Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A7iNLxTBAL8VpP1nNWo1PX-ZoOY.roa
File: A7iNLxTBAL8VpP1nNWo1PX-ZoOY.roa (raw, json)
Hash identifier: gS24ul7Fu9y30RsBKOIvXqKAujmNoinR4LplQzZOegY=
Subject key identifier: 03:B8:8D:2F:14:C1:00:BF:15:A4:FD:67:35:6A:35:3D:7F:99:A0:E6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CF7FC464AD22CE562755D9D647FA0ADD6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A7iNLxTBAL8VpP1nNWo1PX-ZoOY.roa
Signing time: Mon 16 Mar 2026 18:50:31 +0000
ROA not before: Mon 16 Mar 2026 18:50:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209373
IP address blocks: 31.56.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:fc:46:4a:d2:2c:e5:62:75:5d:9d:64:7f:a0:ad:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 16 18:50:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03b88d2f14c100bf15a4fd67356a353d7f99a0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:c2:7e:73:8d:82:47:53:3e:76:74:c7:cb:
8a:fa:45:16:62:0d:3a:9f:99:8c:84:a9:86:53:12:
06:52:a8:4d:5c:7c:9f:22:9d:e1:e1:4c:00:0e:ca:
c4:c6:00:91:f5:cd:76:66:65:1c:4a:c9:3f:f6:c3:
ef:aa:aa:6b:aa:0c:19:76:fc:2e:84:34:be:1b:79:
f7:bf:f8:f7:aa:56:8e:d8:92:52:0c:9a:c2:61:5f:
d4:9a:70:6d:48:27:5d:ba:6c:98:13:68:ed:24:9d:
4c:17:56:da:27:b3:21:44:4d:24:79:5c:f7:de:5b:
b9:cb:24:d9:77:fe:be:e9:6b:f5:86:64:1b:57:b6:
0f:5c:ee:69:4b:a6:47:f5:f7:58:69:39:b7:da:63:
57:02:02:c4:a4:7a:90:19:cd:30:18:d1:8a:5c:53:
37:f1:89:19:32:3e:a0:7f:7e:03:37:59:14:67:62:
33:e4:11:c3:30:6d:a7:13:6f:d0:e7:89:5c:78:bc:
b8:2e:ba:f9:4e:e3:0a:ea:bf:11:1f:f6:cc:8c:4f:
f6:66:1c:66:e2:c0:aa:dd:b6:5d:2a:c9:9b:30:50:
7e:2b:e9:e5:86:8a:bf:8f:b4:c4:d9:47:5e:ca:f7:
43:43:f3:d0:c5:28:65:ce:8e:2f:df:be:03:e7:6c:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B8:8D:2F:14:C1:00:BF:15:A4:FD:67:35:6A:35:3D:7F:99:A0:E6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A7iNLxTBAL8VpP1nNWo1PX-ZoOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.209.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:8d:17:0b:2e:20:17:9e:85:58:2a:a5:4a:64:1c:19:84:28:
8d:d7:ac:66:39:c8:cb:18:d4:02:4c:58:fc:fd:a0:a9:a0:21:
80:1f:2b:ee:cc:22:9a:3a:bf:bb:e9:30:be:94:93:14:0e:68:
7d:43:25:6b:88:54:38:f8:2f:ff:ed:54:5e:ac:5b:70:d1:b2:
b2:f4:85:b1:ff:05:25:69:c8:cf:eb:30:29:31:ec:d2:f0:b0:
7f:7c:d2:19:5d:b4:23:3e:7e:81:6d:8b:46:53:ce:81:ff:52:
28:41:5c:52:a3:07:c6:a6:1d:65:fd:13:33:ba:ff:01:81:1a:
cb:5d:ab:9a:22:fb:af:9c:7c:1f:f8:b1:cd:38:6c:e7:e8:2d:
6a:99:b9:da:88:2c:f6:a4:f4:1d:11:b2:63:b1:c4:13:2b:2e:
cc:92:7b:a4:f5:fd:72:e2:40:86:3e:79:74:42:a2:9d:aa:f4:
ca:e7:bc:8b:c7:2d:40:bc:7f:50:98:b2:ce:b1:b2:30:f4:cf:
80:f1:e7:24:59:39:73:7f:6d:14:f7:be:cb:6e:36:8f:f2:a0:
79:3f:06:d5:c9:ee:e5:12:a9:16:67:75:14:8e:f6:0f:87:1a:
a1:ec:b8:b6:0e:90:d4:ee:f4:06:da:d7:f0:5b:ce:9e:de:c9:
89:2d:dd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:16 2026 by rpki-client