Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y61l81G9OAoZh6F6I7uB2qP5ObQ.roa
File: y61l81G9OAoZh6F6I7uB2qP5ObQ.roa (raw, json)
Hash identifier: +5QRohgA12L6xuSHAzsXSHoeCXoMlCAt98gAjwwoP9s=
Subject key identifier: CB:AD:65:F3:51:BD:38:0A:19:87:A1:7A:23:BB:81:DA:A3:F9:39:B4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CAE55BDBC178A05D3E756B87D654D781B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y61l81G9OAoZh6F6I7uB2qP5ObQ.roa
Signing time: Mon 02 Mar 2026 11:36:20 +0000
ROA not before: Mon 02 Mar 2026 11:36:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202294
IP address blocks: 31.56.87.0/24 maxlen: 24
31.58.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:55:bd:bc:17:8a:05:d3:e7:56:b8:7d:65:4d:78:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 2 11:36:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbad65f351bd380a1987a17a23bb81daa3f939b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:70:f5:1f:8e:ec:d9:92:54:b1:68:b0:bd:
76:20:8a:eb:6f:a5:03:13:f9:d5:1b:24:0f:6c:28:
06:fe:87:ce:3a:1e:10:54:3f:e9:85:fd:47:a2:d6:
a1:a2:c0:8f:42:6b:e4:2a:9f:5c:4b:15:b7:a4:cf:
bf:f5:d8:43:90:f9:4f:39:8e:ba:75:59:0b:00:b9:
7f:49:1b:2a:bc:b3:40:d1:8b:b1:91:fd:d1:9b:c4:
af:06:00:c4:16:38:25:6b:aa:46:0b:83:96:55:7e:
ca:2c:7f:3a:4c:8b:fa:bd:47:ef:f7:47:c9:75:88:
1e:d1:8a:23:1c:c9:3f:5b:a1:9b:62:93:e1:a6:f0:
f6:a8:e0:d0:ec:cb:b7:27:b3:8c:01:38:ea:9a:c9:
e5:43:ed:07:2c:d3:e3:79:82:d0:70:ae:a8:ef:5b:
5c:a4:5a:db:60:e0:3f:b0:01:f9:56:67:df:bf:99:
f5:0e:03:b0:0e:ce:f7:60:b5:17:59:fe:4c:7f:53:
8d:79:86:eb:bd:c8:59:8d:ab:5e:6e:60:ca:4b:19:
2b:a6:77:85:8e:e4:cb:39:36:92:56:78:15:d4:05:
c0:21:e0:13:35:d0:2f:44:b6:7d:44:ea:1d:94:f8:
eb:64:f1:23:3c:d1:c2:16:0c:e1:df:9a:ef:6f:ce:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AD:65:F3:51:BD:38:0A:19:87:A1:7A:23:BB:81:DA:A3:F9:39:B4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y61l81G9OAoZh6F6I7uB2qP5ObQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.87.0/24
31.58.244.0/24
Signature Algorithm: sha256WithRSAEncryption
11:8d:28:1d:e7:65:9e:f1:5d:84:0c:e8:64:85:0a:ad:7e:92:
63:f7:b3:74:0f:bd:26:5e:de:e7:21:fd:35:44:c6:54:04:b7:
eb:51:09:fa:80:71:55:ee:e5:3a:c6:e8:18:1d:18:90:46:c8:
17:8b:2c:a6:b2:a4:da:77:2e:c8:4c:87:17:2c:4c:92:de:07:
f7:54:8b:16:07:bd:0b:1e:52:6e:a9:bd:04:e3:c3:9b:a7:fa:
6a:4f:ae:a8:e8:db:a4:e7:38:05:a5:99:06:c1:09:cd:da:f7:
d6:31:1c:3e:08:31:f4:52:a7:b9:98:a7:46:93:0b:a0:ea:09:
69:92:50:64:65:a2:79:d1:9f:8e:99:42:ac:2d:87:9f:2a:4f:
7f:f5:1a:4a:a6:03:cd:9f:a4:17:7e:b1:43:1b:2c:a4:f3:5b:
c5:92:f2:01:88:39:e9:ac:09:f9:a1:dd:04:19:55:d0:32:f0:
5f:d7:4a:29:98:22:be:15:31:f9:c3:d8:67:91:b9:97:53:bd:
b6:a8:fb:bd:ca:fc:25:6f:1a:5f:34:28:34:0b:03:16:0b:56:
61:8a:a1:7f:f1:b3:aa:f9:6e:47:61:ce:56:7e:6b:bf:93:c3:
61:17:53:5a:a7:14:b2:6d:93:b3:90:cd:43:b6:eb:7c:21:12:
24:a3:91:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:23:18 2026 by rpki-client