Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sT02Hbt63JkB0YD1oQqSQFPgMNY.roa
File: sT02Hbt63JkB0YD1oQqSQFPgMNY.roa (raw, json)
Hash identifier: AdN7khIdTbR22ye9n+2vs8yVjWJBrkgdr1Oo4bTVS+g=
Subject key identifier: B1:3D:36:1D:BB:7A:DC:99:01:D1:80:F5:A1:0A:92:40:53:E0:30:D6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A051A970919EAEED69E893C1158A33FF96
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sT02Hbt63JkB0YD1oQqSQFPgMNY.roa
Signing time: Sun 30 Aug 2026 07:54:13 +0000
ROA not before: Sun 30 Aug 2026 07:54:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 31.56.73.0/24 maxlen: 24
31.57.159.0/24 maxlen: 24
31.58.60.0/24 maxlen: 24
31.59.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:a9:70:91:9e:ae:ed:69:e8:93:c1:15:8a:33:ff:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 30 07:54:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b13d361dbb7adc9901d180f5a10a924053e030d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:ec:15:23:8e:e7:5e:b8:61:81:96:ec:bf:
2d:d9:ae:cd:5b:5b:e3:b1:8e:ad:10:18:13:a4:75:
a1:a0:c9:a4:7a:93:fc:1b:80:19:33:09:3a:2e:69:
de:b5:46:7b:55:fb:4a:c5:cf:c1:2e:8f:1e:29:29:
31:99:a6:f5:46:13:5d:b8:eb:e7:35:3d:0d:0c:46:
a0:cb:90:e6:0b:37:4a:85:6c:c3:f6:de:8d:70:1b:
eb:be:2a:d4:d9:b5:54:05:00:e5:26:5e:4f:95:5b:
52:01:38:44:58:81:8b:90:cd:f3:2c:de:93:9f:57:
a3:94:44:ba:fc:bf:3d:5d:d7:87:96:86:8d:d8:d0:
c9:44:2d:94:47:60:f6:c7:67:c2:f6:85:08:64:46:
30:dd:5d:7c:6e:47:63:35:c3:40:58:d4:ca:ab:62:
c5:81:dc:63:53:81:ca:bf:3e:06:77:7f:d3:a2:e0:
36:72:1d:ea:c8:60:af:75:6f:81:1c:ab:e5:3a:e3:
47:dd:33:04:63:01:ce:f1:7b:94:4e:de:02:91:b2:
a7:db:a3:70:4b:19:48:29:cb:5a:07:f4:43:72:a2:
1e:98:58:c1:f4:08:e3:eb:30:fa:82:bc:fb:f9:1d:
be:b8:22:40:e4:92:ae:9c:d6:15:fd:90:3d:e4:b0:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3D:36:1D:BB:7A:DC:99:01:D1:80:F5:A1:0A:92:40:53:E0:30:D6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sT02Hbt63JkB0YD1oQqSQFPgMNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.73.0/24
31.57.159.0/24
31.58.60.0/24
31.59.72.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f8:41:9b:64:7e:f5:a6:80:9a:30:b5:96:77:0e:af:4c:87:
6e:3e:c4:d0:c9:67:ea:7f:aa:36:fc:57:48:61:7c:c0:32:cd:
41:e0:c1:07:5c:07:cd:7a:9e:70:6c:a3:46:f9:45:d5:c7:89:
f7:1d:67:e3:82:6b:42:62:21:03:e0:66:34:c6:06:f3:75:27:
9d:37:a1:2d:33:16:78:30:b2:25:92:d7:01:4a:ee:49:7c:b5:
f0:a1:00:84:44:32:c7:1d:4c:85:67:ac:4c:cc:3a:2c:b4:b8:
c6:6d:19:2a:91:04:26:1d:11:57:57:82:de:f6:30:01:65:59:
f2:d5:59:7a:b0:a2:5d:6f:9b:3b:c4:37:b4:e1:ca:3c:6a:b1:
4c:be:a9:70:65:dd:19:b6:60:96:3e:df:44:26:93:45:ed:6f:
25:f6:6e:a3:bf:4f:ab:1a:3e:3b:3b:f4:48:ab:4f:cc:45:d7:
a8:21:cf:a2:b5:12:00:08:73:e0:58:75:65:c5:cd:c3:81:f2:
7d:04:67:8d:35:72:58:6e:79:23:6f:05:ca:30:0b:d7:a6:57:
67:0d:3d:2b:c8:ba:4d:13:a0:d3:04:4e:49:80:35:a9:b6:d4:
ff:18:8d:e6:87:cb:00:5d:66:6c:27:23:47:b0:6f:b5:ca:98:
a5:82:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:56:21 2026 by rpki-client