Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VuKLWEdMOdKmffonHjKEUN98O8I.roa
File: VuKLWEdMOdKmffonHjKEUN98O8I.roa (raw, json)
Hash identifier: lY8EWYz32tuSslxE8wCv8UsPdkaQGMFjklU/lKRSi/A=
Subject key identifier: 56:E2:8B:58:47:4C:39:D2:A6:7D:FA:27:1E:32:84:50:DF:7C:3B:C2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D7B844EBE020E5996DF97740ED6034042
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VuKLWEdMOdKmffonHjKEUN98O8I.roa
Signing time: Sat 11 Apr 2026 07:49:21 +0000
ROA not before: Sat 11 Apr 2026 07:49:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210718
IP address blocks: 31.57.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7b:84:4e:be:02:0e:59:96:df:97:74:0e:d6:03:40:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 11 07:49:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56e28b58474c39d2a67dfa271e328450df7c3bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:0b:87:40:55:a5:6c:00:1f:e4:af:e3:39:
56:f3:82:64:87:37:1e:d8:c5:2b:72:68:48:d7:83:
88:e4:eb:70:e6:ab:3b:88:ad:db:d7:59:7f:ce:3b:
07:d0:ca:09:ca:0c:05:9b:b8:0b:67:05:36:b8:89:
2d:dc:49:98:09:4c:13:8f:e2:63:49:e9:c0:a0:da:
d0:0f:76:ea:21:7c:4b:72:8a:97:c5:0b:7b:33:55:
06:c0:01:f5:ee:fd:64:24:8f:dd:f5:5a:d6:59:70:
7d:73:07:bb:e5:e3:2f:05:1c:0c:65:64:bd:4d:95:
58:2c:02:ea:ed:86:b2:fa:d5:44:94:94:e9:4a:ef:
30:89:b4:1f:31:a5:fa:c5:36:d1:a0:d6:42:e1:d9:
16:db:a7:26:96:50:ed:61:dc:99:ec:d6:51:a8:96:
cc:4a:e5:94:d4:77:0f:4d:44:49:08:c8:97:1b:cd:
94:40:95:a0:fa:ed:75:3e:21:3a:2b:c4:7b:c5:5c:
8e:9d:63:69:bd:7b:6a:73:76:f8:11:6b:6c:2b:1b:
14:91:73:2e:0d:4d:c6:57:d1:96:6f:58:9c:2c:c0:
e1:13:de:ac:ef:8c:a9:98:95:d5:86:ca:24:f1:18:
25:2a:96:04:6d:c8:a2:a2:4b:95:1b:24:55:ae:2b:
68:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E2:8B:58:47:4C:39:D2:A6:7D:FA:27:1E:32:84:50:DF:7C:3B:C2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VuKLWEdMOdKmffonHjKEUN98O8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.129.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d8:e3:eb:6f:92:8a:bd:d6:cd:a4:24:59:85:3b:91:59:58:
2d:15:cc:04:be:37:51:ba:4a:ea:d5:b5:6f:85:ca:6c:2d:94:
cd:ef:f6:f2:7b:3c:a1:43:96:5e:ee:b4:23:7b:ed:c7:76:bc:
31:20:d7:03:3e:81:92:77:cd:e9:64:36:d5:3b:52:8c:52:60:
73:6b:96:83:5a:c0:69:3c:6a:98:86:db:7c:1e:88:97:84:19:
d0:f0:43:3a:d8:52:5e:be:c1:e0:af:f0:f0:5a:8c:df:a9:44:
04:84:f2:f3:cf:49:68:83:56:25:22:e2:e2:7b:5b:a4:e6:cf:
31:21:d6:9b:84:be:88:fa:01:9d:a4:15:3f:6a:b1:98:e3:62:
c1:15:e8:86:d8:09:89:2e:66:c9:a8:7a:26:23:5e:bc:3d:fd:
be:35:7d:63:b9:99:77:5c:37:6f:66:63:2d:70:d6:4a:c2:a4:
9d:c0:8d:fc:ae:56:f3:ae:e4:6d:cc:02:7f:46:a1:7e:e9:52:
02:44:b2:f7:21:3d:ea:ee:68:d1:80:d8:5e:73:92:91:88:db:
93:ea:79:ec:9a:65:b4:7c:51:7a:40:8f:2f:63:94:35:68:fc:
42:f9:7c:59:b9:22:ef:94:ed:1d:04:ea:0c:53:9a:45:8a:25:
22:78:d4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:44:24 2026 by rpki-client