Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f7afaEYBtS6nomA05MfczGouBWk.roa
File: f7afaEYBtS6nomA05MfczGouBWk.roa (raw, json)
Hash identifier: gInU/3vfFXuBkMyeWcm2QcigBAFo6FjRfOgx4vnJpp8=
Subject key identifier: 7F:B6:9F:68:46:01:B5:2E:A7:A2:60:34:E4:C7:DC:CC:6A:2E:05:69
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D59262D4F540884FFBC20C1055CE52C24
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f7afaEYBtS6nomA05MfczGouBWk.roa
Signing time: Sat 04 Apr 2026 15:39:27 +0000
ROA not before: Sat 04 Apr 2026 15:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152460
IP address blocks: 31.57.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:59:26:2d:4f:54:08:84:ff:bc:20:c1:05:5c:e5:2c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 4 15:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fb69f684601b52ea7a26034e4c7dccc6a2e0569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:81:09:2c:f2:e8:03:a1:2f:cc:4d:6e:f9:
e1:a5:5d:b2:c5:7c:07:f9:df:f3:97:17:0e:b9:24:
dd:af:fa:16:8a:21:82:33:75:7c:03:02:36:59:7b:
ca:ee:be:20:8b:73:e7:0e:c5:d3:9f:9e:de:44:fc:
8d:8d:94:83:36:31:3d:d6:9c:38:a5:62:2d:ed:9f:
22:8c:a2:7e:4d:35:89:41:e9:a0:5b:20:b4:f3:70:
53:b0:f9:e6:48:e9:75:e6:52:64:e2:a0:8a:da:3b:
a5:a5:30:40:c0:51:39:b7:a0:3e:1b:73:85:3b:79:
55:18:4e:e3:3f:75:eb:19:10:d5:ba:fd:92:21:84:
77:99:93:19:e2:9f:56:9b:5a:bc:d7:5e:09:45:ee:
e7:be:37:85:3a:18:94:1a:f9:b1:7c:38:86:e8:a7:
6f:69:54:8c:c7:1a:24:b6:45:fa:bc:3f:fb:4b:95:
5c:97:05:87:b3:df:5c:c4:e9:e9:72:c7:67:6e:00:
f7:7e:db:7b:ac:31:23:14:5e:91:a0:b5:89:a4:75:
48:be:97:84:f1:d2:cd:4f:b1:58:3f:c4:62:9f:57:
5b:c3:22:62:01:15:0d:70:55:4b:2d:73:34:6c:44:
2f:42:48:b8:80:a5:4b:d9:73:e2:41:5a:70:d2:01:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B6:9F:68:46:01:B5:2E:A7:A2:60:34:E4:C7:DC:CC:6A:2E:05:69
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f7afaEYBtS6nomA05MfczGouBWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:77:49:ee:04:da:67:7c:c5:08:9c:2e:9f:c2:c6:1f:d1:af:
3f:ec:54:ec:dc:73:53:b9:ef:88:cc:c5:1f:a9:97:25:4a:af:
4c:cb:a6:dd:32:72:5a:6c:94:98:3d:3f:77:cc:4e:ca:1a:2c:
fe:a3:69:49:a0:f0:3c:76:37:84:1d:8b:81:61:99:57:a6:07:
94:f3:5c:53:87:4c:c5:43:5a:8e:3e:d0:7a:4f:9f:30:ba:9a:
bc:04:ac:3c:7f:56:15:52:61:fc:fd:78:0a:13:ea:e3:cb:ae:
5b:ef:d9:01:b6:ac:4e:f2:61:b2:b8:a4:9b:5f:1a:ac:40:8e:
79:c0:0d:6b:4d:80:47:d7:5e:c5:7a:01:4c:fd:9a:86:18:96:
04:90:be:5b:2b:b4:69:16:a6:c0:cf:87:ab:e4:9a:8e:1c:09:
98:d3:42:82:6e:cd:b1:bf:54:f5:05:75:e5:48:35:77:6f:45:
55:9f:ac:85:e2:65:2c:08:4e:93:0b:65:44:15:8a:73:e6:7a:
bc:b5:61:fe:3e:09:1b:31:90:5c:fa:ce:ef:d5:8c:d2:d5:f2:
42:0b:64:be:ef:0e:44:aa:0a:12:c8:22:6e:74:60:8e:f3:0b:
8f:8d:0f:a6:11:be:f3:70:cc:37:d2:6f:92:87:47:4b:29:13:
0a:e2:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:27:15 2026 by rpki-client