Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YItbFmu-UJGGg3587zAcMuXxtdo.roa
File: YItbFmu-UJGGg3587zAcMuXxtdo.roa (raw, json)
Hash identifier: NtQC2aNr8HKaVyql2UR7XJuocisYNtKDcASfUoPdOfg=
Subject key identifier: 60:8B:5B:16:6B:BE:50:91:86:83:7E:7C:EF:30:1C:32:E5:F1:B5:DA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D7216F943F2DCB13BCFA4FD74A440BFD1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YItbFmu-UJGGg3587zAcMuXxtdo.roa
Signing time: Thu 09 Apr 2026 11:53:21 +0000
ROA not before: Thu 09 Apr 2026 11:53:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213791
IP address blocks: 31.57.12.0/24 maxlen: 24
31.57.112.0/24 maxlen: 24
31.57.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:16:f9:43:f2:dc:b1:3b:cf:a4:fd:74:a4:40:bf:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 9 11:53:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=608b5b166bbe509186837e7cef301c32e5f1b5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:49:52:e8:0c:76:ea:46:e0:b4:ba:e0:ef:
c0:83:6a:4b:07:1e:d4:e0:f4:81:8c:82:a8:42:cf:
04:49:55:07:4c:3f:05:f7:e0:c9:39:89:1f:18:97:
0e:bc:87:ac:7a:19:f6:c4:2f:61:d2:26:fc:8c:95:
a1:ab:49:51:4d:64:de:ee:27:d2:aa:84:d3:24:f4:
8b:f1:89:5f:f9:ad:8f:2e:fd:2e:2c:74:17:31:f5:
ec:17:7f:c5:4c:71:1a:03:d5:45:d0:21:ad:7a:a5:
fe:c9:9c:03:6e:9b:a3:11:52:38:76:2f:e1:c9:f1:
aa:09:49:00:69:0c:70:58:f2:b9:c3:52:e2:05:78:
32:21:dd:16:4a:fb:c1:a8:1c:e9:08:42:10:8d:16:
ea:2b:0d:57:70:a6:ed:3a:23:08:ac:0f:b3:d5:78:
10:31:73:d3:db:99:32:6d:3d:9e:8b:67:6f:eb:98:
9f:4a:fc:20:a8:67:2c:9d:5a:31:97:fd:7c:86:30:
90:fe:78:ba:6e:36:d7:27:14:39:2e:97:8b:9e:12:
0e:87:64:e9:43:23:13:05:ec:ae:e8:15:53:39:4a:
08:11:35:6d:bc:6b:5c:14:0a:37:51:82:71:68:8b:
8d:85:ca:b8:50:bb:af:96:25:03:40:0a:8b:0d:31:
6e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8B:5B:16:6B:BE:50:91:86:83:7E:7C:EF:30:1C:32:E5:F1:B5:DA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YItbFmu-UJGGg3587zAcMuXxtdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.12.0/24
31.57.112.0/24
31.57.202.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a9:f9:9f:f8:5b:48:39:ca:46:20:2f:dd:7b:b7:43:c0:ec:
5c:5b:9a:23:49:6b:91:24:27:f2:20:0b:55:9b:9c:7c:18:94:
cd:49:0c:85:53:94:da:ce:df:39:82:35:75:c3:52:d4:02:97:
b4:c5:a4:63:c8:bb:59:cd:8b:4c:f2:87:ab:67:ad:84:73:7d:
ba:db:a4:0f:8e:46:4d:e1:f6:3f:02:b7:ea:6c:0e:c3:ca:8f:
bd:2c:5e:98:ec:3b:bd:45:9d:fd:4c:c7:52:9e:d0:88:39:fd:
e6:be:82:6a:e4:71:8a:48:20:73:a2:d7:48:5f:de:ea:d5:77:
b1:13:93:81:e8:72:74:01:a9:6d:08:ff:01:00:79:51:c4:dc:
79:41:5e:20:f2:b1:6b:43:b3:78:d0:c3:0d:97:3a:1a:fa:16:
30:5f:c3:b8:be:7c:12:61:9f:2d:e5:e7:23:ee:02:ff:58:f5:
e4:93:75:88:e2:c0:ec:5f:f1:f2:46:39:bf:2c:51:71:bc:5d:
20:cc:e3:54:7c:28:64:19:46:6e:74:c9:f6:05:30:d5:a0:1d:
e5:32:8a:22:3a:d6:cb:03:b2:79:23:9e:09:99:18:3a:e2:59:
2b:c8:8e:3c:46:9e:8c:38:ce:31:a3:7b:04:cb:40:80:79:b2:
17:c2:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:20 2026 by rpki-client