Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9ZUwHa6VcPQkgmwd5WCm8cAxKp8.roa
File: 9ZUwHa6VcPQkgmwd5WCm8cAxKp8.roa (raw, json)
Hash identifier: Ufu97p6/TbmOzupSp6r2iw8CXmsGtutKth2KijNktjg=
Subject key identifier: F5:95:30:1D:AE:95:70:F4:24:82:6C:1D:E5:60:A6:F1:C0:31:2A:9F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F6FD7DB13C59483E40593F23BC6E9D727
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9ZUwHa6VcPQkgmwd5WCm8cAxKp8.roa
Signing time: Fri 17 Jul 2026 11:30:45 +0000
ROA not before: Fri 17 Jul 2026 11:30:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 31.57.37.0/24 maxlen: 24
31.57.185.0/24 maxlen: 24
217.60.197.0/24 maxlen: 24
217.60.241.0/24 maxlen: 24
217.60.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:d7:db:13:c5:94:83:e4:05:93:f2:3b:c6:e9:d7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 17 11:30:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f595301dae9570f424826c1de560a6f1c0312a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:44:43:13:c9:e5:28:97:e2:3a:fe:4e:a8:
c6:ed:73:1c:9d:e4:ef:5e:f2:6a:4b:03:c1:65:ca:
b5:a0:7b:f8:c0:e7:ea:41:55:7e:62:da:3b:34:b3:
c6:88:1a:ca:56:9f:a1:a3:f2:d3:ef:bd:fe:ce:58:
df:6c:f1:98:b2:9f:d8:6f:df:a6:b4:d4:35:69:55:
a0:22:24:35:44:d3:90:39:2d:ce:9d:3d:7d:d2:33:
df:d8:d1:f8:1a:49:8c:30:fd:45:5f:1e:c3:fb:d1:
01:c3:e8:3c:da:a3:59:62:0e:40:d1:2f:f6:fe:40:
47:29:6c:9f:3e:65:fe:f5:c4:19:f5:6b:1d:36:32:
da:70:e9:9f:b3:ff:6a:88:4b:62:c0:f0:d3:01:ca:
bd:98:7e:73:57:09:64:a3:4a:67:7c:4d:a1:29:1e:
39:87:70:58:87:95:1e:ba:5a:3c:94:1e:53:ea:fb:
1a:f5:df:cb:57:20:c4:95:6d:8d:90:73:77:e6:06:
b7:6f:d6:4b:3e:46:92:bd:3f:a8:eb:5b:89:12:d1:
64:9d:7b:b7:4c:92:b1:e7:e2:d4:5d:0c:67:39:35:
e9:83:1b:82:5b:b7:82:4d:c3:d8:be:1e:f3:dc:86:
65:a0:bd:10:16:b4:d8:9a:31:99:8f:0a:b3:b9:da:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:95:30:1D:AE:95:70:F4:24:82:6C:1D:E5:60:A6:F1:C0:31:2A:9F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9ZUwHa6VcPQkgmwd5WCm8cAxKp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.37.0/24
31.57.185.0/24
217.60.197.0/24
217.60.241.0/24
217.60.250.0/24
Signature Algorithm: sha256WithRSAEncryption
38:71:2a:e7:3e:90:8f:6b:a7:d6:6d:73:c5:cd:7a:f7:86:f0:
1e:29:85:0d:73:48:ea:8d:72:9f:a8:57:cc:91:c8:e7:e9:5e:
2f:88:3c:da:5a:53:85:59:d5:16:ca:e4:c0:0c:1b:d1:50:55:
91:4b:80:82:71:a1:1f:6e:24:09:9c:fa:7b:86:8a:63:99:a5:
5d:4a:8f:03:04:50:a5:76:3d:73:77:85:d1:b7:f0:b7:21:b6:
36:11:2d:3c:3f:f5:65:df:cd:90:ee:8c:e1:21:fa:a3:78:89:
30:d0:f7:c7:34:23:5d:f7:80:3b:15:03:ae:a6:ac:f2:03:3a:
e9:16:e9:8f:fb:b2:0e:58:9a:15:e7:75:e6:3a:dc:93:bb:18:
49:99:68:e9:48:bb:b2:86:e5:33:6e:6b:3b:bd:c1:ea:88:1b:
45:7e:db:10:00:09:ad:a5:e1:20:ce:7a:4e:43:ac:a1:7a:c0:
88:79:bc:39:24:8c:11:67:c8:54:ac:0d:66:09:0a:de:3d:dc:
cd:10:28:73:7b:e4:ca:10:bb:dc:ad:5e:e6:d2:80:b2:3b:2b:
65:c1:72:81:55:8b:5d:55:f6:33:1c:a2:1e:59:8e:94:cc:43:
4e:87:e4:1b:81:92:d8:1d:e5:54:45:91:6b:8e:ee:28:1e:cf:
82:ea:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:58 2026 by rpki-client