Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Up8VNq0kGYmVsa0DTMi5L9SMgDc.roa
File: Up8VNq0kGYmVsa0DTMi5L9SMgDc.roa (raw, json)
Hash identifier: d7uLZVoFV2e9OHTqIM/8WSa41KA9cKjianVPwegtKwo=
Subject key identifier: 52:9F:15:36:AD:24:19:89:95:B1:AD:03:4C:C8:B9:2F:D4:8C:80:37
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C482CB0F32339F3AAF24AA7561F214E71
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Up8VNq0kGYmVsa0DTMi5L9SMgDc.roa
Signing time: Tue 10 Feb 2026 15:30:14 +0000
ROA not before: Tue 10 Feb 2026 15:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396362
IP address blocks: 31.56.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:2c:b0:f3:23:39:f3:aa:f2:4a:a7:56:1f:21:4e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 10 15:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=529f1536ad24198995b1ad034cc8b92fd48c8037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:13:4e:9e:cc:71:ca:74:ca:e7:b2:67:ab:
1b:9d:6f:e6:3e:a2:8f:2a:c1:24:bb:93:0c:03:28:
85:09:df:fd:ad:57:71:56:e0:4d:e1:23:eb:aa:a0:
58:24:b2:e0:66:53:bc:91:26:17:5d:84:77:98:29:
5c:ee:f5:25:bb:1a:e2:fd:e8:45:8d:24:27:d3:1a:
a5:c3:5d:39:fd:f6:37:34:12:b8:06:57:16:f6:63:
11:1b:a7:76:4a:cb:1b:9a:ef:00:47:de:50:66:6a:
73:a9:a3:8a:a4:c1:61:fa:d1:90:bd:d5:00:9a:9a:
7c:f0:c7:76:0f:18:75:b7:cc:80:97:ab:ce:3f:fd:
e0:57:f7:ad:8d:35:a6:85:7e:f5:8a:5b:c8:92:4f:
84:27:5a:d6:0d:a3:95:aa:4b:9d:4d:91:72:f9:de:
54:89:e2:5c:51:f7:7c:c1:25:b4:65:3e:50:e4:42:
a7:da:8b:e6:29:ba:3c:88:52:72:a3:58:67:bc:db:
7f:3b:28:8a:b5:27:6a:a5:5e:e0:11:e3:10:a5:de:
66:22:65:d8:3e:92:15:11:31:1c:cd:46:d7:fc:3e:
48:ba:bb:49:7e:f6:b6:02:cb:ad:4c:86:5a:cc:52:
72:02:13:3e:c7:18:d5:09:24:c0:bc:5a:34:8c:0c:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9F:15:36:AD:24:19:89:95:B1:AD:03:4C:C8:B9:2F:D4:8C:80:37
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Up8VNq0kGYmVsa0DTMi5L9SMgDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.127.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:83:13:0c:57:96:f8:5e:7a:02:72:44:92:f9:bb:fc:3f:9f:
0b:0a:89:12:dd:8c:09:33:73:32:2b:35:94:c3:eb:c0:51:1b:
ba:da:a8:c6:28:c2:ab:c1:3d:e1:21:e8:36:82:a9:29:8e:a2:
94:ed:56:39:c2:98:dd:9c:0f:93:9c:e8:2d:0a:36:6d:46:af:
a8:37:62:04:2e:9e:20:c0:95:00:c6:c4:b6:9c:a0:cf:8c:cf:
5f:46:f6:f9:3e:71:f6:cc:09:b8:b4:b1:54:39:9a:32:2e:ca:
a0:8c:8c:c9:7f:24:e1:18:ce:b6:a7:a2:6d:3d:ab:75:37:54:
8a:ca:4c:ce:e4:ee:0b:c0:28:a3:2b:ce:0a:37:c5:f6:bb:47:
34:74:64:e2:04:e8:2e:75:3f:74:81:fa:87:25:cd:ed:e5:75:
55:12:60:6a:f5:e2:38:cc:87:8d:d9:fb:65:6e:6e:f3:eb:3d:
73:bb:9b:0e:9b:6a:45:4f:27:b5:44:99:1c:ed:93:fb:cb:6f:
94:c4:20:f3:a2:d9:24:cb:2b:1c:e9:e5:23:5d:c2:24:82:39:
c7:3e:a5:8b:82:c3:16:95:3b:6a:b7:5a:ff:8c:2e:94:ff:4c:
77:da:41:57:85:14:d2:b8:e8:0a:22:83:49:f8:ea:df:f8:bc:
08:64:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:29:00 2026 by rpki-client