Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bCTuK0ASsWmyuqQU0Wk4JUADw5Y.roa
File: bCTuK0ASsWmyuqQU0Wk4JUADw5Y.roa (raw, json)
Hash identifier: TT5hPbVJvsOdhqLKbA5hCFVhwaeM+pLxsVMo9BA5vRY=
Subject key identifier: 6C:24:EE:2B:40:12:B1:69:B2:BA:A4:14:D1:69:38:25:40:03:C3:96
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D7216F8FCD165F780DC9A981B0C56D5B1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bCTuK0ASsWmyuqQU0Wk4JUADw5Y.roa
Signing time: Thu 09 Apr 2026 11:53:21 +0000
ROA not before: Thu 09 Apr 2026 11:53:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209109
IP address blocks: 31.57.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:16:f8:fc:d1:65:f7:80:dc:9a:98:1b:0c:56:d5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 9 11:53:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c24ee2b4012b169b2baa414d16938254003c396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:e7:19:d4:f9:99:8c:c4:c9:7a:6f:90:4b:
51:0b:94:62:e0:15:bd:68:a9:a1:44:27:cc:0d:16:
a9:6c:43:86:1f:fa:07:f1:bd:4b:36:07:3a:86:9f:
18:c7:d9:fa:75:22:02:e2:64:d0:ec:dd:28:c9:18:
e0:1d:af:3d:a8:72:a9:3b:4d:c0:00:85:11:46:e1:
2e:ce:23:44:50:e3:7d:d3:83:f8:ae:e1:0c:48:f9:
55:94:01:10:60:5e:84:37:31:98:75:8a:c9:5c:e3:
be:5b:be:e2:ce:ab:82:2d:15:b8:e9:e2:58:d9:98:
25:09:53:af:57:ec:ef:55:e6:fa:6f:c9:07:ad:d6:
63:02:f1:c0:e0:a2:2f:42:59:30:73:7e:05:ca:82:
35:19:49:e8:a7:c2:37:3c:0c:59:81:29:51:2f:df:
7d:47:93:41:52:37:04:e1:59:d5:a4:fb:be:04:e9:
21:f9:05:fd:1e:18:1e:93:73:6e:8c:be:24:0d:c0:
a1:11:87:89:0f:ad:46:b5:d7:96:11:cc:e9:a9:f2:
77:88:e5:9e:1d:c2:8b:e8:45:a5:69:bf:73:61:03:
9c:13:2a:27:38:d6:5f:bf:3e:a1:49:81:2d:d9:c3:
e1:65:b3:ec:6f:b3:8d:4a:93:89:9b:6e:a1:c8:2f:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:24:EE:2B:40:12:B1:69:B2:BA:A4:14:D1:69:38:25:40:03:C3:96
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bCTuK0ASsWmyuqQU0Wk4JUADw5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.31.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:ac:71:43:54:b2:f7:bc:8c:a1:d6:9d:fc:f4:eb:d0:a9:50:
97:44:d4:2e:b1:b0:75:c7:6f:7f:50:9c:a5:c4:49:33:ee:23:
26:5d:a6:a7:83:57:39:3d:69:c8:60:d6:53:51:05:75:e0:c6:
b4:95:18:11:62:99:5c:ff:8b:47:a8:6a:bf:9c:13:3f:a8:34:
76:87:61:ef:39:17:0a:e0:46:30:41:ad:89:f3:8d:18:12:b1:
77:bc:bb:46:a5:5d:8b:ae:54:77:cf:84:17:e5:7b:39:ac:f5:
41:d5:2b:ff:db:cd:a5:83:3a:ab:23:85:28:65:8f:68:1b:01:
e0:7c:13:ce:f4:65:79:f1:72:72:7f:98:ee:28:5a:5a:f4:7d:
e9:70:40:db:1e:e8:24:0d:43:5f:30:eb:1b:80:af:20:62:f5:
18:c6:c7:ff:f9:93:59:5a:6c:fd:85:58:cd:03:6e:7a:70:94:
03:e0:4a:00:fe:03:7b:c2:5b:dc:1c:00:27:11:19:d0:97:db:
5a:e9:84:a8:c4:00:33:7b:b6:e4:bc:50:06:df:cd:4f:98:e9:
22:de:c1:e6:33:a2:60:bd:d1:d1:b5:35:0e:3b:a4:ad:23:5c:
38:60:c9:51:56:bb:0a:ae:10:ee:16:cb:a8:77:a7:7c:4c:c2:
b9:be:bb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:14 2026 by rpki-client