Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5hjm1wttSfoGgaFSgiTD0AyPb3Q.roa
File: 5hjm1wttSfoGgaFSgiTD0AyPb3Q.roa (raw, json)
Hash identifier: 7bOK6CuT2bja0hVeocoCy4PngzFeIa8nA/ruoXtva7g=
Subject key identifier: E6:18:E6:D7:0B:6D:49:FA:06:81:A1:52:82:24:C3:D0:0C:8F:6F:74
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1D4DD4A05108E45BD707656641E171C2C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5hjm1wttSfoGgaFSgiTD0AyPb3Q.roa
Signing time: Fri 13 Nov 2026 12:23:54 +0000
ROA not before: Fri 13 Nov 2026 12:23:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219229
IP address blocks: 31.56.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:dd:4a:05:10:8e:45:bd:70:76:56:64:1e:17:1c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 13 12:23:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e618e6d70b6d49fa0681a1528224c3d00c8f6f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:25:ec:b8:70:8f:f6:3d:fe:bb:7b:fb:8d:
03:78:80:e2:41:0c:1f:fd:7a:82:5e:ab:3b:11:d0:
43:87:3b:98:56:f0:f7:e6:a2:2a:f8:6b:bc:bf:17:
b7:2b:be:b4:2b:27:4f:6b:88:9c:f2:bf:5d:3c:c9:
18:b0:21:0a:e9:ab:13:97:00:0d:20:0e:99:00:96:
c0:f4:e4:e1:f0:c9:2b:40:50:b6:43:dc:3d:07:11:
7c:85:4d:02:fd:de:0f:fa:8d:43:c6:a2:75:30:c9:
90:51:61:c0:39:b2:31:f2:60:b9:da:6f:d9:be:ac:
99:b4:5e:49:39:21:f4:82:85:4c:28:29:92:26:18:
db:86:36:23:d8:d1:76:0b:e6:a0:2d:e5:d1:f4:44:
3a:80:46:0d:b5:07:77:83:17:73:b9:14:76:56:b1:
bf:43:67:cd:35:ed:cc:c5:0e:66:23:e3:ef:d0:c4:
1c:6c:13:a3:16:75:2e:cc:06:0e:0b:c4:6d:dd:ac:
bb:b4:48:89:8e:8e:3f:c3:25:df:d7:c3:33:fa:98:
fc:1a:bc:c0:25:5a:74:c9:da:a1:79:e1:8b:42:57:
13:38:98:df:1d:ba:32:d4:ae:c7:8a:5a:4a:b6:06:
fa:63:3f:3c:40:19:3f:2f:08:69:a4:f4:c5:51:61:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:18:E6:D7:0B:6D:49:FA:06:81:A1:52:82:24:C3:D0:0C:8F:6F:74
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5hjm1wttSfoGgaFSgiTD0AyPb3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.220.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7b:f5:16:6b:82:fe:90:69:67:a7:e8:ab:6f:6f:04:1b:25:
11:b9:11:cc:a2:ac:e3:30:37:a0:ea:b5:ab:68:b1:35:dc:21:
eb:d9:6c:d9:91:f5:69:4f:56:4c:3c:de:95:ea:ee:35:84:82:
1b:03:af:48:23:7c:94:6e:65:c0:06:02:49:17:5a:aa:0f:39:
4a:3e:3f:f7:4e:92:9d:5b:5c:5d:d8:c2:24:45:d5:cc:62:c1:
45:d7:ce:41:2a:54:92:b7:15:29:b5:c2:25:7a:87:6f:a1:2d:
11:9f:40:67:c9:74:d0:46:ca:0c:f9:1f:60:82:5e:39:e7:a8:
25:20:0e:cb:8c:54:05:33:47:2d:3d:d3:94:ba:d6:64:37:17:
ac:65:fb:6e:c9:60:9f:46:36:2b:33:78:de:4a:02:af:1e:76:
30:cb:28:3f:eb:e3:c5:11:f4:f2:e3:66:8c:b2:3d:91:fd:3c:
66:04:02:63:02:d2:39:87:63:a0:80:5c:c6:98:7b:45:78:19:
82:d2:41:ae:90:e4:fc:77:96:c4:28:d8:70:89:f3:f7:60:c0:
14:e9:de:23:fa:e5:a0:bb:0d:9b:46:27:b9:d1:78:b1:cd:e2:
49:af:a5:d3:99:58:e3:87:5d:be:2e:cb:de:04:3d:c5:ef:77:
df:46:c2:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaHU3UoFEI5FvXB2VmQeFxwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMTEzMTIyMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjE4ZTZkNzBiNmQ0OWZhMDY4MWExNTI4MjI0YzNkMDBjOGY2Zjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02gl7Lhwj/Y9/rt7+40DeIDiQQwf
/XqCXqs7EdBDhzuYVvD35qIq+Gu8vxe3K760KydPa4ic8r9dPMkYsCEK6asTlwAN
IA6ZAJbA9OTh8MkrQFC2Q9w9BxF8hU0C/d4P+o1DxqJ1MMmQUWHAObIx8mC52m/Z
vqyZtF5JOSH0goVMKCmSJhjbhjYj2NF2C+agLeXR9EQ6gEYNtQd3gxdzuRR2VrG/
Q2fNNe3MxQ5mI+Pv0MQcbBOjFnUuzAYOC8Rt3ay7tEiJjo4/wyXf18Mz+pj8GrzA
JVp0ydqheeGLQlcTOJjfHboy1K7HilpKtgb6Yz88QBk/LwhppPTFUWHEAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOYY5tcLbUn6BoGhUoIkw9AMj290MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNWhqbTF3dHRTZm9HZ2FGU2dpVEQwQXlQYjNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzjcMA0G
CSqGSIb3DQEBCwUAA4IBAQA0e/UWa4L+kGlnp+irb28EGyURuRHMoqzjMDeg6rWr
aLE13CHr2WzZkfVpT1ZMPN6V6u41hIIbA69II3yUbmXABgJJF1qqDzlKPj/3TpKd
W1xd2MIkRdXMYsFF185BKlSStxUptcIleodvoS0Rn0BnyXTQRsoM+R9ggl4556gl
IA7LjFQFM0ctPdOUutZkNxesZftuyWCfRjYrM3jeSgKvHnYwyyg/6+PFEfTy42aM
sj2R/TxmBAJjAtI5h2OggFzGmHtFeBmC0kGukOT8d5bEKNhwifP3YMAU6d4j+uWg
uw2bRie50XixzeJJr6XTmVjjh12+LsveBD3F73ffRsIe
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:35:46 2026 by rpki-client