Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-4s-9sdXNTm9zHoWSuhCs_T5udM.roa
File: 1-4s-9sdXNTm9zHoWSuhCs_T5udM.roa (raw, json)
Hash identifier: +E2COR6uhxKyuH0sEHKfvvA/G8of5vQSY8tL3Gyp3JA=
Subject key identifier: FB:8B:3E:F6:C7:57:35:39:BD:CC:7A:16:4A:E8:42:B3:F4:F9:B9:D3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D298F7291FFEBF736BB37A4C5711EE5EA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-4s-9sdXNTm9zHoWSuhCs_T5udM.roa
Signing time: Thu 26 Mar 2026 09:52:40 +0000
ROA not before: Thu 26 Mar 2026 09:52:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 31.56.46.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.57.142.0/24 maxlen: 24
31.59.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:8f:72:91:ff:eb:f7:36:bb:37:a4:c5:71:1e:e5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 26 09:52:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb8b3ef6c7573539bdcc7a164ae842b3f4f9b9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:20:60:57:76:ce:97:99:56:95:cf:81:58:
08:78:cd:7b:cb:b2:a4:ba:6b:08:e9:8c:b7:ed:e2:
78:d3:81:d5:44:1e:ce:4c:b7:4a:41:26:81:03:4a:
e6:66:cb:4c:a8:c4:ad:8e:81:c4:9d:23:ac:a1:05:
a0:f6:8f:f2:70:01:5a:ad:bf:38:f9:24:7e:13:ec:
4e:7e:6f:6b:a4:0d:11:d4:e8:4c:30:86:5d:ae:86:
ab:36:71:dd:8f:01:a1:f8:b6:d6:42:72:73:19:5d:
a4:ef:55:6a:6e:26:3f:c2:51:75:87:60:6a:7a:a4:
d6:80:00:6a:d0:79:ae:9b:34:28:07:86:95:e1:54:
e7:b7:da:f6:40:40:68:7c:e0:32:15:bc:c9:0a:18:
5d:92:67:c7:a7:a0:7c:ee:d4:e7:48:aa:40:88:ee:
56:08:8a:20:20:aa:8f:55:4e:55:4a:e9:f5:15:8c:
d5:f7:dd:36:2f:fe:52:c8:c9:9e:df:54:d4:94:63:
89:2f:9b:9a:1f:7b:a1:28:6c:b4:d1:cc:54:fa:71:
d5:7a:92:63:b0:38:31:c3:10:fa:52:1c:70:a8:92:
10:f4:d7:1a:d8:2e:20:5b:cb:1d:e4:48:95:f5:a5:
e6:3b:3f:65:50:c1:e0:51:78:b2:4a:cf:2f:82:8d:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8B:3E:F6:C7:57:35:39:BD:CC:7A:16:4A:E8:42:B3:F4:F9:B9:D3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-4s-9sdXNTm9zHoWSuhCs_T5udM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.46.0/24
31.56.84.0/24
31.57.142.0/24
31.59.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a4:27:c3:df:4a:cf:e4:c4:74:85:91:35:ee:b9:07:61:98:
a4:ed:46:7a:d2:68:bf:f2:83:db:20:b7:3b:91:e4:4b:9b:78:
96:99:11:03:f9:f8:eb:26:46:32:20:8a:3a:66:c7:cd:8f:43:
68:96:cf:95:91:a8:5b:6f:60:28:69:b3:55:46:31:6f:5d:ce:
a7:7b:fb:1e:36:cb:fa:6f:84:de:19:fb:0d:63:da:fb:26:08:
1b:f5:2f:48:50:2f:63:9c:1d:5d:c7:8e:49:d6:7e:c2:16:9f:
6d:34:8f:88:97:54:6e:22:61:de:30:c5:3e:51:a0:65:a6:04:
4b:77:fe:3d:22:43:f6:2b:80:66:fe:9b:05:2e:b4:85:bb:72:
61:8e:87:3d:79:d9:d6:d5:b9:cf:0d:13:9b:ec:ee:60:0d:e0:
a4:78:3c:29:3e:2e:7e:fe:f8:7b:ee:38:b0:df:c8:91:a3:5f:
00:02:ab:4b:ff:dc:10:0d:3d:c0:4c:08:9f:d5:af:72:78:e4:
57:0a:f5:d2:35:08:c9:2f:07:5f:ba:de:24:8b:ff:8c:f3:68:
ae:86:79:6a:8c:9c:54:31:ef:eb:7a:51:71:92:18:c3:29:a6:
71:7a:4a:b9:3f:79:50:4c:f1:0e:d4:0f:25:4f:bd:98:68:7a:
b9:44:36:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:24 2026 by rpki-client