Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/69T21dAovsjjqUxu2aYdNbwEfHo.roa
File: 69T21dAovsjjqUxu2aYdNbwEfHo.roa (raw, json)
Hash identifier: +2P3Wpv5Iu/J1Nnl2F1d47/Lof9RK0LpdMQbTuMLjJo=
Subject key identifier: EB:D4:F6:D5:D0:28:BE:C8:E3:A9:4C:6E:D9:A6:1D:35:BC:04:7C:7A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1C5607279A33D81675A2DC77E08AED617
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/69T21dAovsjjqUxu2aYdNbwEfHo.roa
Signing time: Tue 10 Nov 2026 12:13:14 +0000
ROA not before: Tue 10 Nov 2026 12:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205463
IP address blocks: 31.56.214.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:60:72:79:a3:3d:81:67:5a:2d:c7:7e:08:ae:d6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 10 12:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebd4f6d5d028bec8e3a94c6ed9a61d35bc047c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:91:77:61:75:8d:98:4c:e1:1b:13:c9:35:
38:dc:43:4f:54:f4:c9:59:dc:a0:ab:54:89:8d:0f:
3a:fb:ba:34:cd:03:c4:48:aa:37:cf:49:e4:ea:e5:
39:01:c0:3c:a2:2c:4a:ac:af:d8:4a:80:97:21:c1:
6c:a2:36:d6:95:fe:29:65:3c:1f:af:0b:9e:7c:20:
45:8e:f4:b3:fc:2c:ef:8e:43:34:5d:82:73:4b:99:
8b:28:02:19:73:22:ab:58:e1:03:85:dd:4f:55:af:
1a:c0:4d:a0:51:6a:84:c7:3c:41:4b:b9:81:eb:46:
47:f8:5d:de:99:b7:f6:75:34:95:32:16:42:df:92:
c9:db:c3:b7:99:91:66:0b:b7:32:7d:77:0d:fb:25:
bd:f2:04:8b:c1:bd:48:7f:91:f9:3c:fa:dd:c0:28:
89:b2:4e:fa:9e:33:47:09:59:22:7e:f5:04:07:e9:
05:a3:58:03:e8:07:40:88:ed:07:1e:5f:c5:1a:ae:
69:64:fb:32:fb:c7:0d:84:b9:77:92:3a:a4:34:2c:
67:64:81:36:36:19:34:6c:8e:0e:b9:84:bf:78:0d:
97:1e:25:d3:d9:df:4e:7a:a5:b2:0e:99:40:81:a7:
c9:0a:f4:73:f8:c4:b0:c8:90:75:d9:b1:52:c0:6b:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D4:F6:D5:D0:28:BE:C8:E3:A9:4C:6E:D9:A6:1D:35:BC:04:7C:7A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/69T21dAovsjjqUxu2aYdNbwEfHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.214.0/24
31.58.236.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ab:78:e2:c5:b5:92:4f:58:2f:7b:62:3f:83:5a:45:13:03:
3f:0c:fd:5b:83:79:88:1e:83:b9:81:34:1b:7b:33:a1:92:7c:
0d:b1:a2:13:e3:8f:d5:79:16:5f:72:3c:e0:2e:8f:14:c5:46:
3f:cb:b5:88:90:21:d2:04:fa:2d:df:b6:ee:f2:ea:55:37:32:
a9:37:b0:db:9b:76:ec:32:50:5c:64:41:f0:ea:c0:0b:8a:b8:
e3:ef:b0:07:28:02:bf:e9:90:c4:09:d4:e6:03:5d:c4:21:e2:
e0:9a:d0:a1:eb:b4:ac:dc:96:58:bf:25:00:f6:f9:cb:45:09:
11:0b:e9:28:4a:39:51:ca:ce:cb:ae:82:05:38:c0:6b:71:69:
3a:2f:84:16:17:ef:4d:58:67:39:9d:f6:ae:24:8c:c3:d7:4c:
8c:d1:55:60:84:9c:ad:af:1e:2b:3f:af:b7:0e:f3:20:40:8c:
65:e3:43:c6:54:db:69:cb:9e:73:c6:9a:bc:15:f5:4c:83:bc:
87:8e:9d:f0:32:1c:83:13:e4:07:25:c1:38:0d:14:2d:a5:fe:
c7:12:2f:f8:f2:84:c1:4c:bf:98:a4:45:d3:fd:47:bb:70:d5:
e1:b0:01:ef:f8:cf:69:e0:77:7b:2e:4b:4f:4b:ae:f9:05:8d:
d7:51:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:16:05 2026 by rpki-client