Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p6QRRMGypCh17w36jVH_fPGwuWQ.roa
File: p6QRRMGypCh17w36jVH_fPGwuWQ.roa (raw, json)
Hash identifier: sgjwPIKm+HUa9t2bqOlxhD8h37JXpr1XRGgq/sdMfkM=
Subject key identifier: A7:A4:11:44:C1:B2:A4:28:75:EF:0D:FA:8D:51:FF:7C:F1:B0:B9:64
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A07826C598D57F61EF2C4D1C828A0E3C61
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p6QRRMGypCh17w36jVH_fPGwuWQ.roa
Signing time: Sun 06 Sep 2026 19:16:41 +0000
ROA not before: Sun 06 Sep 2026 19:16:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210464
IP address blocks: 31.57.56.0/24 maxlen: 24
31.59.141.0/24 maxlen: 24
31.59.164.0/24 maxlen: 24
217.60.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:78:26:c5:98:d5:7f:61:ef:2c:4d:1c:82:8a:0e:3c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 6 19:16:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7a41144c1b2a42875ef0dfa8d51ff7cf1b0b964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:ee:c3:b9:0d:d5:24:89:1e:6e:2d:99:73:
9f:d6:60:6a:77:ab:48:70:e3:7e:11:d2:26:a0:ba:
75:d1:61:32:59:f7:90:2c:ac:10:d6:94:1b:52:ac:
3f:ad:17:4b:c2:04:23:7d:05:23:c6:a6:63:14:6c:
69:eb:cf:9f:ec:4c:cb:6c:e4:9b:3c:7d:14:35:24:
cc:bf:3a:aa:1e:3f:8b:0d:14:79:d9:74:26:b6:65:
ae:57:11:e3:0c:23:54:25:3c:53:54:a6:73:cc:c3:
2b:45:78:0d:5b:eb:10:1a:b2:7b:28:d7:7d:4c:bc:
1f:49:bc:0d:c0:40:ac:33:8b:56:28:83:ec:3a:c5:
d3:54:af:59:fc:7f:71:d3:70:ed:b5:5f:21:9a:b1:
53:aa:c8:74:0d:6a:0e:43:e7:dd:a9:c4:cf:1a:d1:
c1:af:a9:df:cc:20:a3:0f:aa:67:e8:52:bb:2a:32:
ce:e1:10:f2:43:7d:db:27:d2:6f:32:e5:a2:02:69:
0d:0b:95:84:10:87:43:3c:b2:51:8e:37:f0:79:11:
b7:5d:d6:c4:da:64:2e:71:50:74:34:17:1f:4c:6b:
67:45:72:37:db:e4:74:e7:5a:7e:87:82:f6:4c:3d:
97:24:63:6a:a5:10:13:0f:33:44:be:10:e4:f9:4f:
5a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A4:11:44:C1:B2:A4:28:75:EF:0D:FA:8D:51:FF:7C:F1:B0:B9:64
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p6QRRMGypCh17w36jVH_fPGwuWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.56.0/24
31.59.141.0/24
31.59.164.0/24
217.60.96.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:2a:c0:93:15:c4:ca:a4:eb:47:b3:f5:65:5c:23:fe:a3:d2:
e4:6f:42:55:cc:28:19:79:60:2f:e2:57:a5:62:fb:ef:50:b4:
b8:78:51:f8:66:b8:1f:20:a8:05:89:70:32:80:54:b7:18:bd:
22:ee:c5:54:c0:49:cc:b6:e2:da:c0:bb:86:02:da:bc:15:87:
33:30:1e:0f:ad:3b:1d:41:04:a7:bd:99:ed:31:30:55:a6:40:
a4:0e:69:c3:a7:ed:ca:70:9c:1a:b2:f6:bd:d3:b6:24:d6:b5:
23:77:3e:6d:eb:8e:a1:99:8b:9b:d6:04:a9:3f:93:d8:22:8a:
21:f3:60:01:17:8d:09:ea:09:b6:f3:08:4f:a1:56:f3:58:f8:
74:b0:92:2c:cd:10:bf:ce:a7:24:6f:b0:af:37:8b:91:49:1b:
53:86:4c:a1:f3:3a:d8:db:d9:a8:9f:d1:bd:16:90:3e:df:21:
94:ec:e1:d2:46:9c:72:fd:f1:05:bc:fa:56:5c:c4:5c:a4:ca:
6a:e9:a2:86:79:57:8a:40:8f:10:03:0b:8d:ee:f7:6c:4d:a7:
4d:3d:3d:66:e4:46:ec:de:5e:86:c8:f6:dd:cf:86:5f:fa:5d:
76:92:9d:39:52:da:2d:07:ac:85:50:45:86:6b:98:c6:16:33:
e6:f8:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:12 2026 by rpki-client