Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0eLvEQkYXmlnPcZtp4W71MaWvM0.roa
File: 0eLvEQkYXmlnPcZtp4W71MaWvM0.roa (raw, json)
Hash identifier: UaFAq7T32QhJ5ryggNWck5FORM3CvbIgAKSDebMv6JI=
Subject key identifier: D1:E2:EF:11:09:18:5E:69:67:3D:C6:6D:A7:85:BB:D4:C6:96:BC:CD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A19372F3792AB4A5F294F66C54CDD6B798
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0eLvEQkYXmlnPcZtp4W71MaWvM0.roa
Signing time: Sat 31 Oct 2026 19:32:26 +0000
ROA not before: Sat 31 Oct 2026 19:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59245
IP address blocks: 31.56.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:72:f3:79:2a:b4:a5:f2:94:f6:6c:54:cd:d6:b7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 31 19:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1e2ef1109185e69673dc66da785bbd4c696bccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:e8:01:df:fe:6b:b7:19:83:70:8f:44:f8:
e6:18:fb:ba:dc:07:5f:3f:a9:9c:6c:15:9d:b1:65:
8c:6c:fe:53:c5:99:6f:e6:d8:de:e5:cb:f3:c2:d4:
ad:f9:4a:bd:11:83:b1:bc:7e:02:be:fe:f3:fb:87:
87:73:03:5f:57:c4:70:a4:8d:7b:d0:d9:eb:5d:87:
f5:5d:b5:b9:33:de:fa:e1:47:63:f1:28:fe:ce:b2:
02:75:64:8d:c1:3f:db:a6:93:6e:74:55:43:f8:f3:
b5:e9:1b:6e:6a:24:87:ea:08:95:57:2f:1b:58:fb:
00:a3:86:e3:c2:ca:c4:19:6d:ad:3c:db:53:11:ff:
f0:ea:88:da:63:bd:32:48:36:f9:bb:9d:b5:7e:c9:
af:64:bb:9d:e7:48:af:5c:8d:44:ab:0e:eb:15:5d:
08:c2:03:37:8c:11:47:c5:3d:d6:c8:74:d8:98:f2:
f6:21:5f:36:06:1a:b2:9a:29:9d:96:6d:0e:52:fb:
d6:56:f2:28:2b:e4:95:09:04:6f:46:1f:77:db:de:
95:49:9c:18:c0:f5:aa:ce:08:e4:df:7f:0f:86:cc:
b7:40:23:3b:ee:f4:3c:6c:fb:57:fe:b0:73:f7:31:
6a:eb:1d:ca:84:fe:7d:14:83:51:5b:57:40:8d:cb:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E2:EF:11:09:18:5E:69:67:3D:C6:6D:A7:85:BB:D4:C6:96:BC:CD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0eLvEQkYXmlnPcZtp4W71MaWvM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.112.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ae:ed:01:05:79:d8:e8:96:c7:3d:74:e5:ea:2b:cd:26:cd:
8d:7f:76:6d:2f:c1:3e:7c:e1:06:1c:12:b7:b6:d3:7e:10:cf:
bb:45:0e:e3:e5:44:53:b8:f6:6f:e0:a1:e9:3c:78:84:c5:41:
33:a0:a5:1f:4b:9c:2d:d9:63:21:f9:ef:6b:da:39:85:7d:39:
07:17:b6:81:75:bd:f7:59:1c:c6:77:d6:c0:f0:6d:a1:02:e1:
a5:74:89:f8:ec:82:eb:65:46:01:93:b0:8f:48:43:a0:dd:dd:
00:40:a2:d4:96:3a:a4:6b:58:4b:50:4b:99:76:9a:09:e9:eb:
ee:b4:6d:14:96:b1:da:ab:ca:97:52:7f:e3:8b:c5:ea:ed:29:
20:6a:42:da:17:ea:64:21:17:65:dc:48:e9:94:f8:12:79:1b:
2b:83:fb:d1:f0:17:95:83:62:ab:92:af:2e:ac:f3:94:2d:6d:
c6:7f:ab:d4:70:ae:f2:28:67:26:7d:0a:24:28:9a:d8:76:56:
bd:b7:9b:4a:76:38:94:c1:8b:d4:6e:bd:d8:2c:5f:f4:95:51:
cb:ac:86:b3:85:9d:bc:ab:dd:41:ae:70:3a:23:7b:72:b6:4c:
b1:df:be:5a:1d:46:22:a6:b7:56:db:df:97:65:35:55:64:a5:
0b:e1:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:48:19 2026 by rpki-client