Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Bz8uo4KJaBo8_b2ekFzvAVQ5FT4.roa
File: Bz8uo4KJaBo8_b2ekFzvAVQ5FT4.roa (raw, json)
Hash identifier: hX2EqNngvyXKsCcRdKh1ulMXqBYPYo1ENSq0P+RLNNo=
Subject key identifier: 07:3F:2E:A3:82:89:68:1A:3C:FD:BD:9E:90:5C:EF:01:54:39:15:3E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E0D6A6ADA5C3CE918B8DCD186CC964492
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Bz8uo4KJaBo8_b2ekFzvAVQ5FT4.roa
Signing time: Sat 09 May 2026 15:45:38 +0000
ROA not before: Sat 09 May 2026 15:45:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209888
IP address blocks: 31.56.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:6a:6a:da:5c:3c:e9:18:b8:dc:d1:86:cc:96:44:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 9 15:45:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=073f2ea38289681a3cfdbd9e905cef015439153e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:3a:fc:70:d4:fd:f5:89:18:41:df:0b:77:
4a:52:0e:36:15:fa:06:37:2f:d1:60:bc:f6:b6:82:
a4:7b:65:02:b7:19:30:be:c7:35:6c:65:e9:21:92:
75:26:62:c3:4c:4c:1a:f3:c5:9f:36:1f:48:79:41:
12:15:98:1d:60:b6:6c:d4:06:46:e0:3c:14:a8:ca:
d8:44:e0:42:0c:71:a6:b9:fc:d5:26:18:38:35:c8:
3b:21:15:d3:87:4a:41:c5:c1:b0:f7:dc:88:17:bc:
72:5a:2a:51:4c:0d:61:f1:84:0e:1f:0e:9c:ff:db:
8a:6e:3b:f9:21:29:27:43:ea:ef:ec:e1:12:ab:90:
e5:66:a9:ed:b4:83:85:bf:3b:d0:9f:a6:9c:f0:1a:
56:9b:6c:90:27:f0:6b:40:0f:f8:b2:7c:01:3b:d2:
4b:48:bc:64:cb:69:86:b5:49:dc:82:81:d6:8d:13:
22:0b:da:09:9a:57:b0:44:8c:9a:d9:ff:05:88:c7:
1c:b1:ad:6d:0b:e7:e9:84:01:4a:b0:d3:9c:5a:92:
31:5e:15:64:0c:a9:f7:75:75:4c:bd:d0:0a:86:59:
a0:6f:cc:20:9e:6b:c0:6a:0a:8b:30:91:a9:b3:3c:
ab:8b:8c:d3:bf:81:89:22:16:8f:6a:a3:90:ca:08:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3F:2E:A3:82:89:68:1A:3C:FD:BD:9E:90:5C:EF:01:54:39:15:3E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Bz8uo4KJaBo8_b2ekFzvAVQ5FT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.60.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b9:3c:da:20:a7:38:89:04:78:23:fd:5a:fa:71:6d:ae:1e:
c7:18:21:ad:7a:d7:8c:03:ea:2b:b8:16:ea:77:f0:b7:74:b4:
b9:01:36:23:a7:89:fe:0f:27:ea:ad:23:9f:e8:bd:59:e7:b9:
0a:98:59:cd:e5:01:d3:37:6b:2b:2e:0d:0e:26:63:9d:ea:ae:
d1:fc:b2:5a:1a:55:68:d2:5d:18:05:e9:7b:a8:ad:61:5d:10:
c1:b6:6e:6a:de:e9:e4:95:f4:e2:e4:84:91:e1:60:f4:b8:bb:
58:be:36:7a:98:41:26:77:6e:4e:6b:b6:27:94:75:d6:89:42:
01:70:0d:98:bb:d8:22:b2:08:c6:3d:5c:31:bb:a4:bb:3f:a4:
5a:1e:d4:af:44:0e:8a:ff:58:68:c1:4d:36:ff:4b:ee:94:c9:
95:c5:60:19:8e:a0:17:e8:a2:e8:6b:2a:51:ab:66:ec:67:d3:
3d:61:72:3a:31:4b:65:a8:25:ec:24:9e:f3:d5:72:f5:f9:f2:
50:6b:b1:14:52:f4:b0:d4:ab:4a:50:71:4f:65:5e:15:d1:88:
43:d6:bf:c3:6b:83:e4:0c:b5:18:85:2d:1b:34:b6:21:01:4a:
db:1e:0f:13:13:09:4d:47:ca:83:31:b8:b1:0e:96:2c:77:f2:
86:9f:73:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:42 2026 by rpki-client