Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sYh2To7D0D_1KcPJr7siZDKDzIA.roa
File: sYh2To7D0D_1KcPJr7siZDKDzIA.roa (raw, json)
Hash identifier: UC1tZ8f/2k5IXTskkmE1RL9jPZjCB1HcJ3D2636//Ms=
Subject key identifier: B1:88:76:4E:8E:C3:D0:3F:F5:29:C3:C9:AF:BB:22:64:32:83:CC:80
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0919D20864F921DBB0103FC25D3F4DE5A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sYh2To7D0D_1KcPJr7siZDKDzIA.roa
Signing time: Fri 11 Sep 2026 17:56:28 +0000
ROA not before: Fri 11 Sep 2026 17:56:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213516
IP address blocks: 31.57.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:9d:20:86:4f:92:1d:bb:01:03:fc:25:d3:f4:de:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 11 17:56:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b188764e8ec3d03ff529c3c9afbb22643283cc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:10:75:af:9a:6d:1f:62:4a:93:d7:90:fc:41:
9f:f0:85:03:02:49:5a:44:ea:65:fa:4f:fa:da:0e:
c7:4d:73:69:83:94:f4:46:f5:5a:bc:e6:a2:36:a1:
49:97:31:a1:f5:e5:53:f8:af:7c:28:1c:d6:db:d7:
c8:f0:61:95:e0:8e:44:a8:e8:c1:12:2a:3c:d6:6a:
1d:23:ec:7c:ba:3d:6f:6c:a5:c3:b0:26:33:03:91:
40:14:ed:3c:1e:f4:32:3a:c4:d3:ae:aa:4f:95:2e:
f1:8f:ba:6d:3a:54:84:b7:86:56:01:f8:b1:98:61:
6f:b9:33:eb:6a:4e:88:81:ed:7c:13:b2:0b:4c:6f:
72:0e:cf:ef:a4:1f:53:fe:72:cf:e7:c4:28:b7:11:
af:57:36:b4:7f:18:64:aa:a0:c4:96:ac:6f:2e:72:
a8:68:70:1d:1d:c9:32:5e:4a:e7:a6:74:9e:c3:b0:
c7:85:a1:16:55:e6:96:cb:8a:11:c1:ee:01:fd:45:
6d:7a:97:74:fb:61:e9:48:26:bc:1a:be:83:70:d7:
99:3f:0d:f5:b5:b5:5e:f5:0c:26:3a:fd:86:23:9f:
43:5c:a7:d2:9e:21:43:e9:31:46:d2:cf:9c:87:aa:
09:4f:8b:0f:1d:82:bf:34:69:b1:cf:8d:2c:b4:35:
10:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:88:76:4E:8E:C3:D0:3F:F5:29:C3:C9:AF:BB:22:64:32:83:CC:80
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sYh2To7D0D_1KcPJr7siZDKDzIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.0.0/24
Signature Algorithm: sha256WithRSAEncryption
09:1a:46:4f:9b:c6:34:83:de:b5:7a:ea:8b:d7:bf:2d:5f:c0:
22:65:b1:aa:6b:46:0a:68:c4:dc:15:8c:79:2f:df:b1:53:bf:
67:8f:9e:b7:d8:8c:73:4e:af:e3:d3:51:08:9d:32:69:86:44:
88:7a:9a:1d:34:32:d8:33:bd:41:be:e1:ad:0f:31:85:c7:63:
0f:3a:b1:e1:2d:c6:74:37:51:07:2a:12:41:6f:00:b1:de:17:
61:27:7f:a0:08:59:71:c2:45:1d:81:1e:1b:e3:02:d2:9d:73:
0d:07:86:12:b4:04:3c:5b:ce:85:f7:a2:f4:61:7d:d2:b0:b3:
04:f5:36:a1:80:a8:17:17:2d:7f:fa:09:37:5e:7e:22:c4:b6:
96:d3:f3:3d:e3:3d:ee:72:c4:9c:e2:8c:f7:47:7c:af:99:11:
c9:a9:5b:0b:ad:0e:bd:48:29:3f:0f:58:6d:89:6e:22:14:11:
97:5a:a0:5a:35:93:71:c5:63:c3:9d:88:eb:90:41:1f:ba:4f:
f0:e8:1d:08:e5:6b:7a:3c:0a:01:f7:57:1a:0f:b1:75:09:63:
83:2f:ca:fd:a9:88:93:ea:3a:5d:e8:e6:f7:cc:f7:67:da:3f:
97:41:f0:9a:bf:50:f2:8c:03:03:90:38:49:7c:0a:81:18:d1:
77:2e:61:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:40:04 2026 by rpki-client