Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rifTKK66Zf107KzPeLPofN6CcHg.roa
File: rifTKK66Zf107KzPeLPofN6CcHg.roa (raw, json)
Hash identifier: XrACBWO1CzNJ+5EjDkVeqra7DJ6HX4GPp3KGremR+Jc=
Subject key identifier: AE:27:D3:28:AE:BA:65:FD:74:EC:AC:CF:78:B3:E8:7C:DE:82:70:78
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C8196C7E813CF2E89BBFEEDB2E8099160
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rifTKK66Zf107KzPeLPofN6CcHg.roa
Signing time: Sat 21 Feb 2026 19:04:28 +0000
ROA not before: Sat 21 Feb 2026 19:04:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399486
IP address blocks: 31.57.36.0/24 maxlen: 24
31.57.38.0/24 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:96:c7:e8:13:cf:2e:89:bb:fe:ed:b2:e8:09:91:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 21 19:04:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae27d328aeba65fd74ecaccf78b3e87cde827078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:0e:4f:28:af:34:c8:25:09:8f:8b:63:97:
55:2e:22:1b:cf:9b:ee:2a:8c:bb:71:7f:d7:b1:4b:
aa:2e:e4:90:bd:d5:c8:af:cf:72:ec:fc:03:e0:c0:
a6:6d:9f:f2:b2:94:e3:32:3b:7e:63:fd:99:6f:eb:
26:4f:f9:ec:bc:a7:da:92:28:bf:9f:90:00:3d:df:
43:77:3c:05:19:0c:1a:7f:d2:ed:c7:58:ba:4b:65:
ce:57:11:62:31:2f:a8:1b:c3:56:78:39:35:ed:ba:
76:1f:b3:da:7e:71:2b:2d:d0:97:7d:11:34:bc:7e:
93:70:20:a9:7d:ed:63:d8:62:44:9e:9f:03:95:d6:
8b:d6:b7:98:17:26:35:84:3f:74:4e:3a:60:de:49:
ce:90:e3:b4:c6:26:38:bb:2f:68:9e:8c:91:d1:9d:
07:fd:54:fe:be:4e:a2:68:e9:d1:3c:4f:c4:79:52:
46:1a:2e:2b:d1:c0:fb:7b:73:8a:f8:a3:b6:07:77:
ae:c9:98:76:1e:8d:26:e0:05:df:7c:56:4f:0d:4f:
e7:c9:85:86:96:0c:56:2c:50:c9:7b:ca:9b:84:75:
76:a8:50:14:c3:0a:7f:ea:02:65:1a:e6:1d:64:39:
cb:29:6b:86:70:03:89:8b:3f:3d:67:23:e7:9b:7a:
97:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:27:D3:28:AE:BA:65:FD:74:EC:AC:CF:78:B3:E8:7C:DE:82:70:78
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rifTKK66Zf107KzPeLPofN6CcHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.36.0/24
31.57.38.0/24
31.57.147.0/24
31.57.188.0/24
31.57.219.0/24
Signature Algorithm: sha256WithRSAEncryption
55:50:08:c7:a5:31:f1:e0:65:c6:80:f0:a6:30:09:f0:c0:e0:
43:c6:4b:d1:92:fa:30:f5:10:d4:da:a9:42:14:dc:28:c6:43:
31:9d:07:33:c0:d7:70:87:51:83:dd:98:3c:30:9e:e6:e1:37:
e9:3c:bf:5e:d8:6b:8b:fa:55:8b:64:ed:9e:e9:17:0c:26:2f:
67:3e:c9:9c:3e:b9:c5:6a:a4:f1:e8:c4:79:da:e4:91:62:9d:
24:c5:00:af:10:32:d5:d9:27:4d:a2:2b:81:15:66:fc:d0:27:
9f:07:98:6d:33:9d:9d:a9:5a:e5:86:88:8f:ab:da:22:0b:33:
18:9a:cb:d5:e0:e8:0a:f7:57:00:3c:6b:9e:b5:11:6c:68:72:
e4:d6:09:2d:0d:c8:4b:ed:f2:fa:bc:b7:d4:bd:25:a0:3b:40:
77:d1:3b:e6:2e:40:46:4a:82:9a:3c:15:fe:0d:4f:ff:c3:ca:
fd:a3:81:d1:c5:22:28:d8:65:ad:5a:ee:ae:c0:bb:37:4e:db:
4a:e7:12:df:97:63:f8:08:a5:6c:08:cb:ff:1b:f0:ab:76:9c:
81:04:05:4d:68:08:e0:00:8e:09:5c:5c:5d:69:d9:ce:33:fb:
fe:46:4a:cf:9e:6f:3f:1b:84:83:e2:7d:c7:7e:76:87:cc:25:
be:dd:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:22 2026 by rpki-client