Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3dQ8bGUNM_a45nu4eYm5MYVrtVc.roa
File: 3dQ8bGUNM_a45nu4eYm5MYVrtVc.roa (raw, json)
Hash identifier: f3Q75r8ZfnvSb6syWZ+QU+HkjFLugvXGpzcL/ySXfV8=
Subject key identifier: DD:D4:3C:6C:65:0D:33:F6:B8:E6:7B:B8:79:89:B9:31:85:6B:B5:57
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F8588016024988E5259EE4A4E85A89B73
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3dQ8bGUNM_a45nu4eYm5MYVrtVc.roa
Signing time: Tue 21 Jul 2026 16:35:10 +0000
ROA not before: Tue 21 Jul 2026 16:35:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 31.56.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:88:01:60:24:98:8e:52:59:ee:4a:4e:85:a8:9b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 21 16:35:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddd43c6c650d33f6b8e67bb87989b931856bb557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:6d:6e:df:28:7a:b5:72:ec:85:7e:3b:c1:
83:1e:7d:0d:3f:05:73:54:d1:e5:10:c3:91:e6:37:
78:85:55:2c:48:24:50:e4:7e:11:ff:df:a1:15:64:
59:b6:86:2d:a8:71:40:61:93:ad:de:b0:aa:a6:95:
79:e0:3a:ce:71:e3:b0:2e:d2:9d:57:4d:28:a8:ed:
69:80:f8:4a:a0:65:90:cc:16:4c:b3:a6:e6:57:0b:
8d:79:c2:ea:24:80:cb:21:8b:03:39:fd:c7:6a:fd:
b4:94:74:1d:23:9d:23:4a:44:cb:e4:3e:8d:5d:8c:
a9:fb:8d:28:9b:f0:1c:77:a4:20:ab:a8:a1:9a:0e:
9f:ad:70:d3:b4:ec:f5:98:53:45:7e:76:d6:c2:ca:
59:76:b2:9f:f4:60:be:ea:94:70:da:f2:37:69:29:
0d:19:63:d0:1c:8c:f2:be:92:c4:8c:cf:67:b2:50:
82:7b:61:60:e2:cb:81:37:f5:af:db:6b:08:d9:b8:
f1:6f:14:e2:d3:d1:f1:08:e9:ad:5e:1d:67:7d:03:
e1:06:f6:61:28:8e:9e:bc:72:ad:b1:3e:78:ee:43:
8c:cf:fa:e6:b6:a2:eb:e9:df:da:e3:1e:c2:fb:17:
5e:61:e2:0a:4b:ca:b5:9c:7b:1f:48:5c:0a:ab:b9:
da:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D4:3C:6C:65:0D:33:F6:B8:E6:7B:B8:79:89:B9:31:85:6B:B5:57
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3dQ8bGUNM_a45nu4eYm5MYVrtVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.42.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fe:e2:76:56:42:07:48:15:fb:ac:f6:da:5d:80:b7:72:66:
95:97:b2:9c:32:6d:09:44:66:1f:9a:79:81:03:df:a3:58:f0:
60:b9:34:7f:7f:4f:54:4a:83:fa:57:2d:9f:52:31:c4:9a:84:
08:e3:48:cc:71:59:70:e5:68:02:33:22:d6:e8:02:7b:ee:35:
70:56:fb:c1:ff:bb:9d:ed:88:28:4a:58:8d:4f:cf:c1:c3:50:
55:3d:a8:dd:4a:f2:23:d5:86:89:ec:ba:c9:91:8d:46:c0:2b:
5b:9e:6f:8c:d8:45:03:b6:89:51:90:3a:07:c4:84:81:87:bf:
5a:de:2a:75:ef:e6:3b:2c:91:55:e3:8a:fa:6c:95:7e:e1:58:
2f:b3:30:9a:c2:2f:f4:e9:3c:41:d9:f7:b9:77:7c:b7:5b:f2:
43:26:9f:0e:80:34:b7:75:87:6c:4b:15:03:97:60:57:8c:8e:
fe:0f:8e:9b:50:12:42:53:2c:dd:22:3a:14:9d:5e:91:da:d0:
74:1a:ae:0e:28:aa:08:64:51:0a:f8:fe:fb:36:32:e0:54:00:
55:f9:88:e3:e2:6b:e9:b3:94:6b:e3:82:5e:60:9c:f9:2c:56:
df:b2:25:0e:36:6a:d2:b3:bc:3f:ad:1f:f2:9a:22:ab:84:03:
5f:85:2e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:20:29 2026 by rpki-client