Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gN7qWthS37HNWjlfUNLqMrWRxdo.roa
File: gN7qWthS37HNWjlfUNLqMrWRxdo.roa (raw, json)
Hash identifier: sq/8Y+XfRN0NtzCQ7pWzd4z0Bm/d+/gzNYFa3Cf8ScQ=
Subject key identifier: 80:DE:EA:5A:D8:52:DF:B1:CD:5A:39:5F:50:D2:EA:32:B5:91:C5:DA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D54A49CA7817BB477623514AEBCD959DB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gN7qWthS37HNWjlfUNLqMrWRxdo.roa
Signing time: Fri 03 Apr 2026 18:39:27 +0000
ROA not before: Fri 03 Apr 2026 18:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216145
IP address blocks: 31.57.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:54:a4:9c:a7:81:7b:b4:77:62:35:14:ae:bc:d9:59:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 3 18:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80deea5ad852dfb1cd5a395f50d2ea32b591c5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:02:42:9a:d5:87:a3:b4:90:49:b6:76:c7:
60:12:af:ea:1f:ab:5c:be:70:0c:27:cb:7e:67:c5:
4f:94:f3:78:fd:1e:01:54:3a:b4:ff:cf:39:57:07:
38:9b:da:1c:31:de:37:bc:c6:4e:7a:04:6e:be:2b:
52:5d:81:e9:b9:55:41:a6:ca:f5:61:22:0d:44:f7:
8f:fc:d6:4d:c0:eb:56:fa:24:0c:93:fd:27:d9:0d:
b7:e8:d0:4a:2f:49:c3:ce:bc:42:f2:23:72:6d:3c:
37:c5:d0:d5:9f:14:81:5c:40:ca:a4:85:8d:4d:97:
c2:96:4f:11:19:48:6c:8c:49:de:69:38:50:65:f1:
64:36:ea:d5:50:31:1e:af:df:56:29:96:fd:78:42:
ad:06:d9:d6:e1:94:e0:aa:35:5a:ab:32:19:2c:0d:
40:17:34:28:c9:39:33:18:ac:87:5e:46:e1:d5:87:
86:ec:7c:61:d2:6f:bf:bb:cd:b6:3b:ab:1d:6f:0b:
ca:a2:11:da:f7:27:a3:59:b1:4a:41:a4:51:af:38:
29:84:4e:f3:e1:99:4c:5c:45:e9:cb:c1:f8:28:00:
d0:b4:17:f0:d8:6a:ff:c5:08:fa:11:00:49:df:58:
57:c0:94:ec:01:58:ff:40:87:1b:74:29:85:aa:23:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DE:EA:5A:D8:52:DF:B1:CD:5A:39:5F:50:D2:EA:32:B5:91:C5:DA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gN7qWthS37HNWjlfUNLqMrWRxdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.167.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:eb:11:13:1b:3c:f0:aa:66:05:3b:20:3e:63:20:5a:db:9b:
73:e9:8e:80:28:bf:f0:93:1d:7b:a3:78:42:a4:8c:4e:ba:99:
d7:fb:39:9b:5a:89:ca:54:91:e2:75:32:97:b7:9f:ab:6a:06:
86:cf:c4:11:69:43:0a:a2:e6:50:da:0f:2f:f0:74:85:0d:fc:
f0:24:9f:7c:38:df:2a:3d:48:08:dc:b3:74:36:35:2a:19:b1:
97:8f:d3:54:10:68:c5:0b:37:d2:7c:95:38:70:79:d7:f9:17:
d2:fb:c2:fe:d3:a7:d2:df:61:3e:70:9d:b0:ef:dd:b2:1b:26:
99:9c:08:bf:f9:05:87:e5:dc:91:2c:7a:07:fc:0f:5a:1d:d5:
34:ac:98:4d:e2:6f:96:bf:77:57:7a:9f:44:29:d6:69:8c:c5:
02:ae:ea:bc:05:13:c6:23:9c:97:71:19:25:1c:11:72:7e:4f:
7c:a8:17:22:81:26:2b:c5:d7:ae:3a:90:61:a7:2f:57:13:db:
b5:da:24:27:31:9c:9a:7f:f6:10:29:e0:aa:48:e5:78:fe:89:
5d:9e:81:7f:35:21:8a:56:a6:a9:ca:91:c5:46:a6:d8:4d:11:
e1:93:3c:18:c7:a6:2d:f5:a5:fc:06:ef:6b:e4:0b:24:96:1f:
e4:79:e1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:02 2026 by rpki-client