Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8HFdudgIWGZMDZdeG9z2etGwL6c.roa
File: 8HFdudgIWGZMDZdeG9z2etGwL6c.roa (raw, json)
Hash identifier: eNiFgHYl7i6oawE5q7/zglUw88H2s7WMZZASqs6qXp4=
Subject key identifier: F0:71:5D:B9:D8:08:58:66:4C:0D:97:5E:1B:DC:F6:7A:D1:B0:2F:A7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F85880064F5C6B004053436E69A1EB95D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8HFdudgIWGZMDZdeG9z2etGwL6c.roa
Signing time: Tue 21 Jul 2026 16:35:10 +0000
ROA not before: Tue 21 Jul 2026 16:35:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 31.57.146.0/24 maxlen: 24
31.57.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:88:00:64:f5:c6:b0:04:05:34:36:e6:9a:1e:b9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 21 16:35:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0715db9d80858664c0d975e1bdcf67ad1b02fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:d5:90:d0:f0:74:d9:03:e7:a5:b2:c2:65:
55:4e:7b:4b:91:bd:c1:8a:5b:f7:8d:e8:36:70:1a:
bb:2a:97:33:51:24:68:29:a1:1d:11:36:03:65:40:
12:34:28:1e:6f:53:f9:07:05:3a:48:c3:fc:17:75:
32:b2:88:d8:f1:5d:b6:b3:30:d4:20:12:56:87:ac:
0b:cc:7e:63:e0:03:6f:65:14:47:e3:82:14:ba:42:
e7:ed:22:1f:67:16:47:f5:56:7b:38:fa:b5:40:13:
31:18:e7:49:08:31:34:d4:ab:c7:5a:46:30:b2:15:
21:84:3c:90:1c:87:59:4e:54:1c:31:3c:28:f5:2d:
5d:e7:aa:fe:e7:ac:3a:2a:58:db:6e:b5:e9:5b:b8:
a6:e3:ae:7c:f7:8e:b5:54:4d:d5:cd:9c:b7:bf:93:
c8:74:6e:df:a5:7b:89:c0:ca:bd:b4:a9:9f:32:f4:
4c:12:05:44:c8:cf:31:b3:7b:12:dc:bd:21:dd:f7:
8b:92:4d:8c:53:9e:e7:b5:72:31:c9:ca:3b:12:91:
23:12:8b:20:a1:02:bd:fe:bd:d8:24:df:b1:6d:1e:
90:43:43:bd:71:7b:08:af:25:5d:5f:5c:80:8f:e0:
3e:e4:5d:a9:99:4c:8d:75:8d:82:de:93:ae:df:24:
29:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:71:5D:B9:D8:08:58:66:4C:0D:97:5E:1B:DC:F6:7A:D1:B0:2F:A7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8HFdudgIWGZMDZdeG9z2etGwL6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.146.0/24
31.57.171.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:2c:9b:b5:b0:61:6c:e1:8f:f8:d7:b7:73:7e:a8:08:b8:c2:
9c:cd:43:ad:e6:21:5a:8b:45:49:0e:9e:0a:1d:2f:83:c5:a0:
4d:f1:14:f9:ad:ba:55:8e:9a:b5:32:3e:c0:66:35:12:2e:0f:
ff:9b:b3:22:33:de:ad:62:3e:00:63:8d:47:bd:ef:6d:cb:8e:
89:f8:3a:3d:73:5f:4b:36:58:28:6b:b6:06:65:40:76:ed:16:
d6:8d:54:53:9d:f6:12:8f:84:24:c6:23:dc:c3:09:f6:2e:b6:
03:58:77:7b:71:ed:40:11:71:02:11:db:a9:51:39:fc:eb:6d:
73:86:22:08:66:1a:e0:07:05:48:54:a5:b7:1b:b3:89:70:78:
aa:52:16:32:ad:ce:eb:38:2c:64:f3:02:7e:a4:8b:40:64:21:
65:f8:f7:1e:de:17:3b:e4:d7:34:19:02:a6:ee:11:0a:fd:67:
8e:9e:60:a1:2e:9b:10:9f:9a:ff:fd:76:9d:77:74:e0:18:bd:
7b:83:d3:59:99:09:09:87:88:52:7e:ec:d9:c9:f0:e9:7a:c0:
16:f6:bb:8e:ec:80:f5:67:c6:e1:22:87:03:11:03:5f:12:99:
19:a1:de:71:7f:57:69:e2:66:e3:c5:b4:2d:54:9f:74:36:61:
66:8c:b9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:00 2026 by rpki-client