6 19:10:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3641ec589f5ad4f2ad0608dec76cc607f013eb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:30:32:80:fa:91:32:19:78:81:1d:24:25:
d2:60:68:73:4c:bb:14:54:2e:0d:d5:2a:c6:a6:65:
70:9c:0c:0d:b7:29:a7:07:f9:c3:ff:a3:0f:c8:ff:
ab:33:84:27:3b:2a:20:1f:67:12:46:29:0e:c4:d3:
85:0a:3c:cb:98:80:fe:63:da:a3:e1:c1:29:bc:53:
0b:81:fd:be:ea:79:04:01:87:60:a0:ee:a8:2d:35:
7b:a7:e0:9b:08:90:99:45:38:44:2c:2d:17:9f:5f:
cd:10:4f:9c:93:a2:dd:0d:88:c8:ad:9c:51:b2:03:
16:a1:12:ba:da:6a:dd:0b:80:ca:7d:b4:90:92:ed:
69:c4:cd:56:65:75:31:71:bf:a0:64:ba:c3:b2:99:
c1:57:d0:ae:a9:a1:48:6e:86:5b:ba:8d:42:47:85:
39:9d:dd:15:e0:93:f2:bd:07:de:f6:1b:10:9b:b7:
c3:6b:c3:6e:07:c4:d4:27:62:45:86:73:b2:bc:b1:
2c:84:dd:54:99:48:68:e4:4a:50:99:d3:32:9a:23:
fb:2a:c3:06:54:14:53:bd:a3:1e:12:97:58:84:67:
6d:90:77:8c:d5:38:0f:24:4e:bf:20:68:f0:85:bf:
1c:47:a9:ea:94:03:4a:93:75:51:1a:bd:de:cf:84:
fa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:41:EC:58:9F:5A:D4:F2:AD:06:08:DE:C7:6C:C6:07:F0:13:EB:2F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NkHsWJ9a1PKtBgjex2zGB_AT6y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.143.0/24
31.56.162.0/24
31.59.201.0/24
31.59.230.0/24
Signature Algorithm: sha256WithRSAEncryption
53:72:17:f7:e2:1d:aa:37:0e:ef:ef:84:8c:59:54:96:b2:a4:
cf:6e:c5:68:2d:36:87:4a:38:08:f0:a1:b6:49:76:13:91:58:
4e:db:9b:f0:74:19:36:39:d8:33:60:37:43:c6:45:14:ce:e4:
09:44:b0:00:2c:a4:f3:93:da:8f:f0:51:dd:5b:81:12:fb:04:
68:3a:b5:6f:60:37:61:4a:09:f2:af:3a:2d:25:c2:80:ca:51:
16:05:f3:84:07:dc:df:be:a8:18:d8:fd:c0:57:d6:ce:de:0b:
e7:83:f2:c2:8a:d0:08:54:2b:c4:d2:35:3e:2a:95:3a:84:45:
cd:db:81:d6:3d:57:47:df:c0:1d:43:89:88:78:88:a1:7a:96:
ad:3e:19:89:3b:bd:5a:d8:dd:7a:94:9f:72:9d:85:3d:7f:31:
5d:9e:e1:12:96:8c:c5:2f:3a:fd:f7:43:7f:cd:26:79:5e:a4:
2a:e2:51:ca:f0:0b:80:86:6a:7f:e8:7a:87:ca:7e:9b:98:9c:
c7:40:16:ea:21:f1:8d:49:97:39:cb:e0:a8:0c:d5:d6:5d:17:
17:f6:f6:6d:f4:31:cd:8c:ec:dd:40:03:53:07:45:9c:1e:a4:
8e:7d:34:70:57:c2:80:5a:44:97:a6:f5:6e:28:b1:16:09:be:
56:54:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:11:14 2026 by rpki-client