Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WnUakIT6jm8_-lp__hHFucgLxiw.roa
File: WnUakIT6jm8_-lp__hHFucgLxiw.roa (raw, json)
Hash identifier: 4FpryXEGZULFoV1+jKtOROjxsjX59xKToE/S14kwkXs=
Subject key identifier: 5A:75:1A:90:84:FA:8E:6F:3F:FA:5A:7F:FE:11:C5:B9:C8:0B:C6:2C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0AE1639119EEAF0426FF138D78A46FB94
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WnUakIT6jm8_-lp__hHFucgLxiw.roa
Signing time: Thu 17 Sep 2026 06:38:07 +0000
ROA not before: Thu 17 Sep 2026 06:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402970
IP address blocks: 31.56.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:16:39:11:9e:ea:f0:42:6f:f1:38:d7:8a:46:fb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 17 06:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a751a9084fa8e6f3ffa5a7ffe11c5b9c80bc62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:33:fd:0d:51:db:4b:1c:ce:fd:c2:92:2b:42:
1b:fc:8f:e6:90:d5:a3:96:e9:20:97:e7:db:e6:c2:
4b:25:6b:03:1c:a1:f6:9f:99:b6:27:a0:34:2c:94:
57:ea:d8:c6:1c:8f:82:6c:28:75:f4:b8:77:f5:f0:
7c:df:d6:d0:9a:3f:7a:2d:0a:ae:c8:6f:a2:b3:58:
2d:e8:56:f7:11:fb:b8:2c:f2:bc:7f:16:9e:1f:bd:
0b:75:d4:22:9f:31:94:64:3d:1f:67:66:c7:d3:b7:
ea:c2:33:5f:c8:12:f8:90:92:39:08:a6:20:0d:c1:
9b:7a:a7:ce:40:62:d2:17:59:df:ad:d7:18:ce:07:
82:5d:b0:89:c0:9e:76:1a:1f:0f:3f:1f:08:78:00:
5f:c0:c3:7b:69:6f:e0:52:80:32:bb:a3:f1:65:91:
07:bb:d2:63:7a:7d:48:3f:b8:fa:df:b2:f1:ed:47:
95:b7:6c:66:f6:59:0e:85:9c:39:2a:62:b4:a6:bb:
dc:e6:54:85:59:e2:13:1f:2a:fc:3c:46:b4:9f:dc:
60:fc:9a:94:c4:39:09:3e:6c:6b:a7:37:1b:cb:3a:
30:3c:51:3d:9e:66:0e:96:00:a9:b7:b7:b3:c0:d0:
4b:64:cc:d0:04:36:d9:a6:d9:7c:a4:06:8a:fc:bc:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:75:1A:90:84:FA:8E:6F:3F:FA:5A:7F:FE:11:C5:B9:C8:0B:C6:2C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WnUakIT6jm8_-lp__hHFucgLxiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.64.0/24
Signature Algorithm: sha256WithRSAEncryption
af:4f:35:00:b9:8a:07:7e:61:a4:8e:c0:53:79:06:e2:c8:45:
c1:1b:f9:d2:4c:4f:09:f5:cf:00:c5:a1:2f:2c:4a:98:e4:42:
a0:0d:74:81:b4:5e:94:e7:c8:b8:db:3d:94:fc:81:a0:ba:bf:
f8:d9:9c:47:4b:2d:71:ba:ad:11:b5:d6:29:84:d4:62:c9:0f:
5f:c8:d2:ea:ad:23:87:16:3a:76:0d:e0:3d:79:94:ab:09:3e:
93:4a:d7:01:8b:a5:a2:af:98:34:ce:42:5e:66:23:46:cf:85:
33:68:8d:15:c8:1b:ae:f1:12:0c:fe:c0:e2:c3:39:bc:3c:0c:
e0:da:bf:3e:2e:50:c7:ea:eb:12:56:00:44:09:58:e8:22:86:
fb:15:dd:8e:5d:6e:4b:2e:d3:87:f3:d5:16:b7:58:80:4d:ea:
21:8c:2e:90:ca:2c:19:2a:4c:23:dc:64:39:94:6c:ef:a5:22:
3e:9e:e2:3e:e2:1d:b2:6e:46:d6:27:37:b6:09:84:11:2c:d2:
b0:eb:21:e1:00:58:72:05:3f:86:3a:4c:d9:d5:52:6b:2d:7d:
55:c7:ec:56:ca:93:ea:67:50:1c:59:01:b8:34:e7:37:96:4f:
55:6d:29:11:3e:47:f7:43:0a:03:96:4a:4d:13:b3:db:61:26:
95:84:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:55 2026 by rpki-client