Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RuzhsDw7AZWaei8iFFANehfTmI4.roa
File: RuzhsDw7AZWaei8iFFANehfTmI4.roa (raw, json)
Hash identifier: njURDWmp4V2u2WGHE35BIrnkUQ2cp6xSFK+6zUWDO30=
Subject key identifier: 46:EC:E1:B0:3C:3B:01:95:9A:7A:2F:22:14:50:0D:7A:17:D3:98:8E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EA5D4E026F085A4A5495E99692AE245CB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RuzhsDw7AZWaei8iFFANehfTmI4.roa
Signing time: Mon 08 Jun 2026 06:04:12 +0000
ROA not before: Mon 08 Jun 2026 06:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151389
IP address blocks: 31.56.163.0/24 maxlen: 24
31.59.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a5:d4:e0:26:f0:85:a4:a5:49:5e:99:69:2a:e2:45:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 8 06:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46ece1b03c3b01959a7a2f2214500d7a17d3988e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:dd:56:6a:88:ee:d4:85:c4:4c:f5:2d:70:
5e:f5:76:dd:52:3b:01:e6:47:9c:04:9c:bd:c7:6c:
1e:d3:75:8c:3c:cc:7d:a9:76:45:c1:69:49:29:7f:
3d:7f:93:3c:e3:0b:cb:c6:0d:93:ac:f3:6a:ab:79:
cf:da:93:3d:97:57:f1:3d:ff:35:06:2f:e7:b6:5e:
c2:fb:02:18:fd:64:84:58:ca:c7:68:eb:1c:b9:d5:
3b:33:99:16:9b:26:9e:c6:79:16:e0:c4:02:a0:6c:
3b:69:36:0d:72:75:35:21:bb:c3:a7:f8:31:31:1b:
53:8d:e1:01:82:48:23:54:20:5a:ee:5a:11:6f:f7:
92:4d:44:f6:5b:82:10:dd:b8:a9:ed:40:0a:ec:71:
f0:73:5c:38:51:99:a5:ec:36:16:51:a1:97:89:df:
56:86:97:0b:18:88:ef:8e:15:0f:a1:d7:b8:80:c1:
08:06:3e:48:c5:9e:ea:e6:c9:f3:20:5e:fe:c5:bc:
7e:62:80:c9:e6:4d:bc:43:ce:61:b8:8d:e7:7b:cc:
b3:89:3b:3c:c2:b7:ce:8a:ec:9b:49:55:61:4d:a5:
ad:f2:2f:a4:b0:23:85:a0:e8:54:1c:0c:c5:2b:92:
ba:78:4c:7f:1d:ed:62:9d:cb:8b:4e:3f:44:d0:e5:
a5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EC:E1:B0:3C:3B:01:95:9A:7A:2F:22:14:50:0D:7A:17:D3:98:8E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RuzhsDw7AZWaei8iFFANehfTmI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.163.0/24
31.59.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:1d:69:19:b9:d3:f6:48:45:e4:c1:ec:c7:5f:f0:fa:f0:ed:
3a:2c:19:95:f3:25:55:73:ae:f8:d2:13:02:ee:cf:80:3c:fa:
88:fd:b8:87:b1:86:96:76:a1:0d:37:00:e4:ec:18:b6:e2:a6:
59:34:7a:06:66:2a:46:e7:fc:e5:a3:17:2a:0e:41:7e:4d:5a:
e0:0e:9c:8c:b2:74:7e:12:7f:cd:fe:dd:88:46:c7:ca:dc:5c:
76:59:04:74:dc:70:fa:51:8c:b0:b6:ef:62:55:b2:9d:ba:6b:
06:cd:f2:43:d9:12:cd:9a:a7:b6:e4:50:67:54:9e:fe:21:d4:
9d:ff:be:29:f4:9b:87:e8:54:62:ee:bf:23:ab:b7:8f:dd:ab:
c2:ca:ac:76:4b:0c:bb:89:c6:c4:c0:4d:2d:e3:3e:1e:dd:c2:
9f:a2:d6:b9:22:5c:95:f4:cb:19:c6:81:1d:13:e8:35:8c:7c:
90:7f:92:1d:20:d3:75:de:80:dd:d2:87:b1:b6:ff:67:7a:1e:
f3:1f:f3:6e:65:f3:f7:52:f8:24:e3:06:e0:2c:42:54:89:7e:
e0:cc:51:29:99:56:07:37:6b:ed:4b:a6:c1:2b:83:89:a6:0c:
a2:ea:28:b8:3c:26:db:ae:5b:cf:d9:02:8b:52:db:b5:1a:7c:
52:aa:4b:b7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ6l1OAm8IWkpUlemWkq4kXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNjA4MDYwNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmVjZTFiMDNjM2IwMTk1OWE3YTJmMjIxNDUwMGQ3YTE3ZDM5ODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykTdVmqI7tSFxEz1LXBe9XbdUjsB
5kecBJy9x2we03WMPMx9qXZFwWlJKX89f5M84wvLxg2TrPNqq3nP2pM9l1fxPf81
Bi/ntl7C+wIY/WSEWMrHaOscudU7M5kWmyaexnkW4MQCoGw7aTYNcnU1IbvDp/gx
MRtTjeEBgkgjVCBa7loRb/eSTUT2W4IQ3bip7UAK7HHwc1w4UZml7DYWUaGXid9W
hpcLGIjvjhUPode4gMEIBj5IxZ7q5snzIF7+xbx+YoDJ5k28Q85huI3ne8yziTs8
wrfOiuybSVVhTaWt8i+ksCOFoOhUHAzFK5K6eEx/He1incuLTj9E0OWlyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEbs4bA8OwGVmnovIhRQDXoX05iOMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUnV6aHNEdzdBWldhZWk4aUZGQU5laGZUbUk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzijAwQA
HztjMA0GCSqGSIb3DQEBCwUAA4IBAQArHWkZudP2SEXkwezHX/D68O06LBmV8yVV
c6740hMC7s+APPqI/biHsYaWdqENNwDk7Bi24qZZNHoGZipG5/zloxcqDkF+TVrg
DpyMsnR+En/N/t2IRsfK3Fx2WQR03HD6UYywtu9iVbKdumsGzfJD2RLNmqe25FBn
VJ7+IdSd/74p9JuH6FRi7r8jq7eP3avCyqx2Swy7icbEwE0t4z4e3cKfota5IlyV
9MsZxoEdE+g1jHyQf5IdINN13oDd0oextv9neh7zH/NuZfP3Uvgk4wbgLEJUiX7g
zFEpmVYHN2vtS6bBK4OJpgyi6ii4PCbbrlvP2QKLUtu1GnxSqku3
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:37 2026 by rpki-client