Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w2o7K6-Fa1vtWmy94OE202diISM.roa
File: w2o7K6-Fa1vtWmy94OE202diISM.roa (raw, json)
Hash identifier: S+RiA/PGa81pP2o9z/VU7yazCPrUwNO/eNBDJxrWrZI=
Subject key identifier: C3:6A:3B:2B:AF:85:6B:5B:ED:5A:6C:BD:E0:E1:36:D3:67:62:21:23
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A13690F49945E50DDF44BC82FCB745D740
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w2o7K6-Fa1vtWmy94OE202diISM.roa
Signing time: Tue 13 Oct 2026 18:40:31 +0000
ROA not before: Tue 13 Oct 2026 18:40:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215133
IP address blocks: 31.57.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 13:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:90:f4:99:45:e5:0d:df:44:bc:82:fc:b7:45:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 13 18:40:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c36a3b2baf856b5bed5a6cbde0e136d367622123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:7c:98:d0:0b:40:eb:ff:95:de:18:58:5e:
ac:52:ad:df:86:dd:59:e9:d5:d1:7d:3c:ea:e3:fc:
74:42:40:cb:37:37:54:f2:32:7a:46:c0:ea:ba:24:
a9:dc:62:9a:45:86:b5:eb:6b:5a:04:41:cf:3e:2c:
49:f1:e3:5b:df:40:7a:dc:1f:47:44:6d:0c:17:92:
3c:a8:f6:71:06:9e:76:d0:3e:b0:9b:cf:b2:34:53:
3f:82:11:a9:43:70:2f:27:19:24:6a:e8:87:08:c1:
1c:9a:63:34:1c:ff:9a:37:9a:dc:ae:aa:38:d2:a8:
e4:ca:d0:fe:3e:f0:11:12:a9:fa:e0:ff:72:e1:0b:
4f:cc:e2:5c:b3:32:e2:9a:b5:a9:a7:f1:b7:c5:9e:
b2:f1:11:14:f6:a8:f9:87:a6:56:e9:a5:db:a0:c9:
0b:42:9e:c1:e6:57:8f:bb:4c:6f:a6:5e:89:c9:a9:
ec:83:ec:69:07:e0:07:0b:39:99:e7:cf:a3:f1:25:
48:ab:4a:12:bb:67:75:94:d8:38:88:a2:75:75:33:
93:55:9a:66:27:e0:0e:43:ee:ff:62:b2:7f:c3:4f:
3d:e1:74:39:3b:83:30:9f:a3:44:3c:61:2a:8f:8a:
46:ee:a5:a1:64:6d:76:8a:0e:c2:2c:ae:45:f3:c6:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6A:3B:2B:AF:85:6B:5B:ED:5A:6C:BD:E0:E1:36:D3:67:62:21:23
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w2o7K6-Fa1vtWmy94OE202diISM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.12.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:3a:61:e7:22:a7:c8:54:eb:81:66:dd:16:e2:da:c6:e7:43:
ea:e0:bf:08:0b:ba:d5:88:24:3f:05:54:ec:1f:25:7e:13:06:
89:a8:58:37:cc:23:72:ec:1f:fe:78:94:c5:02:15:96:2a:c9:
88:25:77:10:a6:35:b8:0b:79:52:7f:f8:ae:fd:96:51:18:52:
7a:e9:1e:d2:49:c2:a8:d3:93:4c:c8:ab:3e:6b:99:de:64:9c:
c4:dc:df:fc:3c:f6:87:85:93:a7:0b:bc:6f:40:b9:ce:5f:90:
82:55:8c:e7:13:81:44:e3:77:79:10:c3:1f:bd:3a:8a:e1:af:
ae:6c:76:f3:54:11:f5:c9:91:c4:3e:2f:6c:2d:6b:04:06:b4:
3e:f6:78:57:9f:28:64:d7:97:5f:b2:87:a8:b0:a7:33:27:c1:
8e:5d:1d:04:3a:87:5c:ca:a8:be:4d:1b:a0:5f:a8:89:84:72:
cd:bc:32:00:50:9d:c1:c3:fd:3b:ea:fd:1d:67:95:74:90:3c:
6a:03:f3:ef:d0:3d:39:59:4f:3e:22:e6:89:14:fe:fc:5e:be:
96:a9:08:3c:15:41:36:7f:e8:33:a6:6f:25:13:c8:a9:16:76:
ee:14:17:f6:9a:39:5e:39:af:63:e3:c4:cb:b9:c2:05:d3:be:
43:f6:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:50:02 2026 by rpki-client