Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Utn1D7hgr9-YH5BFl-i735tIGlc.roa
File: Utn1D7hgr9-YH5BFl-i735tIGlc.roa (raw, json)
Hash identifier: R9zRFvZOZDSnAiKC0XDO9P/m7NvfYOjEhfhHKthuHsU=
Subject key identifier: 52:D9:F5:0F:B8:60:AF:DF:98:1F:90:45:97:E8:BB:DF:9B:48:1A:57
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0823A204486998D098B9FD6B37356B4A3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Utn1D7hgr9-YH5BFl-i735tIGlc.roa
Signing time: Tue 08 Sep 2026 18:14:02 +0000
ROA not before: Tue 08 Sep 2026 18:14:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209553
IP address blocks: 31.57.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:3a:20:44:86:99:8d:09:8b:9f:d6:b3:73:56:b4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 8 18:14:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52d9f50fb860afdf981f904597e8bbdf9b481a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:ba:b8:29:7a:53:77:e4:0d:99:4e:55:60:
44:c3:ee:46:16:2a:09:3a:7b:cc:44:97:9a:d1:87:
0f:03:57:ae:c9:61:db:12:42:09:8c:38:ad:7f:2b:
62:f2:7d:30:d8:4d:a7:19:2c:48:d1:2b:e6:9a:d4:
24:f5:b6:e4:b2:87:72:05:1e:cd:27:58:89:ba:e2:
3e:3f:62:d1:a7:0f:69:72:f8:ec:15:90:2c:66:5b:
4e:14:89:de:2c:ad:74:41:bf:a7:4d:4b:25:d5:b7:
37:b9:63:d5:c1:d5:61:22:45:f7:c2:cb:e2:5d:9d:
25:e4:d2:fe:17:65:db:09:23:89:aa:b6:e5:b4:a5:
3f:96:a8:09:ff:34:fb:e8:12:3a:43:19:e6:6d:39:
ec:14:46:b1:9b:b7:40:96:9a:f8:4d:3f:c7:49:6c:
8d:9f:4d:5b:2e:95:4b:6b:8d:01:d9:d4:6a:24:2b:
aa:22:47:2d:5b:5c:a6:61:e5:10:af:f3:cc:b4:42:
7a:41:2b:54:5a:20:2d:d9:f1:83:da:5e:1f:91:d4:
73:1d:10:e8:4d:7f:ad:5f:e7:74:a7:99:5a:6b:3e:
16:33:a6:df:9a:4e:62:2e:0f:3d:5b:4e:30:f8:14:
cc:4c:b0:6d:31:dd:36:eb:69:5c:b1:a3:82:ce:46:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D9:F5:0F:B8:60:AF:DF:98:1F:90:45:97:E8:BB:DF:9B:48:1A:57
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Utn1D7hgr9-YH5BFl-i735tIGlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.160.0/24
Signature Algorithm: sha256WithRSAEncryption
13:6c:59:54:2e:36:83:6c:0a:73:15:97:f8:36:e8:e8:4b:a7:
52:48:41:84:64:bd:66:9f:29:0b:0f:c4:70:77:52:03:31:ca:
34:16:b0:b5:68:67:33:dc:e3:6d:8f:88:1e:dc:65:91:dd:aa:
42:36:23:e9:de:53:d7:54:54:52:df:13:56:e5:3b:44:c1:ab:
04:fc:ae:a7:23:78:46:d8:af:dd:4d:dc:88:60:98:6d:e9:c3:
53:73:75:41:6b:ca:28:45:e7:82:6e:4d:f5:b6:26:f5:f2:6c:
5b:08:a7:b5:05:89:e3:d3:08:c6:40:ec:fc:54:c1:81:ae:1d:
f7:2d:97:d9:c4:be:7b:5d:c8:ac:5c:e9:d6:ea:9f:33:59:ee:
80:d7:de:fa:e4:2b:78:75:02:38:6e:d4:32:8b:b5:37:45:36:
c5:42:ea:c8:9e:13:50:a5:a3:c4:c1:38:27:f9:da:51:8b:f9:
3c:2d:fb:50:0b:d9:d6:5a:0d:f4:95:79:89:c9:69:37:9d:7b:
a1:48:7a:f5:40:b1:ed:a2:9e:91:fb:28:5a:32:d9:71:8e:09:
3d:b9:7c:61:9a:56:56:52:e4:f7:2d:0f:79:d5:53:fb:1b:4e:
d1:7e:ea:ba:e1:30:d0:eb:00:e6:ac:a3:b9:8b:9e:eb:b7:b9:
ed:25:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:44:52 2026 by rpki-client