Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_iGf8ULpHdTWWMO27MiP1IfQoBE.roa
File: _iGf8ULpHdTWWMO27MiP1IfQoBE.roa (raw, json)
Hash identifier: jgrJ/ii83r7Nn7Nqnoxx6rZb6s7aUAfv48KI3cWVQRI=
Subject key identifier: FE:21:9F:F1:42:E9:1D:D4:D6:58:C3:B6:EC:C8:8F:D4:87:D0:A0:11
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0B58023ED31BBFC2F5B0B02F7B71F00C5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_iGf8ULpHdTWWMO27MiP1IfQoBE.roa
Signing time: Fri 18 Sep 2026 17:11:08 +0000
ROA not before: Fri 18 Sep 2026 17:11:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56655
IP address blocks: 31.56.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:80:23:ed:31:bb:fc:2f:5b:0b:02:f7:b7:1f:00:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 18 17:11:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe219ff142e91dd4d658c3b6ecc88fd487d0a011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:cc:1d:55:17:f8:98:ec:24:e4:a1:a1:56:
00:34:ec:ae:93:fc:b8:1b:92:6c:00:80:fb:c3:10:
1e:5d:bc:5e:01:7b:30:70:25:32:1f:ac:ca:38:66:
0f:47:01:f1:1d:9d:df:a8:93:d1:20:90:d7:57:48:
d1:0f:cc:ee:9a:25:fa:a9:a5:1b:17:43:ef:ba:18:
c1:87:04:f2:22:d6:49:c7:3c:80:11:ba:57:4f:76:
cb:8a:c9:39:32:f7:cd:3a:60:11:3a:32:e4:16:a8:
75:2d:3c:c3:3d:c4:1f:40:f1:9f:a2:72:10:d8:dc:
fc:32:7a:67:a6:f9:dd:f0:fd:ad:1b:2f:6a:e4:6c:
f3:6c:5f:51:3d:3b:0d:73:17:01:c5:42:81:d9:3f:
f1:be:88:70:e7:50:53:51:6f:cc:5c:11:c5:1e:06:
77:5a:ab:b8:ce:98:98:05:81:2b:1c:ea:7f:4f:f6:
cc:7c:89:44:a3:8d:8a:0d:a1:47:11:76:15:d9:ac:
d1:2e:a2:14:b5:8a:69:8c:88:cd:d2:19:15:82:4e:
23:4f:7c:d1:c1:78:d3:96:1d:8a:0e:69:4d:bb:92:
a5:fb:69:af:b1:fb:3c:d7:30:b2:ed:21:e9:c7:a2:
16:95:54:42:31:dc:20:20:1d:34:52:02:88:91:ef:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:21:9F:F1:42:E9:1D:D4:D6:58:C3:B6:EC:C8:8F:D4:87:D0:A0:11
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_iGf8ULpHdTWWMO27MiP1IfQoBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a4:de:a3:fa:73:68:5c:03:e0:39:d2:1b:ba:cc:a0:7d:70:
96:0d:1d:83:65:6b:b3:94:13:7c:76:dc:93:5f:17:b7:9e:10:
44:99:8c:20:d4:04:38:58:f2:f8:32:c7:c8:d5:c9:fc:54:63:
2b:33:dc:8d:0b:0f:cf:cb:7f:f5:39:11:a8:19:23:e4:f9:f2:
75:6a:33:1c:84:08:ca:66:ca:4e:7c:12:c1:d7:ae:71:1a:f4:
97:57:e4:5d:54:27:8f:aa:b9:22:98:9c:a9:b8:42:12:eb:58:
82:50:2a:ea:88:54:b7:1b:d3:95:1c:58:c7:91:d0:7b:8e:09:
0e:38:76:7f:45:9b:b9:80:1b:54:10:ec:1c:42:60:92:6f:cd:
9e:c4:0e:ca:36:72:0b:35:ac:0b:6a:20:75:1c:a7:36:df:17:
6c:5c:4d:e0:0c:26:94:1a:32:da:e4:cc:81:bc:64:77:eb:e2:
e9:21:21:18:ef:a4:4d:5e:b1:18:9b:11:e6:a0:9c:e8:a7:58:
ad:bc:88:d2:df:80:5d:fd:14:22:fd:76:d8:bb:26:ff:00:a5:
73:9f:27:15:90:dc:51:d0:83:e3:85:98:43:60:0c:5a:da:3d:
7e:f0:89:1c:e0:b7:f2:8e:65:97:e3:72:58:00:39:37:05:e7:
63:dc:5b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:37:21 2026 by rpki-client