Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hE5kTbWUyAI9Aj10bMixu-Rvlu0.roa
File: hE5kTbWUyAI9Aj10bMixu-Rvlu0.roa (raw, json)
Hash identifier: hg4U4R1i2ClcL6zE9nqfwqgESQuf2gh5IcpAcwtPFMM=
Subject key identifier: 84:4E:64:4D:B5:94:C8:02:3D:02:3D:74:6C:C8:B1:BB:E4:6F:96:ED
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0AE1638A4B48FCB6A636523296BC2DFAB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hE5kTbWUyAI9Aj10bMixu-Rvlu0.roa
Signing time: Thu 17 Sep 2026 06:38:06 +0000
ROA not before: Thu 17 Sep 2026 06:38:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401486
IP address blocks: 31.56.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:16:38:a4:b4:8f:cb:6a:63:65:23:29:6b:c2:df:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 17 06:38:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=844e644db594c8023d023d746cc8b1bbe46f96ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:00:7a:f9:05:1c:1e:e8:ef:a8:01:a1:b4:78:
74:cd:73:d9:e6:ec:a2:98:a1:20:41:ec:5c:24:0b:
a7:e2:b8:b7:63:1a:dc:d1:8d:ee:00:0f:f8:06:ba:
e2:b6:91:f4:36:0c:4f:ab:54:30:06:4e:00:d4:df:
43:08:a1:71:42:35:b7:b5:2a:9e:15:08:24:7f:4b:
d7:cd:90:ca:e7:68:ad:42:1c:16:75:90:7c:f9:cf:
44:4c:e1:b0:b7:a8:99:40:e6:f2:6d:c7:fb:6c:8a:
f0:e8:f8:db:ab:66:7e:76:f3:b4:10:41:03:12:cc:
24:f9:88:4b:74:30:bf:67:09:5e:c0:b8:0d:0a:e6:
6e:85:0d:d1:e8:47:df:1b:ec:1b:95:53:46:6e:db:
e2:31:cf:22:a9:46:16:26:5e:e6:1f:cf:63:90:bc:
31:fb:f9:29:40:c8:c9:5f:d1:c7:f8:1c:0b:7a:3c:
cc:ed:26:65:b7:46:a9:99:da:0a:44:e7:b0:ed:2b:
8d:40:8b:79:62:50:91:6c:5b:cd:28:49:c4:5b:c3:
57:10:d9:34:2f:a1:e1:b0:71:76:7d:7c:b8:bb:5c:
fd:73:86:67:ea:bf:fb:24:f4:15:49:5a:46:57:65:
ca:4c:23:e0:d7:f0:d4:04:aa:96:13:09:8b:8f:60:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4E:64:4D:B5:94:C8:02:3D:02:3D:74:6C:C8:B1:BB:E4:6F:96:ED
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hE5kTbWUyAI9Aj10bMixu-Rvlu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.64.0/24
Signature Algorithm: sha256WithRSAEncryption
02:72:fd:7d:8b:1a:ff:ef:a9:e9:0a:11:56:4a:5d:94:2e:80:
ea:8c:e6:19:5b:35:a2:56:60:6a:e5:5a:17:a3:16:ed:70:38:
3f:8f:05:71:31:c3:27:2c:94:e0:72:56:4b:7b:9f:81:0f:79:
8d:7f:7f:41:1a:06:02:e5:70:54:b6:e4:bc:5a:c8:8d:0d:20:
af:ef:79:a4:79:d0:89:0b:b6:41:e0:47:a8:76:70:8c:43:7a:
b3:79:3d:12:cb:f2:69:96:89:c0:a3:41:3e:91:ca:c4:c9:cf:
ba:48:f6:ef:19:84:ae:64:d4:6c:67:dd:3d:00:ea:4f:74:50:
7f:d8:ac:d7:18:01:9e:de:f4:34:f0:bd:0d:71:da:64:40:11:
f3:86:e0:38:72:73:7e:54:67:d4:2a:68:e3:e6:e5:bc:36:8f:
c2:ba:73:da:95:70:82:17:d3:c7:99:1e:3f:a7:95:78:32:c0:
de:cd:c6:14:53:f4:5b:10:09:f9:e5:aa:f9:9f:9d:23:78:d4:
9d:1c:d6:51:9b:5c:c3:8f:b9:0e:66:25:ed:80:a0:ea:45:d8:
72:37:de:f0:ca:5c:02:c2:ea:4a:21:45:67:76:41:ec:81:00:
c0:ea:74:cd:f4:f6:13:d6:33:11:7d:34:de:3e:af:da:fa:62:
67:f3:70:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCuFjiktI/LamNlIylrwt+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTE3MDYzODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDRlNjQ0ZGI1OTRjODAyM2QwMjNkNzQ2Y2M4YjFiYmU0NmY5NmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QB6+QUcHujvqAGhtHh0zXPZ5uyi
mKEgQexcJAun4ri3Yxrc0Y3uAA/4BrritpH0NgxPq1QwBk4A1N9DCKFxQjW3tSqe
FQgkf0vXzZDK52itQhwWdZB8+c9ETOGwt6iZQObybcf7bIrw6Pjbq2Z+dvO0EEED
Eswk+YhLdDC/ZwlewLgNCuZuhQ3R6EffG+wblVNGbtviMc8iqUYWJl7mH89jkLwx
+/kpQMjJX9HH+BwLejzM7SZlt0apmdoKROew7SuNQIt5YlCRbFvNKEnEW8NXENk0
L6HhsHF2fXy4u1z9c4Zn6r/7JPQVSVpGV2XKTCPg1/DUBKqWEwmLj2AdPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIROZE21lMgCPQI9dGzIsbvkb5btMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaEU1a1RiV1V5QUk5QWoxMGJNaXh1LVJ2bHUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhAMA0G
CSqGSIb3DQEBCwUAA4IBAQACcv19ixr/76npChFWSl2ULoDqjOYZWzWiVmBq5VoX
oxbtcDg/jwVxMcMnLJTgclZLe5+BD3mNf39BGgYC5XBUtuS8WsiNDSCv73mkedCJ
C7ZB4EeodnCMQ3qzeT0Sy/JplonAo0E+kcrEyc+6SPbvGYSuZNRsZ909AOpPdFB/
2KzXGAGe3vQ08L0NcdpkQBHzhuA4cnN+VGfUKmjj5uW8No/CunPalXCCF9PHmR4/
p5V4MsDezcYUU/RbEAn55ar5n50jeNSdHNZRm1zDj7kOZiXtgKDqRdhyN97wylwC
wupKIUVndkHsgQDA6nTN9PYT1jMRfTTePq/a+mJn83At
-----END CERTIFICATE-----
Generated at Mon Sep 21 04:10:00 2026 by rpki-client