Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TVNuJMrJOWnQH5ezJcgwx-IxtW0.roa
File: TVNuJMrJOWnQH5ezJcgwx-IxtW0.roa (raw, json)
Hash identifier: lo6HGukuNKCXzd3suv+jQDoWQNfZdMZsHhTT1jbcHDY=
Subject key identifier: 4D:53:6E:24:CA:C9:39:69:D0:1F:97:B3:25:C8:30:C7:E2:31:B5:6D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E9E55EDA7146376AC2E648EF4C2215A47
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TVNuJMrJOWnQH5ezJcgwx-IxtW0.roa
Signing time: Sat 06 Jun 2026 19:08:11 +0000
ROA not before: Sat 06 Jun 2026 19:08:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203106
IP address blocks: 31.56.151.0/24 maxlen: 24
31.59.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9e:55:ed:a7:14:63:76:ac:2e:64:8e:f4:c2:21:5a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 6 19:08:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d536e24cac93969d01f97b325c830c7e231b56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8c:c8:4e:e6:78:80:44:58:b1:1d:15:a7:3e:
f6:7f:bc:7b:0d:13:f4:ba:e8:95:f1:6b:b9:51:32:
e3:5a:2e:08:34:ee:1e:c9:ed:2b:c5:2b:f1:ee:ec:
fa:46:65:de:ec:2a:1e:28:d8:77:e1:49:1d:37:73:
68:3b:d4:4d:84:4d:63:97:d7:9a:c4:e5:29:5d:aa:
d3:fa:6f:01:fd:aa:5f:a5:68:3c:a6:a7:81:c9:ec:
14:a3:5e:3e:f9:5c:10:9e:b6:95:ee:aa:b8:17:b9:
94:a3:7a:80:e2:eb:9f:c0:99:16:4a:2c:db:cd:c7:
01:11:7f:53:01:4a:09:c2:df:ee:e0:f6:4a:a4:cd:
92:1b:ca:4e:bd:6b:7d:1c:7c:8a:02:8e:e0:d8:6b:
85:bb:70:46:af:ba:02:f6:79:ae:91:36:b4:da:a3:
31:d5:2b:e9:5d:00:d3:2b:17:82:c5:fd:2c:ec:0f:
76:b5:cd:7e:c9:72:a1:b8:57:d3:82:9d:1b:12:2c:
af:79:5d:45:12:47:88:2d:cb:b2:69:7a:82:0e:02:
a9:f8:4f:a8:65:dc:c6:16:bb:2d:08:de:e1:a4:7f:
c8:f0:d4:e1:d4:64:3f:db:69:7a:8c:7a:14:5d:d5:
fd:1b:d4:28:10:f2:0a:6c:9a:93:12:98:2b:af:8b:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:53:6E:24:CA:C9:39:69:D0:1F:97:B3:25:C8:30:C7:E2:31:B5:6D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TVNuJMrJOWnQH5ezJcgwx-IxtW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.151.0/24
31.59.75.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b3:c2:2f:8f:43:0f:4b:15:f3:a8:fb:90:de:7c:34:08:13:
85:29:81:88:55:3d:9e:55:54:13:a5:13:ae:cf:c0:c0:4b:59:
38:2f:f8:22:ad:bc:79:f9:0f:c8:d4:8e:e1:40:e0:cc:2a:85:
b2:79:81:ea:81:df:43:13:c9:b1:c9:25:c8:a5:04:4f:46:30:
36:50:b5:51:cd:00:4c:d4:61:64:c6:f0:f3:e5:f7:03:ac:6a:
d5:b4:ff:0c:ab:22:df:4c:89:e5:77:1d:17:e2:44:b2:e0:7d:
a9:af:b4:07:2c:97:74:b0:25:8f:19:9d:ab:cd:ad:54:81:19:
ee:a2:d9:d4:2f:e0:d8:e8:8c:cc:5b:1f:46:4e:68:f8:d2:a7:
2d:fb:e6:d4:da:2f:a3:56:12:b4:ea:e9:b3:7c:72:65:5c:ec:
5e:4d:a5:16:45:79:87:34:6e:1b:bc:c2:4c:be:be:8e:4c:2d:
bc:15:c7:2a:30:e0:a0:d8:c6:01:c5:3e:45:a7:39:aa:18:c6:
42:85:61:57:b9:06:49:c4:09:da:a7:f7:5a:88:0f:22:74:0b:
b6:17:c9:91:91:63:29:ed:f6:06:d3:dd:79:91:51:9f:fc:4d:
05:8a:ab:78:7d:db:4e:74:99:79:5f:bf:de:28:d6:45:5b:68:
2e:e1:8f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:02 2026 by rpki-client