Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NtP6sWpnS4sqP1vD1DUvQ80m5Bc.roa
File: NtP6sWpnS4sqP1vD1DUvQ80m5Bc.roa (raw, json)
Hash identifier: Mn1F66zWk56SxfPepQmQLSB5rbzo/hE6ubq0U39bXx4=
Subject key identifier: 36:D3:FA:B1:6A:67:4B:8B:2A:3F:5B:C3:D4:35:2F:43:CD:26:E4:17
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0874740E43C4B6CEAE730D21C222FA563
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NtP6sWpnS4sqP1vD1DUvQ80m5Bc.roa
Signing time: Wed 09 Sep 2026 17:46:28 +0000
ROA not before: Wed 09 Sep 2026 17:46:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.2.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.195.0/24 maxlen: 24
31.57.167.0/24 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.177.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:47:40:e4:3c:4b:6c:ea:e7:30:d2:1c:22:2f:a5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 9 17:46:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36d3fab16a674b8b2a3f5bc3d4352f43cd26e417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:d9:da:43:00:93:23:fb:fd:81:0c:94:c9:
c9:b2:39:e4:ff:3e:88:62:fe:28:b5:a3:a2:7b:2b:
6f:5c:6d:42:6c:13:26:ff:d4:73:1a:cb:72:ab:21:
4b:f5:e1:21:33:21:d3:08:17:3f:b7:5e:0d:8c:39:
e2:60:8b:92:77:2f:d1:f2:b7:26:cf:c0:a9:7f:2a:
b5:90:8d:ee:a3:d8:7d:6d:60:c8:a1:9b:8d:ac:09:
6b:7a:24:fc:38:1f:95:95:0e:29:64:eb:e8:44:bf:
95:27:b7:e8:ed:38:69:a1:3c:ff:14:45:01:a4:00:
9e:97:8d:9d:e5:d7:1d:f1:2d:03:23:4b:32:ff:f7:
91:8d:16:f4:f8:b0:86:c6:f7:67:f9:20:be:95:13:
4a:ea:19:01:7a:d2:b9:0e:3b:22:d3:fa:01:eb:8c:
41:1f:ba:94:f3:79:f8:0e:76:27:8c:c7:d5:ad:6d:
b7:da:f5:cf:f6:66:1a:da:fe:fb:4f:d7:35:97:62:
5c:7d:c6:85:10:f6:05:2b:2b:65:86:38:22:70:08:
da:86:df:bc:1f:23:55:ee:92:17:36:69:d5:32:75:
9a:91:9f:50:d4:7b:44:57:6e:b4:5d:5b:6e:f3:a1:
b9:b6:10:2f:1b:be:73:2a:bf:31:a0:8a:3e:6a:bf:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D3:FA:B1:6A:67:4B:8B:2A:3F:5B:C3:D4:35:2F:43:CD:26:E4:17
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NtP6sWpnS4sqP1vD1DUvQ80m5Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0-31.56.2.255
31.56.122.0/24
31.56.195.0/24
31.57.167.0/24
31.57.171.0/24
31.57.177.0/24
31.57.191.0/24
31.57.197.0/24
31.57.202.0/24
31.57.207.0/24
31.57.221.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:55:60:fe:4f:52:cd:22:cd:2a:9f:9b:d4:de:30:9b:47:b6:
ca:03:45:ac:68:57:0f:7f:09:f7:d2:71:c4:bf:51:ae:70:36:
98:fe:f5:bb:63:2c:c0:cc:a2:6d:0c:0a:b4:7e:10:28:67:52:
87:c1:4f:b0:c4:de:e3:86:2f:a1:6c:20:78:3a:5d:b4:a9:5b:
de:08:19:9c:b1:a8:3d:2d:22:10:65:6b:cc:f6:88:95:55:08:
d6:0e:81:ca:f7:c3:5f:db:b8:48:fa:71:1e:cd:99:99:f2:71:
e1:20:38:0d:6a:0a:9f:e0:43:38:6c:4d:26:74:d2:34:0c:a1:
8d:6c:c4:ad:de:98:2c:53:86:ec:bf:5a:6b:9f:a9:95:7f:ba:
f7:80:eb:53:32:5f:15:cb:f6:9d:7a:19:64:19:79:a6:fb:67:
a6:ea:c2:79:3d:4a:b2:20:72:27:37:6c:93:a5:cf:29:f4:53:
7d:ed:12:fc:93:2c:af:78:89:bf:25:35:41:a9:f6:0b:b4:f3:
d9:74:83:be:94:53:b7:2e:d1:13:e0:5e:8b:1d:25:86:04:d3:
fb:6e:47:6e:a7:84:32:68:31:47:27:dd:51:7b:ff:43:08:db:
9f:e1:aa:69:68:ac:85:1b:1f:68:0a:10:ca:f7:30:7d:b5:ed:
ca:d7:8e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:43:29 2026 by rpki-client