Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vwqYIYkz3CnE9zz5g_swULDBBaU.roa
File: vwqYIYkz3CnE9zz5g_swULDBBaU.roa (raw, json)
Hash identifier: UFaOA4alY3pn4/SXOQhC3kqTgegIB5pCvP/yc+VB+sY=
Subject key identifier: BF:0A:98:21:89:33:DC:29:C4:F7:3C:F9:83:FB:30:50:B0:C1:05:A5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A17C31E199F1177290121FE6112373B717
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vwqYIYkz3CnE9zz5g_swULDBBaU.roa
Signing time: Tue 27 Oct 2026 07:10:06 +0000
ROA not before: Tue 27 Oct 2026 07:10:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 31.57.48.0/24 maxlen: 24
31.57.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:31:e1:99:f1:17:72:90:12:1f:e6:11:23:73:b7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 27 07:10:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf0a98218933dc29c4f73cf983fb3050b0c105a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:12:bf:8e:03:0b:fb:42:c1:b6:60:20:82:
f0:51:70:b8:87:b5:8b:34:44:cd:54:38:2c:62:64:
05:ba:cb:38:40:23:ec:29:26:28:ef:c2:ea:80:84:
56:a8:86:ae:9b:ab:1f:07:37:80:de:e2:f3:67:09:
2b:cd:73:9b:d8:dc:ad:28:3b:42:e7:9f:13:27:ae:
97:f8:4b:a9:f0:b2:17:89:97:a6:ef:b8:cd:50:49:
00:34:05:a2:4b:4c:ce:49:ba:1c:86:e4:dc:b2:fa:
29:f2:c7:c8:0b:d0:48:01:94:2a:bc:69:74:e7:5c:
17:4e:6e:ef:f2:2d:36:ef:61:6d:41:49:e3:6e:cd:
bc:6a:12:0c:12:2b:1e:9d:49:62:32:21:f9:3b:9a:
f2:06:d9:c5:03:5c:f0:8d:96:8b:95:e7:c5:64:a2:
12:46:16:03:72:2d:59:07:a5:81:3d:4a:2e:cd:28:
c3:a3:c3:78:9f:d3:90:42:ad:9f:cf:9a:2d:ca:a9:
f4:c3:cb:93:e8:ab:a6:cb:5e:50:50:6b:5d:ba:df:
da:bc:46:f3:7b:c0:39:af:1c:5d:9d:6a:8b:e1:34:
76:c2:45:ff:7d:c6:2b:f1:a1:3c:3d:0b:7d:ad:5c:
36:e6:11:14:48:64:ef:a2:c1:f1:84:6c:80:f7:db:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0A:98:21:89:33:DC:29:C4:F7:3C:F9:83:FB:30:50:B0:C1:05:A5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vwqYIYkz3CnE9zz5g_swULDBBaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.48.0/24
31.57.102.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e7:ad:4b:67:a7:a3:3e:9a:fe:ae:ea:83:5e:65:05:dd:ca:
c8:3d:0b:11:5b:33:bd:52:70:4b:9f:ab:ac:94:4c:15:a6:38:
f5:81:64:50:37:ed:ed:df:85:c5:a7:79:0a:81:61:a2:b6:f5:
71:e5:de:2e:63:67:82:f8:00:95:00:ad:66:bf:2a:15:84:43:
2a:ad:37:d7:d9:2c:b3:64:40:11:2e:2d:c3:ad:55:a6:fd:e9:
32:2b:bd:93:77:cc:bf:50:e9:fb:66:a3:74:1f:c1:67:88:42:
79:c5:39:b9:95:24:b1:47:4c:de:b0:19:d3:ab:83:9e:8c:f4:
31:93:c2:f7:ce:bd:6d:8c:af:8f:74:67:70:65:d5:38:a4:db:
47:8b:62:f3:f2:50:21:31:4c:98:a8:7a:e1:27:d9:7f:52:de:
e9:af:fd:0e:bf:68:ef:c4:3e:57:c6:ae:e3:b2:bd:ad:c7:a6:
7b:10:60:dd:10:8c:9b:27:3b:8a:94:63:a1:18:17:1e:d6:f7:
d3:51:11:c6:a6:48:62:24:91:89:aa:05:90:7d:47:62:c6:99:
e8:d2:c7:40:97:64:cb:93:2b:31:38:7d:cc:4a:92:3d:ef:41:
5e:00:1c:9f:c4:19:99:36:cf:db:f6:98:02:33:db:23:0d:d3:
1b:af:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:52:05 2026 by rpki-client