Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7z5QxoqKV2SqX7Qiy7JOoJwi_p0.roa
File: 7z5QxoqKV2SqX7Qiy7JOoJwi_p0.roa (raw, json)
Hash identifier: wLiLHj+3odFxePALQaVZAW+Z6JamL4ti5vdnfqVVl0E=
Subject key identifier: EF:3E:50:C6:8A:8A:57:64:AA:5F:B4:22:CB:B2:4E:A0:9C:22:FE:9D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F1F1D34310F9B0ABDE9AA360EE542DE82
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7z5QxoqKV2SqX7Qiy7JOoJwi_p0.roa
Signing time: Wed 01 Jul 2026 19:17:15 +0000
ROA not before: Wed 01 Jul 2026 19:17:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 31.57.44.0/24 maxlen: 24
31.57.45.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.166.0/24 maxlen: 24
31.57.170.0/24 maxlen: 24
31.59.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1f:1d:34:31:0f:9b:0a:bd:e9:aa:36:0e:e5:42:de:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 1 19:17:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef3e50c68a8a5764aa5fb422cbb24ea09c22fe9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:cc:ae:ba:d7:f6:94:74:b4:ec:23:ff:fb:
a9:58:fd:cc:f4:db:d6:19:1d:52:e6:bd:f4:12:45:
4d:0f:26:90:58:7d:fb:88:68:9a:85:89:60:59:d3:
4a:dc:b0:94:35:3f:ff:da:92:15:94:dd:7f:b6:3c:
c9:11:a1:c9:f3:33:87:41:f1:ca:f2:d3:48:b6:fd:
8e:a6:3a:74:34:9e:93:ff:30:52:20:ab:51:49:52:
38:fb:72:97:1b:b7:28:bb:71:de:63:a3:f2:05:d5:
29:f7:fd:f6:12:06:7d:cb:c2:5b:ce:42:e5:8f:ea:
cb:8e:67:d7:65:3d:d2:9b:6a:69:f0:ff:ec:8b:b4:
d6:29:d0:f1:41:47:5d:23:22:da:78:5f:0c:ab:50:
e0:cc:5b:3a:12:18:42:5f:86:5c:d8:93:b7:bc:1c:
73:6b:6d:d4:50:c7:bb:45:63:e0:eb:1c:4a:60:8c:
6a:70:6a:ad:a3:14:eb:cf:5a:50:88:22:a6:0e:b3:
0f:bb:73:4d:f1:13:79:27:c2:a3:95:ae:28:a6:0a:
1e:6e:28:5f:32:e0:47:32:21:38:cc:0a:1c:e7:84:
d2:1c:f8:af:5a:eb:42:12:dc:aa:48:77:6f:5d:b8:
8a:98:ef:d9:6e:e0:51:26:b6:11:5a:dd:e7:71:cc:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3E:50:C6:8A:8A:57:64:AA:5F:B4:22:CB:B2:4E:A0:9C:22:FE:9D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7z5QxoqKV2SqX7Qiy7JOoJwi_p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.44.0/23
31.57.143.0/24
31.57.166.0/24
31.57.170.0/24
31.59.173.0/24
Signature Algorithm: sha256WithRSAEncryption
90:7c:00:11:bc:bf:da:7d:89:8e:8e:3b:2a:52:60:c5:29:f4:
9b:42:83:b5:81:04:c0:66:a5:06:61:70:14:ad:90:0c:5b:07:
10:7e:d1:30:c0:98:0c:69:54:a9:51:fb:fd:c6:c3:98:0c:da:
5b:39:4b:79:56:f0:74:7a:53:e0:58:bb:90:c2:0b:45:8c:c7:
60:1a:b5:f3:a8:17:d1:a9:01:3c:80:86:5b:e0:75:d0:ce:c1:
2d:28:cd:7e:26:0e:d8:0f:74:83:0d:20:98:e0:85:77:11:62:
c9:eb:5e:3f:10:c3:ae:4d:08:9f:d9:f8:fd:bb:fc:43:e1:33:
6e:53:b6:99:8f:4b:dd:c9:f7:d3:31:ff:f1:1b:60:4b:9e:cd:
b1:65:a4:c5:f0:5d:76:33:dc:d1:7c:48:22:ae:7e:c1:18:e5:
62:1a:4b:33:ac:b7:ef:7f:21:bd:bc:7a:c9:e3:2d:60:41:96:
10:40:39:00:4c:b2:09:65:bf:f1:a7:5a:8c:0c:f7:44:0b:60:
41:10:8d:4e:83:9d:bf:59:54:bc:e8:60:30:fd:91:93:2f:22:
b5:05:55:e2:f1:31:58:78:d4:66:98:b3:3d:23:8e:9a:f2:26:
89:05:7a:a7:2f:fb:bd:f9:9a:24:e5:de:5e:98:8b:13:cc:05:
36:61:eb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:54 2026 by rpki-client