Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m2ZI3HPWa6PHOCcnP6PC__x2Ht8.roa
File: m2ZI3HPWa6PHOCcnP6PC__x2Ht8.roa (raw, json)
Hash identifier: 8U9RXWeu9TJ8f7eARGZ3hZ/g9CnKoSxwkK5pKDv8LXg=
Subject key identifier: 9B:66:48:DC:73:D6:6B:A3:C7:38:27:27:3F:A3:C2:FF:FC:76:1E:DF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0AA4FC2377ADE3D7EF036E931AA33CA1E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m2ZI3HPWa6PHOCcnP6PC__x2Ht8.roa
Signing time: Wed 16 Sep 2026 13:02:28 +0000
ROA not before: Wed 16 Sep 2026 13:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218702
IP address blocks: 31.56.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:4f:c2:37:7a:de:3d:7e:f0:36:e9:31:aa:33:ca:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 16 13:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b6648dc73d66ba3c73827273fa3c2fffc761edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:9b:e9:4a:fb:b9:3b:bc:9b:d1:3b:e7:b8:
3f:52:55:7f:c6:1e:6e:95:8d:50:17:9b:33:70:ab:
2a:e9:63:13:fa:4f:2a:63:74:bc:77:67:07:8b:b7:
2c:d4:f3:1c:d6:a1:58:f4:d7:a2:de:fb:44:51:bc:
49:6a:29:5e:2d:ce:83:24:de:54:cb:78:ff:63:89:
e1:ad:23:12:c3:6b:ea:57:4c:db:b7:4a:2d:b9:f9:
92:dc:27:32:de:83:6e:36:96:22:4d:ad:8a:69:01:
d5:6c:f4:b8:c6:24:93:51:c4:10:2b:8b:1c:cf:df:
3c:75:d4:28:1e:6c:55:83:b7:7c:a6:09:10:4e:c9:
47:ed:97:95:79:c5:07:9e:82:96:88:d2:1a:fe:a5:
d0:c8:b7:83:27:2b:a7:e0:99:34:12:49:e2:4c:1f:
a7:5e:cf:49:a3:ea:66:21:e8:a9:ff:00:d0:52:ed:
96:c9:16:6d:2a:2b:5a:6c:ac:9f:09:95:e9:16:8b:
cd:13:d9:92:d2:7d:69:df:94:f7:ff:e9:94:54:ec:
98:9c:44:0a:c6:60:fc:a6:29:0f:ad:b8:85:b5:8f:
5b:2c:ab:04:dc:d9:92:30:ee:e6:88:6c:17:12:88:
59:d2:32:eb:ac:8c:9d:18:42:75:f8:64:19:7e:96:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:66:48:DC:73:D6:6B:A3:C7:38:27:27:3F:A3:C2:FF:FC:76:1E:DF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m2ZI3HPWa6PHOCcnP6PC__x2Ht8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/24
Signature Algorithm: sha256WithRSAEncryption
36:39:00:36:cd:15:d5:06:c7:c1:91:09:cd:b7:42:f3:97:44:
0e:2f:92:0e:41:19:79:cd:97:f8:14:4d:64:ea:15:14:2e:1f:
65:0b:31:bb:d4:bd:b2:1a:ca:7b:0d:31:a1:32:ea:4d:d5:dc:
a7:74:48:b9:76:3a:ef:89:4a:b8:19:d6:37:08:f3:a7:e9:eb:
5a:a2:a3:16:d4:0f:97:03:8b:d5:6e:c1:50:95:e9:29:ba:dc:
fe:f8:27:a6:97:2a:2a:d7:a8:95:34:7e:63:83:04:bc:b5:73:
3a:47:7a:c0:92:43:74:aa:be:85:c7:e9:08:17:02:a3:ac:5d:
6d:50:4a:e1:27:12:12:0d:b9:49:11:d4:df:3a:34:f5:88:c7:
04:25:d2:f7:73:ff:7b:1e:42:68:96:bf:c4:57:16:58:47:8f:
08:75:7d:e9:89:bf:fa:b1:3b:ed:b5:b6:13:b6:ea:39:64:ef:
df:d5:c8:73:9a:86:9c:65:a1:2e:fd:90:75:4e:6b:e0:ea:d0:
71:9a:d1:de:d3:86:90:06:9e:c0:d5:fd:4d:57:0a:b4:5c:b7:
15:de:f2:a4:3f:01:7b:8e:66:8f:b6:cc:6f:78:ef:22:26:27:
31:78:29:bc:01:2b:7e:d8:f3:ed:ac:b9:1a:c9:2f:a1:84:fd:
4b:b9:d3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:11:25 2026 by rpki-client