Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nHgire4tjPkAL8uvTgWtGIHiAJ8.roa
File: nHgire4tjPkAL8uvTgWtGIHiAJ8.roa (raw, json)
Hash identifier: BzWlPzjzekfLMHgmtRF82KSq27ikUrMkLIo8N+Y8ak0=
Subject key identifier: 9C:78:22:AD:EE:2D:8C:F9:00:2F:CB:AF:4E:05:AD:18:81:E2:00:9F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0AE1637FB5824398215DAC96E46266933
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nHgire4tjPkAL8uvTgWtGIHiAJ8.roa
Signing time: Thu 17 Sep 2026 06:38:06 +0000
ROA not before: Thu 17 Sep 2026 06:38:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209043
IP address blocks: 31.56.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:16:37:fb:58:24:39:82:15:da:c9:6e:46:26:69:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 17 06:38:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c7822adee2d8cf9002fcbaf4e05ad1881e2009f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:db:82:aa:70:7a:50:e0:23:ad:19:9d:99:
72:77:ac:32:5b:47:74:32:84:bd:f5:8b:d8:6e:53:
4b:e3:a3:9c:5e:37:4b:70:e9:ac:57:9e:b3:23:bb:
58:89:03:a7:b1:f6:2a:f3:69:30:86:e5:e3:1e:e9:
ee:c4:24:2c:14:11:cc:1e:ac:01:84:fe:60:e5:6f:
e7:16:47:0f:72:5a:a7:1e:36:bb:81:65:24:aa:7d:
ae:7c:6b:96:30:40:4f:44:47:3e:a9:87:60:b2:a5:
b6:38:c8:a4:d2:a9:f0:9a:e4:69:f7:21:f7:46:4b:
e3:71:6a:0e:19:63:af:b7:6b:c0:f8:d7:af:72:71:
9b:7d:e0:4b:a9:fd:e6:63:41:00:16:6e:3a:50:a6:
0f:fb:1f:60:71:21:d4:b0:ea:54:75:26:33:ac:c0:
8a:be:be:75:7b:9b:13:1d:90:80:e2:1d:4e:64:6e:
60:f5:cd:07:89:93:4f:df:67:7b:43:7a:fe:3c:0a:
0b:9c:fc:1e:a7:00:a1:d2:7e:f1:a0:41:66:52:ed:
74:8d:40:16:5a:9e:b9:97:e0:cd:2f:f5:06:77:26:
49:81:26:cf:a5:d8:69:49:2d:ad:35:55:bd:95:05:
06:d7:1d:19:c6:fb:86:d6:e9:e8:6c:e3:00:24:16:
d3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:78:22:AD:EE:2D:8C:F9:00:2F:CB:AF:4E:05:AD:18:81:E2:00:9F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nHgire4tjPkAL8uvTgWtGIHiAJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.57.0/24
Signature Algorithm: sha256WithRSAEncryption
28:4c:7e:da:db:89:9c:88:c7:64:d8:96:2e:25:5f:f8:8c:80:
6b:a1:01:4c:11:72:ea:74:a7:f1:64:d7:86:04:b8:6d:bc:06:
95:ad:1c:b4:ee:45:1a:ed:6e:d6:ab:b9:6c:41:22:51:be:ef:
9b:fd:ef:87:8b:6e:79:b5:d4:50:41:d4:7b:60:7d:38:fc:11:
2e:12:23:c1:0a:cc:73:6e:53:c0:81:b7:31:e9:08:4d:48:bf:
c5:f4:bd:45:b8:42:63:b2:1d:f9:77:f2:39:32:4b:53:92:53:
3f:e8:35:37:a5:40:b2:63:6d:e6:fe:c5:0f:42:be:f3:c0:e3:
af:a7:4c:24:a8:26:e3:ca:12:4a:93:25:35:be:50:6e:5d:08:
23:dd:8c:16:aa:13:fb:86:b3:7b:bc:3b:1a:88:a7:e4:ca:2e:
24:9d:9e:78:99:c6:83:58:5a:3e:e1:53:2a:38:db:cb:a9:7e:
ca:66:b7:13:13:ed:a2:9c:fd:9d:8c:07:55:45:08:07:d9:55:
37:4b:75:14:30:06:d5:59:d9:42:9c:e8:63:20:49:72:57:41:
97:69:64:ef:17:9f:61:c5:06:89:66:ef:41:1c:1a:00:1d:92:
11:00:f5:bc:af:8d:fb:f1:09:10:e1:59:74:9c:17:e4:8b:fb:
d0:cf:bd:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCuFjf7WCQ5ghXayW5GJmkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTE3MDYzODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yzc4MjJhZGVlMmQ4Y2Y5MDAyZmNiYWY0ZTA1YWQxODgxZTIwMDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph7bgqpwelDgI60ZnZlyd6wyW0d0
MoS99YvYblNL46OcXjdLcOmsV56zI7tYiQOnsfYq82kwhuXjHunuxCQsFBHMHqwB
hP5g5W/nFkcPclqnHja7gWUkqn2ufGuWMEBPREc+qYdgsqW2OMik0qnwmuRp9yH3
RkvjcWoOGWOvt2vA+NevcnGbfeBLqf3mY0EAFm46UKYP+x9gcSHUsOpUdSYzrMCK
vr51e5sTHZCA4h1OZG5g9c0HiZNP32d7Q3r+PAoLnPwepwCh0n7xoEFmUu10jUAW
Wp65l+DNL/UGdyZJgSbPpdhpSS2tNVW9lQUG1x0ZxvuG1unobOMAJBbTawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJx4Iq3uLYz5AC/Lr04FrRiB4gCfMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbkhnaXJlNHRqUGtBTDh1dlRnV3RHSUhpQUo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzg5MA0G
CSqGSIb3DQEBCwUAA4IBAQAoTH7a24mciMdk2JYuJV/4jIBroQFMEXLqdKfxZNeG
BLhtvAaVrRy07kUa7W7Wq7lsQSJRvu+b/e+Hi255tdRQQdR7YH04/BEuEiPBCsxz
blPAgbcx6QhNSL/F9L1FuEJjsh35d/I5MktTklM/6DU3pUCyY23m/sUPQr7zwOOv
p0wkqCbjyhJKkyU1vlBuXQgj3YwWqhP7hrN7vDsaiKfkyi4knZ54mcaDWFo+4VMq
ONvLqX7KZrcTE+2inP2djAdVRQgH2VU3S3UUMAbVWdlCnOhjIElyV0GXaWTvF59h
xQaJZu9BHBoAHZIRAPW8r4378QkQ4Vl0nBfki/vQz73T
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:21:28 2026 by rpki-client