Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/00ja-fVJadNMP0WlcFGXzYxUb80.roa
File: 00ja-fVJadNMP0WlcFGXzYxUb80.roa (raw, json)
Hash identifier: I50UPGeVgf5wujQPCNPb+/Sni7JaeS4zn4i72vwQKlM=
Subject key identifier: D3:48:DA:F9:F5:49:69:D3:4C:3F:45:A5:70:51:97:CD:8C:54:6F:CD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F3DE944B5D7D68F530525A55B23BA62C9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/00ja-fVJadNMP0WlcFGXzYxUb80.roa
Signing time: Tue 07 Jul 2026 18:48:45 +0000
ROA not before: Tue 07 Jul 2026 18:48:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201021
IP address blocks: 31.56.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:e9:44:b5:d7:d6:8f:53:05:25:a5:5b:23:ba:62:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 7 18:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d348daf9f54969d34c3f45a5705197cd8c546fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:5e:34:b2:28:dc:02:83:a8:16:85:bb:be:
2b:ac:9f:cf:21:21:9f:37:46:41:23:e8:f0:a5:7e:
00:a8:bc:f8:c5:c6:24:e6:47:92:c5:2f:a0:78:92:
ca:fb:70:53:10:0b:84:8c:16:82:66:90:ff:d7:cd:
b8:6f:c4:da:2b:a0:de:c4:5d:92:b5:ce:b5:41:c0:
fa:ef:b6:60:ca:a9:aa:ce:b6:cf:8d:5c:46:aa:68:
73:3f:7f:8b:9e:31:5e:95:c6:65:b3:74:7d:cf:3f:
60:c6:a5:56:58:c5:93:f0:35:41:05:8e:cc:99:c7:
09:0a:9f:65:08:00:f2:aa:2c:77:cf:43:24:18:ca:
fd:38:67:74:b9:d3:b1:40:97:97:6f:88:c8:13:8e:
57:4c:58:e2:56:c4:c8:a5:ec:08:91:6b:59:4d:47:
9a:33:19:95:15:d6:44:ec:8b:a7:05:96:23:8d:2b:
e9:97:37:5d:a7:c2:a7:86:4a:63:b8:7a:5f:90:fa:
f5:fd:7d:15:3d:29:0e:78:21:9f:ed:7a:fc:8a:e8:
26:09:d8:46:c4:88:8e:ad:25:1f:23:96:79:e2:8b:
c8:ef:95:18:52:29:3a:79:6f:43:14:bb:69:3d:b8:
ee:88:ea:fc:c0:9e:ff:48:04:97:76:6d:be:b3:7c:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:48:DA:F9:F5:49:69:D3:4C:3F:45:A5:70:51:97:CD:8C:54:6F:CD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/00ja-fVJadNMP0WlcFGXzYxUb80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.142.0/24
Signature Algorithm: sha256WithRSAEncryption
be:60:a5:d9:07:b8:2e:47:c1:9a:72:8a:30:3d:27:a8:7e:67:
2a:a3:7d:25:88:bd:d2:15:84:01:6c:60:94:8d:7f:c1:f4:03:
ce:68:ef:e1:0e:0a:4c:e9:65:16:bd:93:0c:c2:79:07:e5:cc:
7b:58:f3:ae:d1:37:69:b8:73:37:06:9a:06:7a:ea:6a:3f:2f:
4b:7a:f4:28:f5:06:3c:5d:7e:57:e4:71:f6:89:38:45:05:48:
4f:e5:36:fc:93:0d:5c:fe:db:a8:3b:a7:9a:32:5e:2d:62:6d:
7e:6f:c2:56:13:ff:3f:5f:f3:25:e8:1a:90:3c:3d:03:6e:5d:
83:87:64:f0:51:eb:c7:1b:c4:2e:c1:42:7b:7a:47:aa:da:6e:
59:d8:2f:02:5a:79:5c:39:e8:5c:fd:e0:ce:7a:4b:52:81:72:
3a:b3:93:c2:e5:8f:f4:21:83:b9:2a:cc:6a:76:9a:9b:f6:f8:
82:c6:9c:8d:37:49:f0:0b:00:0d:2a:20:f1:00:b5:e1:5a:43:
7a:45:7f:15:f9:b0:6f:83:3c:4e:1e:35:06:2d:76:f6:68:c2:
87:5d:9d:41:bf:81:a6:19:60:fc:89:96:2a:fb:8f:68:4b:a8:
c7:62:25:62:76:a2:b5:d9:0a:af:11:e7:f2:84:46:99:23:61:
a4:ee:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:00 2026 by rpki-client