Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ajupol3aH5Jt8ygQ3MjNuYLW62A.roa
File: ajupol3aH5Jt8ygQ3MjNuYLW62A.roa (raw, json)
Hash identifier: r0tAUyXH1rePcaA08yEALEsqq3oBoWxIil8NG++WGM8=
Subject key identifier: 6A:3B:A9:A2:5D:DA:1F:92:6D:F3:28:10:DC:C8:CD:B9:82:D6:EB:60
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A07567A8F8B24F15EAF1227F3878330A21
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ajupol3aH5Jt8ygQ3MjNuYLW62A.roa
Signing time: Sun 06 Sep 2026 06:28:42 +0000
ROA not before: Sun 06 Sep 2026 06:28:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 31.56.96.0/24 maxlen: 24
31.59.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:67:a8:f8:b2:4f:15:ea:f1:22:7f:38:78:33:0a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 6 06:28:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a3ba9a25dda1f926df32810dcc8cdb982d6eb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:69:1b:11:22:ff:58:2f:f2:5c:6a:8e:84:34:
9d:70:59:41:32:b5:2c:6e:52:53:16:f5:d1:36:cd:
6b:70:6d:dc:47:a3:90:3c:44:c0:a9:b0:fe:7d:1c:
af:ca:3d:e1:04:54:48:17:95:2e:2f:f1:57:85:d6:
7c:ea:9d:69:31:0b:89:1c:30:e0:22:19:f2:8c:03:
5f:69:eb:94:17:a7:88:58:28:30:9a:0b:39:a1:b3:
47:20:ad:bd:21:65:ea:b8:63:3b:29:ab:47:d0:9b:
0a:65:1e:a7:2a:da:d6:58:6b:33:d9:74:19:ea:cd:
ca:2b:42:a7:81:2f:50:27:9b:54:e0:ed:72:b3:af:
d0:ac:cc:74:db:d9:b5:80:78:96:4d:c8:76:04:3d:
d8:03:6c:48:14:7d:83:18:db:41:a1:76:5b:b7:c4:
b4:f7:a8:0b:3e:e5:f3:13:b0:57:1b:af:4c:21:83:
29:80:a5:62:7f:f4:14:bc:21:6a:8d:ac:34:65:ec:
ff:a5:f1:5e:2c:34:ec:48:d2:68:67:cd:c7:08:d1:
05:18:fa:2c:12:6a:0c:40:c4:63:28:77:c0:10:c3:
09:c0:09:e8:d5:e8:4f:83:5f:c8:9b:9b:7e:41:17:
d5:c4:cc:a0:ee:a6:1c:a5:49:86:19:03:38:6a:bb:
aa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3B:A9:A2:5D:DA:1F:92:6D:F3:28:10:DC:C8:CD:B9:82:D6:EB:60
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ajupol3aH5Jt8ygQ3MjNuYLW62A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.96.0/24
31.59.116.0/24
Signature Algorithm: sha256WithRSAEncryption
86:97:ee:de:bf:db:5a:ad:7a:9f:6f:fa:e6:83:6b:6e:ed:8d:
4b:80:6e:7b:1d:09:f5:38:59:eb:2a:58:35:cc:9b:ce:ba:d6:
a2:2c:9c:67:db:d0:37:99:14:a0:67:5b:05:be:d5:ae:47:79:
34:0e:d0:81:d7:00:3e:ba:5d:ca:57:b6:cc:6a:5e:8c:15:18:
60:95:96:15:39:4c:fa:5d:3f:10:bf:53:4d:64:61:0b:f7:32:
85:4a:6f:2b:98:1c:ca:5d:e2:c8:86:2f:bc:ed:46:5f:56:ad:
f2:8c:d0:6e:3e:7e:15:b3:6b:3c:2b:2c:78:f3:11:61:5f:cb:
0d:7a:14:8a:e6:f4:38:4d:6e:10:2e:4f:51:b9:16:22:a6:0b:
ff:14:e6:9b:c6:43:76:51:b4:7a:44:c6:80:d4:d9:34:11:4c:
56:c4:a8:15:db:1d:24:44:2c:f1:b6:65:c3:e9:69:64:f5:0b:
3e:29:4f:d9:99:39:de:5a:8f:e3:f4:27:5f:b5:1e:9f:47:b5:
58:47:fd:ec:0e:60:0c:c6:cd:a3:a5:2c:1a:be:08:e6:fe:fb:
c9:79:de:34:06:f6:45:e7:d8:24:95:5f:cf:b1:c6:87:e9:93:
79:6e:1b:9b:ed:9f:bd:42:c4:20:7c:34:56:01:e1:06:02:7f:
38:76:3f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:17 2026 by rpki-client