Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5-0ZvZDpZuHBVSbQMwJz5vnJItI.roa
File: 5-0ZvZDpZuHBVSbQMwJz5vnJItI.roa (raw, json)
Hash identifier: oUvYZ3H9UnDVFjOwWcL8JdXx3gIx5wEueWam91aJ6Ew=
Subject key identifier: E7:ED:19:BD:90:E9:66:E1:C1:55:26:D0:33:02:73:E6:F9:C9:22:D2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DB1558BD04140902CF4729C187292AADF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5-0ZvZDpZuHBVSbQMwJz5vnJItI.roa
Signing time: Tue 21 Apr 2026 18:37:46 +0000
ROA not before: Tue 21 Apr 2026 18:37:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398704
IP address blocks: 31.57.53.0/24 maxlen: 24
31.57.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:55:8b:d0:41:40:90:2c:f4:72:9c:18:72:92:aa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 21 18:37:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7ed19bd90e966e1c15526d0330273e6f9c922d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:4b:fa:81:b1:1f:2b:0d:2a:4f:eb:8f:6d:
07:86:27:ee:a5:83:3b:cd:4b:6b:67:36:e0:7c:1c:
72:1f:f3:65:4a:39:15:9f:64:ca:57:9c:2c:7b:21:
a1:47:b6:27:42:d2:8a:8c:f4:b0:44:11:7a:bd:85:
71:86:c8:12:16:ad:de:50:59:54:24:cd:75:95:c7:
e6:50:a2:1a:dd:74:d8:a6:ce:7d:d8:a6:7a:a3:49:
63:4e:88:4a:44:46:60:b9:5a:fe:93:92:d2:e6:c9:
c8:fe:a0:16:3b:87:43:58:bc:df:cf:86:49:62:e2:
22:ae:15:f1:40:54:8f:a1:b2:a2:4b:7b:05:5e:6c:
aa:56:9d:04:4c:97:36:63:7d:bf:d4:60:63:56:98:
8a:23:01:7b:32:7f:d4:97:a5:4d:6e:a8:f7:0d:23:
73:c1:13:00:25:d8:cb:80:7c:fa:53:50:9c:68:74:
44:ea:f2:a9:98:cc:77:35:f9:1a:34:b6:7f:c7:de:
d2:08:e7:64:b3:e6:60:45:a1:78:8f:66:57:78:a0:
0f:97:a0:9a:6e:fd:6b:a1:8c:01:dd:eb:b4:06:be:
3c:60:6b:22:f0:f7:5e:69:8e:65:fb:4e:1d:2d:e2:
4e:86:8a:09:07:9b:c8:5d:0f:a4:dd:52:78:93:bf:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:ED:19:BD:90:E9:66:E1:C1:55:26:D0:33:02:73:E6:F9:C9:22:D2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5-0ZvZDpZuHBVSbQMwJz5vnJItI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.53.0/24
31.57.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5d:cb:b8:1a:4a:31:21:31:56:5f:f6:8e:55:b6:74:55:f4:
65:ed:af:e6:e8:ba:41:47:b3:38:63:c5:ab:e2:36:58:0a:90:
44:46:52:07:2e:32:8a:de:ec:89:d4:f0:b5:40:dd:00:f6:3b:
ac:d2:eb:6d:b0:80:4b:88:03:60:a1:3a:0d:d7:4d:aa:8b:38:
f4:8b:cf:e8:cb:09:e6:30:d2:c7:ed:9c:03:d7:a8:99:3a:fc:
61:15:20:13:f6:7e:59:0d:9a:73:e9:bc:b3:a2:a2:b9:6d:7c:
a2:b7:2e:51:17:e4:12:e1:cf:ef:45:f7:b2:e6:b3:0e:11:48:
00:7a:92:84:87:c9:48:ba:f9:0f:6e:7d:2d:fb:fe:4a:71:78:
31:20:64:e9:17:27:0b:b1:73:17:a2:dd:75:53:84:fe:15:fa:
79:87:f6:5e:1e:f4:eb:fd:9b:45:53:b0:b9:68:d0:02:8f:ba:
2f:08:7d:56:f0:40:5f:2e:7f:4b:bd:cd:5a:aa:42:2b:2d:89:
c8:1d:fc:5a:e0:9b:28:7d:58:16:ae:98:7c:0d:1c:0a:3c:00:
fa:d9:be:77:1c:7a:f7:f5:ae:ff:0f:a8:7c:0e:9e:43:82:f8:
45:e5:dc:27:2d:28:c3:b8:96:b6:fb:bc:7b:a9:9a:19:f1:fd:
49:ce:ea:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:37 2026 by rpki-client