Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vcDvDpNT5uwHzok9e5pPNoYRnBs.roa
File: vcDvDpNT5uwHzok9e5pPNoYRnBs.roa (raw, json)
Hash identifier: dYuf5GEsKw7hCFvYjXux53Vg7GSqCYLMUJXnWrQtEdM=
Subject key identifier: BD:C0:EF:0E:93:53:E6:EC:07:CE:89:3D:7B:9A:4F:36:86:11:9C:1B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E7780795AB3EC19428BCA6B5EE4174F89
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vcDvDpNT5uwHzok9e5pPNoYRnBs.roa
Signing time: Sat 30 May 2026 06:09:28 +0000
ROA not before: Sat 30 May 2026 06:09:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 31.56.166.0/24 maxlen: 24
31.58.98.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:77:80:79:5a:b3:ec:19:42:8b:ca:6b:5e:e4:17:4f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 30 06:09:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdc0ef0e9353e6ec07ce893d7b9a4f3686119c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:0f:61:1d:f2:c7:8f:e8:9b:6e:7e:d2:92:
53:c5:cf:60:98:3f:fd:33:4d:07:9f:37:a3:a8:ed:
45:93:f4:4a:06:de:33:66:67:d0:a7:ea:64:00:fe:
b2:63:be:a7:bf:09:a5:44:59:c0:a2:4a:1f:98:e5:
4d:38:1b:1c:3a:0f:f4:19:e5:fe:1b:34:04:0a:f1:
5f:2d:72:0a:7e:4f:a0:0b:31:71:9a:59:b7:1d:4e:
c1:3b:6f:c8:94:d1:aa:de:77:aa:53:2e:5d:49:85:
e6:3e:b8:83:59:5e:52:83:17:fb:3a:3c:78:f2:dd:
0e:04:2c:48:54:b8:50:c3:6d:35:1b:80:77:b7:cd:
f2:d7:ba:9d:3f:eb:28:58:c9:0f:97:3f:63:2e:33:
2a:e8:a6:6b:f4:34:ce:0f:84:4c:b9:a0:ae:18:49:
7a:51:6e:05:9a:2a:85:ac:47:19:ce:bf:46:90:17:
d8:d4:5a:74:8e:96:55:17:53:5d:a0:c1:79:32:81:
ba:04:d8:28:b9:40:16:bf:6b:0f:0d:45:cf:0c:8a:
61:14:d3:9b:f5:e5:76:4a:21:09:53:ae:62:e6:ff:
0a:89:3c:a7:40:27:af:69:26:e3:5c:74:d5:c3:53:
30:48:da:c0:f0:25:ef:0f:8f:f8:a0:bd:13:2d:14:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C0:EF:0E:93:53:E6:EC:07:CE:89:3D:7B:9A:4F:36:86:11:9C:1B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vcDvDpNT5uwHzok9e5pPNoYRnBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.166.0/24
31.58.98.0/24
31.59.108.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a2:f6:dc:a4:7c:d5:7d:87:d5:5b:37:e4:db:85:58:c6:e5:
c7:f9:e5:24:19:4b:10:e3:36:39:d3:11:9a:8e:61:4a:4a:a0:
c1:b9:40:e0:ea:77:cc:7c:fb:e2:c6:aa:07:e8:89:05:00:b5:
d0:0d:00:64:45:f3:47:27:c9:ef:17:a2:03:bb:a8:34:06:20:
32:53:2c:9b:37:df:a4:5d:74:ff:08:38:d3:b4:b0:ac:55:32:
e8:02:55:02:38:41:68:6e:ad:19:31:3b:1f:26:47:ee:f9:49:
a2:fa:12:bd:6c:63:40:5f:5a:3d:6c:8f:76:c7:a9:a4:e7:eb:
e6:2c:aa:1b:1c:28:42:de:fe:b9:56:c2:f3:b2:7f:1e:21:04:
ab:49:0c:72:aa:2a:07:93:c6:f6:56:27:e4:25:76:97:93:3f:
5f:c4:35:0c:80:03:4b:6f:92:d0:d3:c3:5c:b5:3f:c4:00:bf:
75:e7:8c:68:15:74:aa:b6:36:ec:78:e9:3e:21:99:1a:45:be:
05:80:cd:c2:3f:22:c6:72:da:25:79:3f:e8:e1:76:69:3e:b9:
9a:c0:d3:fd:87:2c:e5:35:70:3f:ba:d1:3a:31:f4:1a:56:d1:
89:8a:e6:b3:c4:3f:af:c2:c8:cc:ed:39:e4:a8:76:04:c7:a7:
86:6c:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:23:15 2026 by rpki-client